News

In a major privacy breach, the usernames and passwords of more than a quarter of a million Trident Crypto Fund customers have been stolen and published online. Technical director of cybersecurity firm DeviceLock Ashot Oganesyan told Russian news outlet IZ the database — which contains email addresses, cellphone numbers, encrypted passwords and IP addresses — had been uploaded to various file sharing websites on February 20. Source: Cointelegraph

  T-Mobile has begun notifying customers of a security breach that might affect an undetermined number of them, possibly revealing their names and addresses, phone numbers, account numbers, rate plans and features, and billing information. Wireless carriers are a prime target for hackers because they hold large databases of customers and data that command a high value on the black market. Even if no financial data is leaked, it’s still a significant security issue. Source:...

  The research arm of security firm Check Point has found that cybercriminals around the globe have launched phishing and other malware deployment schemes that ride on people's thirst for information about the coronavirus. In its most recent report, it found that coronavirus-related websites created in January and February of this year are "are 50% more likely to be malicious" than other websites created in the same time period. That means that if you search...

A Virgin Media database containing the personal details of 900,000 people was left unsecured and accessible online for 10 months, the company has admitted. The information was accessed "on at least one occasion" by an unknown user. The database, which was for marketing purposes, contained phone numbers, home and email addresses. Source: BBC

A vulnerability was found in most of the Intel chipsets released in the last five years that could allow an attacker to extract the chipset key stored on the PCH microchip and obtain access to data encrypted with the key. The issue, CVE-2019-0090, was found by Positive Technologies and resides in the Intel Converged Security and Management Engine. Positive Technologies has informed Intel of the problem. Source: SC Magazine

By Rita Selvaggi, CEO of ActivTrak The global reach of the coronavirus has elevated the discussion around the need for “social distancing” and working remotely to avoid spreading the infectious virus. Global companies like IBM, Goldman Sachs, and PwC are asking employees to work from home, as are smaller organisations, such as Seattle-based online payment company Stripe. As organisations consider having employees work from home on a more massive scale, it’s important to recognise that...

According to the FBI Internet Crime Complaint Centre’s 2019 Internet Crime Report, phishing was the top crime reported by victims in 2019 with U.S. based fraud losses in excess of $3.5 billion. Other forms of social engineering that use phishing emails as an entry include Business Email Compromise (BEC), which has cost the global economy $26 Billion in reported losses. As such, the new partnership announced today between KnowBe4 and Agari could not have come...

A class-action lawsuit has been filed against gaming company Zynga Inc. over a data breach that exposed the personal information of 173 million users.  The casual-gaming giant, which made its name with Farmville, warned mobile players of Words With Friends and Draw Something to update their passwords after the breach occurred in September 2019. Source: Info Security

Boots has suspended payments using loyalty points in shops and online after attempts to break into customers' accounts using stolen passwords. Customers will not be able to use Boots Advantage Card points to pay for products while the issue is dealt with. Boots said none of its own systems were compromised, but attackers had tried to access accounts using reused passwords from other sites. Source: BBC

  Mobile malware attacks are becoming more common as cyber criminals increasingly turn their attention towards smartphones – and they're ensuring that malicious activity is harder to uncover. According to figures in the newly released McAfee Mobile Threat Report, the total number of detections for different types of mobile malware reached over 35 million during the final quarter of 2019, representing a jump of 10 million detections compared with 2018. Source: ZD Net