News – June 2017


  • Apple Mac computers targeted by ransomware and spyware

    June 13, 2017

    Mac users are being warned about new variants of malware that have been created specifically to target Apple computers. One is ransomware that encrypts data and demands payment before files are released. The other is spyware that watches what users do and scoops up valuable information. Experts said they represented a threat because their creators were letting anyone ...

  • Blinking Router LEDs Leak Data From Air-Gapped Networks

    June 12, 2017

    Researchers have uncovered a new data extraction hole inside air-gapped networks that takes advantage of the blinking LED lights on top of routers to steal data. In a report published last week, researchers at Ben-Gurion University in Israel demonstrated how a router or switch running malware called xLed could use the flashing LED lights as a ...

  • Dangerous Malware Discovered that Can Take Down Electric Power Grids

    June 12, 2017

    Last December, a cyber attack on Ukrainian Electric power grid caused the power outage in the northern part of Kiev — the country’s capital — and surrounding areas, causing a blackout for tens of thousands of citizens for an hour and fifteen minutes around midnight. Now, security researchers have discovered the culprit behind those cyber attacks ...

  • German police nick alleged admin of dark web gun sales site

    June 12, 2017

    German police have arrested a man they suspect of being the administrator of a dark net website. The site is said to have been used to buy a gun used in a 2016 mass murder. The unnamed 30-year-old man was arrested on 8 June in “south west Germany”, according to Sky News. The server used to host ...

  • Hackers Started Using “SambaCry Flaw” to Hack Linux Systems

    June 10, 2017

    Two weeks ago we reported about a 7-year-old critical remote code execution vulnerability in Samba networking software (re-implementation of SMB networking protocol) that allows a remote hacker to take full control of a vulnerable Linux and Unix machines. To know more about the SambaCry vulnerability (CVE-2017-7494) and how it works, you can read our previous article. At ...

  • Hovering Over a Link in Malicious PowerPoint Can Infect You with Banking Trojan

    June 9, 2017

    Hackers are becoming more and more innovative when it comes to finding ways to infect your computer. This time, you could get infected if you so much as hover your mouse over a link embedded in a malicious PowerPoint file. According to security firm Trend Micro, this technique is employed by a Trojan downloader which has ...

  • New SEC enforcement chiefs see cyber crime as biggest market threat

    June 9, 2017

    Hackers are increasingly breaking into brokerage accounts to steal assets or make illegal trades, prompting U.S. securities regulators to start tracking cyber crimes more closely, two newly appointed enforcement officials said in an interview on Thursday. On Thursday, the U.S. Securities and Exchange Commission named Stephanie Avakian and Steven Peikin as new co-directors of enforcement. In an ...

  • Infrastructure Software Vulnerabilities Raise Concern Among Cybersecurity Experts

    June 9, 2017

    Vulnerabilities in software that automates everything from factories to traffic lights has become the nation’s top cybersecurity threat, an agent on the FBI’s Denver Cyber Task Force said Thursday in Colorado Springs. Supervisory control and data acquisition software is used to control — sometimes remotely — many types of devices in the energy, transportation, manufacturing and ...

  • Inmarsat launches solution to boost cyber security

    June 9, 2017

    Inmarsat is launching a unified threat management (UTM) solution to take away cyber security risks. The solution – which will be available later this year – will be embedded within existing hardware onboard and is described as a ‘virtual machine’ that can be provisioned at any time, to provide data inspection and protection for the cyber ...

  • Microsoft To Buy Cybersecurity Firm Hexadite

    June 9, 2017

    Microsoft Corp. Thursday said it has signed an agreement to acquire U.S.- Israeli Cybersecurity startup Hexadite, which will add new tools and services to Microsoft’s enterprise security offerings. The financial terms were not disclosed, while the price reportedly would be around $100 million. Hexadite, headquartered in Boston with its research and development center in Israel, provides ...

