News

According to the Singapore Cyber Landscape 2019 report released Friday by the Cyber Security Agency of Singapore (CSA), cybercrime accounted for 26.8% of all crimes last year with e-commerce scams being the most popular. In 2018, there were a total of 6,215 cybercrime cases. Last year, this increased to 9,430 cases. Typically, victims of e-commerce scams were lured by attractive online deals on items such as electronic gadgets and event tickets. Source: ZD Net

Two UK-based companies, a technology/software vendor as well as a major financial institution, have been forced by a Chinese bank to install tax software on their systems. However, the software was compromised with malware. "Discussions with our client revealed that was part of their bank's required tax software," Trustwave said today. "They informed us that upon opening operations in China, their local Chinese bank required that they install a software package called Intelligent Tax produced...

A European bank has fallen victim to a huge distributed denial-of-service (DDoS) attack that sent to its networking gear a flood of 809 million packets per second (PPS). This attack is potentially the largest one to have ever occurred with a relatively small footprint of just 418Gbps. DDoS attack differentiates depending on the method used. Their intensity is measured in bits per second (BPS), packets for second (PPS), or requests per second (RPS). BPS attacks...

Coronavirus training resources are being used as a phishing ploy as COVID-19 restrictions lift and employees begin returning to the workplace. This phishing campaign leverages new training programs that are required for employees to undertake, in order to comply with coronavirus regulations. Specifically, the campaign targets Office 365 users and sends a fraudulent link for registration. According to a report by Check Point Research, the link redirects users and asks for them to input their...

Following San Francisco, Boston is now the second-largest city in the world to ban the use of facial recognition technology by police and city agencies, as well as the procurement of facial surveillance from a third party. This was determined on Wednesday, with a veto-proof majority and is with Mayor Martin J. Walsh who will review it. In support of this ban, Councilor Ricardo Arroyo cited the 2018 MIT study which found an error rate...

South Korean multinational LG Electronics have supposedly had their website breached and locked by Maze ransomware operators. No details about this attack have been released as of yet, but the cyber criminals claim to have stolen proprietary information for projects involving big US companies. If their ransom demands are not met, or contact with the breached entity halts, these operators publish the information they have. Source: Bleeping Computer

Sony today announced the launch of a public PlayStation bug bounty program to pay security researchers and gamers for security vulnerabilities found in PlayStation 4 devices, the PlayStation Network domains. According to the company's new PlayStation bug bounty program (aka Vulnerability Disclosure Program) hosted on HackerOne, Sony wants the research community to report any issues found in the PlayStation 4 system, operating system, accessories, and the PlayStation Network. Sony explains that only "submissions on the current released or...

Google is changing its default settings to automatically delete some of the data it collects about users. Web and app activity, including a log of website searches and pages visited, as well as location data, will now be wiped after 18 months. YouTube histories - including which clips were watched and for how long - will be erased after 36 months. The changes apply to new accounts only but existing users will soon be shown...

The US Federal Bureau of Investigation sent out on Tuesday a security alert to K12 schools about the increase in ransomware attacks during the coronavirus (COVID-19) pandemic, and especially about ransomware gangs that abuse RDP connections to break into school systems. The alert, called a Private Industry Notification, or PIN, tells schools that "cyber actors are likely to increase targeting of K-12 schools during the COVID-19 pandemic because they represent an opportunistic target as more...

Business consulting firm Frost & Sullivan Inc. has suffered a data breach and data stolen from the firm appeared for sale on a hacker forum. The Mountain View, California-based company has a global presence with 40 offices across six continents. It offers services such as market research, analysis, growth strategy consulting and corporate training. The data hack came to light after a hacking group known as “KelvinSecurity Team” offered data stolen from the company on a...