---

Meant to Combat ID Theft, Unemployment Benefits Letter Prompts ID Theft Worries

Millions of Americans now filing for unemployment will receive benefits via a prepaid card issued by U.S. Bank, a Minnesota-based financial institution that handles unemployment payments for more than a dozen U.S. states. Some of these unemployment applications will trigger an automatic letter from U.S. Bank to the applicant. The letters are intended to prevent identity theft, but many people are mistaking these vague missives for a notification that someone has hijacked their identity.

---

Week in security with Tony Anscombe

COVID-19 and digital transformation – How personal data ends up in spam feeds – Common password mistakes and what to do instead

The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

---

Scams to watch out for not just this Mother’s Day

As you rush to buy something for your mom, con artists will be trying to make a dent in your wallet. Here are some common types of fraud to look out for not only this Mother's Day.

The post Scams to watch out for not just this Mother’s Day appeared first on WeLiveSecurity

---

Dating app MobiFriends silent on security breach impacting 3.6 million users

The personal details of 3.68 million MobiFriends users have been posted online in April 2020.

---

Hacker gains access to a small number of Microsoft's private GitHub repos

Hack considered harmless as the hacker did not gain access to the source code of any major Microsoft apps.

---

Early access to superannuation paused as police freeze $120,000 in allegedly stolen funds

‘Sophisticated’ identity theft attack leads to Australian Tax Office stopping early super withdrawals until Monday

• Sign up for Guardian Australia’s daily coronavirus email
• Download the free Guardian app to get the most important news notifications

Allegations of identity theft involving 150 Australians have forced the government to pause the early release of superannuation, after police froze $120,000 believed to have been ripped off from retirement savings.

On Friday the assistant treasurer, Michael Sukkar, announced the Australian Tax Office would pause requests for early access of superannuation until Monday “out of an abundance of caution” to consider further anti-fraud protection.

Related: Under-40s twice as likely to access their super early under coronavirus scheme, survey finds

Related: Should I access my super early during the coronavirus? Here's how it will impact your money

Continue reading...

---

Cyber Subterfuge and Curious Sharks Threaten the World's Subsea Fiber-Optic Cables

Malware, spies, and hackers, plus erosion and sharks, pose huge risks to the fiber optics that transmit almost all the world's data.

---

Cyber Subterfuge and Curious Sharks Threaten the World's Subsea Fiber-Optics Cables

Malware, spies and hackers, plus erosion and sharks, threaten fiber-optics that transmit almost all the world's data

---

Malicious Bots Infiltrate Online Food Delivery

With grocery delivery in higher demand than ever, new add-ons have emerged to secure slots for consumers, presenting a new pathway for bad bots to wreak havoc.

---

Microsoft: 150 million people are using passwordless logins each month

Internally, 90% of Microsoft employees already use a passwordless authentication solution.

---

Blue Mockingbird Monero-Mining Campaign Exploits Web Apps

The cybercriminals are using a deserialization vulnerability, CVE-2019-18935, to achieve remote code execution before moving laterally through the enterprise.

---

Microsoft Identity VP Shares How and Why to Ditch Passwords

Passwords are on their way out, says Joy Chik, who offers guidance for businesses hoping to shift away from them.

---

Mac RAT Rides 2FA App Onto Systems

The new macOS remote access Trojan from the Lazarus Group uses a two-factor authentication app as its delivery mechanism.

---

Cisco Fixes High-Severity Flaws In Firepower Security Software, ASA

Cisco has fixed 12 high-severity flaws in its Adaptive Security Appliance software and Firepower Threat Defense software.

---

Now More Than Ever? Securing the Software Life Cycle

The more things change, the more they stay the same. That's true for software security, even in these turbulent times.

---

Zoom Beefs Up End-to-End Encryption to Thwart ‘Zoombombers’

As the company continues to battle security woes, it has acquired Keybase to boost security and privacy. A full cryptographic draft architecture will be available on May 22.

---

Zoom Acquires Keybase, Plans for End-to-End Encrypted Chats

The company's first acquisition to date is part of a 90-day plan to improve security in its video communications platform.

---

Tech Support Scam Uses Child Porn Warning

A new email scam is making the rounds, warning recipients that someone using their Internet address has been caught viewing child pornography. The message claims to have been sent from Microsoft Support, and says the recipient's Windows license will be suspended unless they call an "MS Support" number to reinstate the license, but the number goes to a phony tech support scam that tries to trick callers into giving fraudsters direct access to their PCs.

---

Threat-Modeling Basics Using MITRE ATT&CK

When risk managers consider the role ATT&CK plays in the classic risk equation, they have to understand the role of threat modeling in building a complete risk scenario.

---

Cybersecurity Home School: Garfield Teaches Security

The famous cartoon cat can help kids ages 6 to 11 learn to be more secure when they're online.