News

Credit bureau Experian just fixed a weakness with a partner website that let anyone look up the credit score of tens of millions of Americans just by supplying their name and mailing address, KrebsOnSecurity learned. Though the flaw has been fixed according to Experian, the researcher, Bill Demirkapi, who reported the finding says he fears the same weakness may affect other lending websites that work with the credit bureau. Demirkapi found he could access the Experian...

Facebook threat intelligence analysts discovered recent activities linked to two known APT Groups that have been active since 2015. According to Facebook, the groups, AridViper and Preventive Security Service, used Android and Windows malware and advanced social engineering tactics in an effort to attack journalists, human rights activities and military groups in the Middle East. More specifically, the groups launched cyber-espionage campaigns in Palestine, Syria, Turkey, Iraq, Lebanon and Libya. Facebook's director for threat disruption...

An elderly woman has lost £23 Million to what could be the largest phone scam ever. The scam took place in Hong Kong in which the victim, who remains nameless, was contacted by someone pretending to be a Chinese official. The scammer tricked the woman in August last year, by telling her that her identity was being used in a money laundering scheme in China. She was told the situation was under control and in...

Jeremy Fleming, the head of intelligence at intelligence agency GCHQ has said that the technology on which we rely will no longer be shaped by the West. When addressed with the growing challenge from China, he claimed: "we have to keep evolving our approach if we're going to keep up." As an example he listed the so-called 'smart cities', which, in the future, will collect large amounts of personal data. In addition, he warned that:...

Moxie Marlinspike, CEO of encrypted messaging app Signal has found vulnerabilities in the software developed by Cellebrite. The vulnerabilities found in the data extraction company's code allow for arbitrary code execution on the device. Cellebrites products are mostly used by governments and the police to unlock any iOS and Android devices to extract data. Late last year it was announced that the Physical Analyzer also had access to data stored on Signal. In a blogpost,...

New figures published by the UK government show that almost half (49%) of UK residents have purchased at least one new smart device since the beginning of COVID-19. As a result, manufacturers of smart devices such as phones, speakers, and doorbells will need to provide customers with information about how long they will be guaranteed to receive crucial security updates. Everyday devices such as these (or smart watches, TVs, cameras, etc.) have many positive benefits,...

Global connectivity specialist Eseye and leading agentless device security platform provider Armis, today announced a strategic partnership and joint solution that enables organisations to deploy connected devices anywhere in the world with enterprise-class security and consistent, reliable cellular (4G/LTE/5G) connectivity.   Eseye’s unique Connectivity Management Platform enables devices to switch intelligently to any one of over 700 GSMA-compliant carriers to maximise uptime with greater than 98% global coverage. The Armis Agentless Device Security Platform provides...

Performanta, a fast-growing global provider of managed cyber security services to enterprise customers, today announced the acquisition of Identity Experts, a Microsoft Gold Security Partner and Identity & Access Management (IAM) specialist consultancy based in the UK. The move follows a significant investment round from Beech Tree Private Equity and will allow Performanta to extend important security capabilities further across the Microsoft portfolio – including Azure AD, Sentinel, ATP, O365 and IAM – that customers...

Domino's in India has suffered a data breach in which credit card details and personal information of both customers and employees have been exposed. The leaked information is being sold on the dark web, for which the hacker is demanding 10 BTC. Included in the data stolen are names, contact numbers, email IDs, addresses, credit card details and more. The total number of customers affected in the breach is still unknown, however the total size...

Cert-In, the Indian cybersecurity watchdog has recently issued a 'high' severity rating against WhatsApp and WhatsApp Business. The emergency response team has reported finding 'multiple' vulnerabilities within the mobile application, which could give hackers access to sensitive information.  A vulnerability note was released stating: “Successful exploitation of these vulnerabilities could allow the attacker to execute arbitrary code or access sensitive information on a target system." This issue only affects users still running an old version...