News – November 2015

Data on 5 Million Users Compromised in Breach at Toy Maker VTech
November 30, 2015
VTech, a company that manufactures electronic learning devices, baby monitors, toys, and other equipment, announced Monday that information from five million customer accounts, which include identity information belonging to children, were accessed in an attack earlier this month.

DNV GL reveals top ten cyber security vulnerabilities for the oil and gas industry
November 30, 2015
DNV GL is to deliver a study to the Lysne Committee (Lysneutvalget1) that reveals the top ten most pressing cyber security vulnerabilities for companies operating offshore Norway.

Iranian military spear-phish of US government employees detected first by Facebook
November 27, 2015
Cyber-espionage effort may be tied to the arrest of Iranian-American in Tehran.

Cyber security skills gap: ‘Pay more and the problem will go away,’ says Reuters IT security chief
November 27, 2015
The IT security “skills gap” could quickly be narrowed by simply paying security staff more.

Spending Review: Chancellor confirms £1.9bn cybersecurity funding
November 25, 2015
UK Chancellor George Osborne confirmed a £1.9 billion cybersecurity budget, just one of a number of tech measures announced the Autumn Statement.

Additional Self-Signed Certs, Private Keys Found on Dell Machines
November 24, 2015
Researchers at Duo Security found two more self-signed trusted root certificates on a Dell Inspiron 14-inch laptop.

Cybersecurity experts warn of new ModPOS malware targeting retail payment terminals
November 24, 2015
U.S. retailers are hunting for evidence of new breaches leading into the holiday shopping season after a cyber intelligence firm privately warned them about payment-card-stealing.

Stealthy GlassRAT Spies on Commercial Targets
November 23, 2015
A remote access Trojan used sparingly in targeted attacks has been found after living under cover for three years, undetected by most security gear.

India and Malaysia sign 3 MoUs including cyber security
November 23, 2015
India and Malaysia today signed three MoUs, including one on cyber security, as part of efforts to strengthen their bilateral strategic partnership.

Hacked Medical Devices May Be The Biggest Cyber Security Threat In 2016
November 23, 2015
Ransomware may be used on insulin pumps and pacemakers.

Attackers Embracing Steganography to Hide Communication
November 18, 2015
Researchers believe digital steganography has arrived as a legitimate method for attackers to use when it comes to obscuring communication between command and control servers.

Mixing ERP and production systems: Oil industry at risk, say infosec bods
November 18, 2015
Vulnerabilities and insecure installations in SAP business software and other enterprise systems might be used to interfere with loosely-couple but nonetheless connected industrial control systems.

Hacking group Strontium dogs NATO and government targets
November 18, 2015
There’s a new hacking team out there that’s proving surprisingly good at getting into government systems using social engineering tactics coupled with zero-day attacks in assaults that can last as long as a year.

Pilot group calls for rethink to aviation cyber security approach
November 17, 2015
This lack of cross-disciplinary expertise poses a problem for an industry that is seeking to buttress its cyber security.

Markets hack away at Cyber Security ETF
November 17, 2015
The PureFunds ISE Cyber Security ETF is facing a major test of its investment strategy.

UK Government To Invest £1.9bn In Cyber-Security
November 17, 2015
The funds will go in part toward establishing a National Cyber Centre aimed at countering cyber-threats to critical infrastructure

Southampton Cyber Security Academy targets security challenges
November 16, 2015
The University of Southampton has announced a new academy – the Southampton Cyber Security Academy (CSA) – aimed at meeting today’s digital security challenges.

India and UK join hands on terror, defence, cyber security
November 14, 2015
A new joint statement on defence and security has emerged as a major takeaway from the meetings between Prime Minister Narendra Modi and his British counterpart David Cameron on Thursday and Friday.

Cybersecurity driving federal IT markets
November 13, 2015
Cybersecurity in its many forms continues to act as a major force behind a huge slice of the U.S. economy.

