News

Images of tens of thousands of travellers crossing the United States' border have been stolen from an immigration subcontractor in a data breach, US media reported on Monday. The images were snatched from the network of a subcontractor for US Customs and Border Protection (CBP), after the company copied data to its database without the agency's consent, according to The New York Times. The data included images of drivers in their cars and license plates...

Ransomware attacks hit indiscriminately and sometimes they may affect charitable organizations that can’t afford to surrender to the demand. Auburn Food Bank in King County, Washington, fell victim to a ransomware strain known as GlobeImposter 2.0, which encrypted all computers on their network. Only one machine escaped the attack and is currently used to maintain charity activity. Source: Bleeping Computer

Multiple class action lawsuits have been filed against Quest Diagnostics Incorporated and Laboratory Corporation of America Holdings (LabCorp) since they disclosed that the personal and medical information of over 19 million of their customers was exposed in a data breach. The data breach which impacted the clients of both companies was caused by the web payment page breach of billing collections service provider American Medical Collection Agency (AMCA) between August 1, 2018, and March 30,...

Emails delivering RTF files equipped with an exploit that requires no user interaction (except for opening the booby-trapped file) are hitting European users’ inboxes, Microsoft researchers have warned. The exploit takes advantage of a vulnerability in an older version of the Office Equation Editor, which was manually patched by Microsoft in November 2017. Source: HelpNet Security

Two security researchers have recently revealed vulnerabilities that can be exploited remotely to retrieve sensitive data stored inside special computer components known as HSMs (Hardware Security Modules). "The presented attacks allow retrieving all HSM secrets remotely, including cryptographic keys and administrator credentials," researchers said. Furthermore, the two also said they can "exploit a cryptographic bug in the firmware signature verification to upload a modified firmware to the HSM." Source: ZDNet

With Android being an open source type of OS, it's no surprise that the OS is at risk of being hacked. But now it seems that the risk is a lot closer than expected, as hundreds of apps on the Google Play Store were found to have the potential of breaking user's smartphones. https://blog.lookout.com/beitaplugin-adware that 238 apps on the Google Play Store can break your phone. Source: Stuff

The Emuparadise retro gaming site has been reported to have suffered a data breach in April 2018. This breach exposed account information for approximately 1.1 million Emuparadise forum members. Over the weekend, people have been reporting receiving notices from Have I Been Pwned and HackNotice stating that their information was found as part of a Emuparadise data breach in April 2018. Source: Bleeping Computer

A10 Networks (NYSE: ATEN) adds Zero-day Automated Protection (ZAP) capabilities to its leading Thunder Threat Protection System (TPS) family of Distributed Denial of Service (DDoS) defence solutions. The ZAP capabilities automatically recognise the characteristics of DDoS attacks and apply mitigation filters without advanced configuration or manual intervention. This speeds the response to the increasingly sophisticated multi-vector attacks to minimise downtime and errors and lower operating costs. Today’s DDoS attacks are more prevalent, multi-vector in nature...

By David Orme, Senior Vice President at IDEX Biometrics ASA Cast your mind back to April last year. Your inbox filled with email marketing from services and newsletters you signed up to over the years asking you to re-subscribe to their mailing lists – and it’s likely you took the opportunity to unsubscribe to many. This was the first time the general population had been confronted with the realities of the General Data Protection Regulations,...

Kaspersky researchers have uncovered a highly sophisticated cyberespionage campaign aimed at stealing information from South Asian diplomatic, government and military entities. The campaign lasted almost six years and had ties to other recent attacks detected in the region. Further investigation into the tools and methods used in the campaign led researchers to the conclusion that the attacker behind it is the PLATINUM group – a cyberespionage actor that they thought had gone. For the activity...