  • “Script Kiddies” May Be Behind Hack That Caused a Crisis in the Middle East

    June 8, 2017

    The other week, Qatar’s state-owned television station was hacked, with false information being planted there. Now, it is revealed that this may be the work of what the tech world calls “script kiddies.” The hack of the Qatar News Agency and Qatar’s television station was “extremely easy to carry out,” sources told Motherboard. It seems the ...

  • 22 Apple Distributors Arrested for Selling Customers’ Data in $7.4 Million

    June 8, 2017

    Chinese authorities have announced the arrest of around 22 distributors working as Apple distributors as part of a $7 million operation, who stole customers’ personal information from an internal Apple database and illegally sold it to Chinese black market vendors. According to a report from Chinese media, this underground network reportedly consisted of employees working in ...

  • Honeywell Process Solutions to establish cybersecurity center of excellence in Singapore

    June 8, 2017

    Honeywell Process Solutions (HPS; Houston; www.honeywellprocess.com), with the support of the Singapore Economic Development Board (EDB), will  establish a new industrial cybersecurity center of excellence (COE) for Asia Pacific in Singapore. The COE will feature a state-of-the-art cybersecurity research and development lab, an advanced training facility and a security operations center that provides managed security ...

  • Huawei appoints cyber security officer for Australia

    June 8, 2017

    Huawei has appointed a cyber security officer for its operations in Australia. Malcolm Shore, who started this month, has worked for the New Zealand government overseeing its information systems. He follows the example of John Suffolk, the former UK government chief information officer, who has been with Huawei as global cyber security and privacy officer ...

  • INTERPOL World 2017 to Showcase the Latest Innovations for Future Security Challenges

    June 8, 2017

    SINGAPORE, 8 June 2017 – The stage is set for INTERPOL World 2017 as it readies to welcome over 10,000 law enforcement agencies, government bodies, academia, solution providers, security professionals, and buyers from around the globe. In its second edition this year, INTERPOL World, comprising the INTERPOL World Congress and Exhibition, promises an immersive experience covering ...

  • The Behavioral Economics of Why Executives Underinvest in Cybersecurity

    June 7, 2017

    Determining the ROI for any cybersecurity investment, from staff training to AI-enabled authentication managers, can best be described as an enigma shrouded in mystery. The digital threat landscape changes constantly, and it’s very difficult to know the probability of any given attack succeeding — or how big the potential losses might be. Even the known ...

  • Europe faces 350k shortage of cyber security staff by 2022

    June 6, 2017

    Europe faces a projected skills gap of 350,000 cyber security workers by 2022, according to a new report. The 2017 Global Information Security Workforce study commissioned by the information security certification body ISC2 called for employers to do more to embrace newcomers and a changing workforce. The survey was based on 19,000 cyber security professionals around the ...

  • Federal task force: Here’s how to fix healthcare cybersecurity

    June 6, 2017

    A federal task force released its long-awaited cybersecurity recommendations report Friday evening. The far-reaching report from the Health Care Industry Cybersecurity Task Force was mandated by the Cybersecurity Act of 2015. The task force convened 21 wide-ranging stakeholders in medical cybersecurity, ranging from device manufacturers to hospitals to consumer advocates. Workforce issues are the “most foundational problem” for ...

  • Cybersecurity Is Dead

    June 6, 2017

    Well-known cybersecurity firm Crowdstrike greets travelers who arrive at San Francisco International Airport with a rather bold claim advertised throughout the terminals. The advertisements pose a pernicious yet seemingly tidy answer: “Yesterday’s Antivirus Can’t Stop Today’s Cyber Attacks. Crowdstrike Falcon Can.” Irresponsible hyperbole? Or is it a pitch made in good faith, albeit one as confident ...

  • Cybercrime agreement to be signed by global leaders

    June 3, 2017

    Global leaders are preparing to agree how police access digital evidence which may physically be located in another jurisdiction. The amendment to the Budapest Convention on Cybercrime will allow signature states’ police forces to receive digital evidence in criminal investigations in a timely manner – something those forces complain is currently a major problem. Since the opening ...