News

Smart TVs selling under SUPRA brand-name have been found vulnerable to an unpatched remote file inclusion vulnerability that could allow WiFi attackers to broadcast fake videos to the television screen without any authentication with the television. SUPRA is a lesser-known Russia electronics brand on the Internet that manufactures several affordable audio-video equipments, household appliances and car electronics, most of which are being distributed through Russian, Chinese, Russian and UAE-based e-commerce websites. Discovered by Dhiraj Mishra...

A new phishing campaign is underway that pretends to be a list undelivered email being held for you on your Outlook Web Mail service. Users are then prompted to decide what they wish to do with each mail, with the respective links leading to a fake login form. This campaign is just as interesting as it uses the subject line of "Notifications | undelivered emails to your inbox" and pretends to be a list of...

Standard security practices among IT companies do not necessarily carry over to the IT departments of other firms, leading to products sold without basic security measures in place. Vulnerabilities discovered in industrial equipment increased 30% in 2018, according to security research firm Positive Technologies, which announced Thursday the discovery of vulnerabilities in APROL industrial process automation systems made by B&R Automation. Source: Techrepublic

US government workers may be placing America's national security at risk as there is no official policy banning them from running their smartphones' personal and official internet traffic through untrustworthy foreign-hosted VPN services. Source: The Register

Oman continues to live up to its reputation as a regional cybersecurity heavyweight, after it was revealed that the country thwarted more than 2.6 billion malicious attempts to access its public and private systems in 2018 – at least three times as many as in 2017. Source: The Daily Swig

British universities are facing a barrage of cyber attacks as hackers attempt to steal government-funded scientific, medical and defence research. A survey of senior IT leaders at 68 universities found that 24 per cent believed their security and defence research had been infiltrated, while 53 per cent said they feared they had been subject to a cyber attack carried out by foreign hackers. Source: New Statesman

Canadian government regulators are using the country’s powerful new anti-spam law to pursue hefty fines of up to a million dollars against Canadian citizens suspected of helping to spread malicious software. Source: Krebs on Security

Infoblox Inc., the leader in Secure Cloud-Managed Network Services, today announced BloxOne™ Threat Defense, the industry’s first hybrid security offering that leverages DNS as the first line of defence to detect and block today’s sophisticated cyber threats. With a scalable hybrid architecture, BloxOne Threat Defense secures enterprises’ existing networks as well as digital transformations like cloud, IoT and SD-WAN deployments. It makes an organisation’s threat analysts more productive and reduces the total cost of enterprise...

ThreatAware - the cybersecurity monitoring and compliance platform - has added a new reporting feature which provides businesses with a full audit trail on any aspect of their IT security. It allows users to create a full report on the status of their cybersecurity and record any actions they have taken - whether they are preparing for an ISO audit and want to show they are complying with security standards, to demonstrate their response to...

Experts from Positive Technologies ICS Security and Application Analysis departments found multiple vulnerabilities in 12 components of APROL industrial process automation systems made by B&R Automation (Austria). This system is used in the oil and gas industry, energy, mechanical engineering, and other industries. The most dangerous are five vulnerabilities (listed 5, 7, 8, 10, 11 in the manufacturer's notice) allowing remote attackers to run arbitrary code in the APROL system. Because vulnerable components are used...