Cybersecurity News
When in Doubt: Hang Up, Look Up, & Call Back
Many security-conscious people probably think they'd never fall for a phone-based phishing scam. But if your response to such a scam involves anything other than hanging up and calling back the entity that claims to be calling, you may be in for a rude awakening. Here's how one security and tech-savvy reader got taken for more than $10,000 in an elaborate, weeks-long ruse.23 April 2020
Demand for Cybersecurity Jobs Declines But Still Outperforms Other Sectors
While companies are cutting back on plans to hire, cybersecurity and the technology industry as a whole are doing better than the general economy.23 April 2020
White-Hat Hackers Help 'Fold' COVID-19 Proteins
A grassroots effort provides scientists with computing power to help simulate the novel coronavirus' proteins and come up with therapeutic solutions for the disease.
23 April 2020
Public Sector Ransomware Attacks Rage On: Can Your Organization Repel Them?
To pay or not to pay continues to be the question as ransomware targets cities, even amid COVID-19.
23 April 2020
WHO, CDC and Bill and Melinda Gates Foundation Victims of Credential Dump, Report
Hackers have used credentials allegedly stolen from the WHO, CDC and other notable groups to spread coronavirus misinformation online.
23 April 2020
A Dozen Nation-Backed APTs Tap COVID-19 to Cover Spy Attacks
Iran's Charming Kitten and other nation-state actors are using the coronavirus pandemic to their advantage, for espionage.
23 April 2020
Skype Phishing Attack Targets Remote Workers’ Passwords
Attackers are sending convincing emails that ultimately steal victims' Skype credentials.
23 April 2020
The Evolving Threat of Credential Stuffing
Bots' swerve to focus on APIs means businesses must take the threat seriously and take effective action.23 April 2020
Fake Skype, Signal Apps Used to Spread Surveillanceware
Threat groups are increasingly relying on trojanized apps pretending to be legitimate - such as Skype or Signal - but are really spreading surveillanceware.
23 April 2020
NSA shares list of vulnerabilities commonly exploited to plant web shells
NSA and ASD issue joint advisory on detecting and dealing with web shells.23 April 2020
As we turn to remote working, Malwarebytes joins VPN fray
The new Malwarebytes Privacy VPN has been launched at a time VPN adoption is likely on the rise.23 April 2020
SBA reveals potential data breach impacting 8,000 emergency business loan applicants
A US Senator says that the White House has “got to get it together.”23 April 2020
ESET takes down VictoryGate cryptomining botnet
More than 35,000 computers believed to have been infected, according to ESET's sinkhole data.23 April 2020
Scammers are now taking advantage of US small business relief fund in phishing emails
New campaigns are capitalizing not just on coronavirus fears but also on the outbreak’s financial ramifications.23 April 2020
Following ESET’s discovery, a Monero mining botnet is disrupted
ESET researchers discover, and play a key role in the disruption of, a 35,000-strong botnet spreading in Latin America via infected USB drives
The post Following ESET’s discovery, a Monero mining botnet is disrupted appeared first on WeLiveSecurity
23 April 2020
Email bungle at company seeking jobkeeper payments exposes staff's personal details
Names, addresses and birthdates of more than 100 people shared in privacy breach
The company responsible for delivering traffic reports on radio and TV stations across Australia accidentally sent out the dates of birth, names and home addresses of more than 100 current and former staff to potentially thousands of people as the company seeks to apply for the jobkeeper payments.
Australian Traffic Network provides short traffic report updates during news bulletins to 80 radio and television stations, including the ABC, Seven, Nine, 10, 2GB and Triple M.
Related: As Australia takes on Google and Facebook over news content, the world is watching | Margaret Simons
Continue reading...22 April 2020
Valve says it's safe to play CS:GO and TF2 after source code leaked online
Old 2017 source code for Counter-Strike: Global Offensive and Team Fortress 2 leaked online today on 4chan.22 April 2020
Attackers Prefer Ransomware to Stealing Data
Financial data is still in demand, but ransomware becomes the most popular way to try to cash in from compromised companies, according to Trustwave.22 April 2020
IBM Cloud Data Shield Brings Confidential Computing to Public Cloud
The Cloud Data Shield relies on confidential computing, which protects data while it's in use by enterprise applications.22 April 2020
Fast-Moving DDoS Botnet Exploits Unpatched ZyXel RCE Bug
The rapidly evolving Hoaxcalls botnet is exploiting an unpatched vulnerability in the ZyXEL Cloud CNM SecuManager in a bid to widen its spread.
22 April 2020