Cybersecurity News


FBI and CISA warn of major wave of vishing attacks targeting teleworkers

Hackers are calling employees working from home and tricking them into accessing phishing pages for corporate domains.
21 August 2020

University of Utah Pays $457K After Ransomware Attack

University of Utah Pays $457K After Ransomware Attack The university said that it paid $457,000 to retrieve a decryption key after a ransomware attack encrypted student and faculty data on its servers.
21 August 2020

Week in security with Tony Anscombe

This week, ESET researchers analyze fraud emails from the infamous Grandoreiro banking Trojan, impersonating the Agencia Tributaria, Spain’s tax agency. Our security expert Jake Moore demonstrates how easily it is to clone an Instagram account and lure people to give money; learn how to protect yourself. Finally, have you thought about what will happen to your

The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

21 August 2020

'Next-Gen' Supply Chain Attacks Surge 430%

Attackers are increasingly seeding open source projects with compromised components.
21 August 2020

Researchers Sound Alarm Over Malicious AWS Community AMIs

Researchers Sound Alarm Over Malicious AWS Community AMIs Malicious Community Amazon Machine Images are a ripe target for hackers, say researchers.
21 August 2020

News Wrap: AWS Cryptojacking Worm, IBM Privacy Lawsuit and More

News Wrap: AWS Cryptojacking Worm, IBM Privacy Lawsuit and More Threatpost editors discuss a cryptomining malware targeting AWS systems, a recent development in a lawsuit against the IBM-owned Weather Channel app, and more.
21 August 2020

Post-Pandemic Digitalization: Building a Human-Centric Cybersecurity Strategy

COVID-19 won't be the last major disruption of its kind. Instead, it is a glimpse into what may be to come as digitalization continues to affect all aspects of our lives.
21 August 2020

Cryptominer Found Embedded in AWS Community AMI

Cryptominer Found Embedded in AWS Community AMI Researchers advise Amazon Web Services users running Community Amazon Machine Images to verify them for potentially malicious code.
21 August 2020

Former Uber CSO Charged With Paying ‘Hush Money’ in 2016 Breach Cover-Up

Former Uber CSO Charged With Paying ‘Hush Money’ in 2016 Breach Cover-Up Joseph Sullivan allegedly paid off $100K to the hackers responsible for a 2016 data breach, which exposed PII of 57 million passengers and drivers.
21 August 2020

Grandoreiro banking trojan impersonates Spain’s tax agency

Beware the tax bogeyman – there are tax scams aplenty

The post Grandoreiro banking trojan impersonates Spain’s tax agency appeared first on WeLiveSecurity

21 August 2020

MPs criticise privacy watchdog over NHS test-and-trace data

MPs criticise privacy watchdog over NHS test-and-trace data

UK information commissioner ‘must ensure government uses public’s data safely and legally’

A cross-party group of more than 20 MPs has accused the UK’s privacy watchdog of failing to hold the government to account for its failures in the NHS coronavirus test-and-trace programme.

The MPs have urged Elizabeth Denham, the information commissioner, to demand that the government change the programme after it admitted failing to conduct a legally required impact assessment of its privacy implications.

Continue reading...
21 August 2020

University of Utah pays $457,000 to ransomware gang

University officials restored from backups, but they had to pay the ransomware gang to prevent them from leaking student data.
20 August 2020

Instacart discloses security incident caused by two contractors

Instacart says two employees at a third-party support vendor accessed "more shopper profiles than was necessary."
20 August 2020

Smart-Lock Hacks Point to Larger IoT Problems

Two recent reports on smart-locks vulnerabilities show that IoT vendors have a bigger job to do in ensuring their products are safely deployed and configured.
20 August 2020

Smart-Lock Hacks Point to Larger IoT Problems

Two recent reports on smart-locks vulnerabilities show that IoT vendors have a bigger job to do in ensuring their products are safely deployed and configured.
20 August 2020

Former Uber CSO charged for 2016 hack cover-up

DOJ officials say former Uber CSO Joe Sullivan lied to management about the security breach and paid hush money to the hackers.
20 August 2020

Former Uber CSO Charged in Hack Cover-up

The charges stem from a 2016 attack in which 57 million records were breached.
20 August 2020

IBM Settles Lawsuit Over Weather Channel App Data Privacy

IBM Settles Lawsuit Over Weather Channel App Data Privacy The lawsuit alleged that the IBM-owned Weather Channel mobile app did not let users know it was selling their geolocation data.
20 August 2020

ATM makers Diebold and NCR deploy fixes for 'deposit forgery' attacks

ATMs from the two companies had bugs that could have allowed card fraudsters to modify the amount of money they deposited on their card, and then abuse the new account balance for illegal cash withdrawals.
20 August 2020

Twitter Hack: The Spotlight that Insider Threats Need

The high profile attack should spur serious board-level conversations around the importance of insider threat prevention.
20 August 2020