Registration Now Live for SMi’s European Smart Grid Cyber Security Conference
November 10, 2015
SMi Group is proud to announce that the 6th annual European Smart Grid Cyber Security conference will take place in London on 7th-8th March, 2016.

Cyber attacks on energy supplies, nuclear power stations and defence industry double in 12 months
November 10, 2015
Major cyber attacks that could cripple Britain’s energy supplies, nuclear power stations and defence industry have doubled in a year, GCHQ has warned.

Government joins forces with industry to drive cyber security agenda
November 10, 2015
GCHQ and the Department for Culture, Media and Sport have launched CyberInvest, a new £6.5m industry and government scheme to support cutting edge cyber security research and protect the UK in cyber space.

Belgian court orders Facebook to stop tracking non-members
November 10, 2015
Judge threatens social network with fines of €250,000 a day over ‘datr’ cookie, which records visits to many websites whether or not user has Facebook account

Linux Ransomware targeting Servers and Threatening Webmasters to Pay
November 9, 2015
Linux.Encoder.1 ransomware targets Linux-powered websites and servers by encrypting MySQL, Apache, and home/root folders associated with the target site

Comodo Issues Eight Forbidden Certificates
November 9, 2015
Certificate authority Comodo admits it incorrectly issued eight certificates that include forbidden internal server names or reserved IP addresses.

New Family Of Android Malware Virtually Impossible To Remove
November 9, 2015
Malicious players have injected adware into tens of thousands of popular apps.

GCHQ and NCA join forces to police dark web
November 9, 2015
GCHQ and the National Crime Agency are to track down paedophiles and serious online criminals by using the techniques and expertise used to find terrorists

Airbus Defense Cuts Keys To Lock Up Cyber Security
October 8, 2015
Current cyber-security thinking is that a determined attacker will always defeat the most thorough defense – the main task is to make sure that they can’t steal any useful information or do any damage once they get inside.

Cameron orders simulated cyber attacks to test security
November 8, 2015
The Prime Minister has ordered simulated cyber attacks on every government department in order to find out how vulnerable Whitehall computers are to hackers.

Cybersecurity and the TPP
November 6, 2015
The newly released TPP could have a big impact on cybersecurity.

Search for Cybersecurity Professionals Fires Up With New NIST Heat Map
November 6, 2015
There are more than 200,000 positions available for cybersecurity professionals in organizations across the country, yet many of them sit vacant for months or even years.

Mozilla Embraces Private Browsing with Tracking Protection in Firefox 42
November 5, 2015
Mozilla has pushed a feature in Firefox live that allows users to block certain page elements while browsing privately.

As Cybersecurity Breaches Mount, IT Turns to Intelligence Exchanges
November 5, 2015
Peer-to-peer cybersecurity threat intelligence exchanges are becoming more popular among IT professionals, a recent survey found.

8th Annual Chief Information Security Officer Middle East Summit & Roundtable – full agenda announced
November 4, 2015 – PRESS RELEASE
As regional governments and companies continue investing heavily to protect, detect, and react to global cyber threats, MIS Training Institute plays a vital role in reducing cybercrime by providing a platform for regional, national, and international cooperation and addressing urgent cyber security challenges at the 8th Chief Information Security Officer Middle East Summit & Roundtable 2016.

Fourth Person Bailed Over TalkTalk Hack
November 4, 2015
A 16-year-old boy from Norwich has been bailed after being arrested in connection with alleged data theft from TalkTalk.

The urgent need for cyber security talent in the UK
November 3, 2015
2015 Global Cyber Security Status Report by ISACA found that a shocking 87 per cent of UK business and IT professionals believe there is a shortage of cyber security professionals

Internet firms to be banned from offering unbreakable encryption under new laws
November 2, 2015
Internet and social media companies will be banned from putting customer communications beyond their own reach under new laws to be unveiled on Wednesday.

U.S. and U.K. to Hold Joint Financial Cyber Security Exercise
November 1, 2015
The U.S. and British governments will hold a joint exercise to test cyber security and information sharing arrangements involving global financial institutions, according to the U.K. National Computer Emergency Response Team.