News

Federal agencies investigating breach, reported to be a ransom demand. Hackers have “scrambled” patient files at a Melbourne heart specialist clinic in what was reportedly a ransom attempt. The Australian Cyber Security Centre has confirmed it’s providing advice and assistance to the Melbourne Heart Group, which leases practice space from the Cabrini hospital in Malvern. “As the matter is ongoing, it is not appropriate to comment further,” a spokesman from the centre said. The Australian...

Attack is compatible with the activity of an Iranian state actor, U.S. cyber research company alleges. Hackers based in Iran and implicated in attacks on the U.S. and Western allies were behind a computer breach of Australia’s Parliament and political parties, a U.S. cyber research company alleged. Source: Wall Street Journal

The company has confirmed the attempted attack that took out its e-mail system, forcing employees to turn to other forms of communication to continue working. Toyota’s Australian subsidiary has been hit by a cyber attack, leaving employees without access to their e-mail messages for days, according to local media reports. In a statement today, Toyota Australia confirmed that it had been a victim of an “attempted cyber attack”, and that no private employee or customer...

Microsoft releases updates to fix bug that froze systems when IIS handled malformed HTTP/2 requests. The Microsoft Security Response Center published yesterday a security advisory about a denial of service (DOS) issue impacting IIS (Internet Information Services), Microsoft's web server technology. According to Microsoft, IIS servers shipped with Windows 10 and Windows Server 2016 are impacted by a vulnerability when processing HTTP/2 requests. Source: ZDNet

baramundi software AG and Paessler AG have released a new interface as part of their partnership enabling the efficient connection of the Paessler PRTG Monitoring Software and the baramundi Management Suite. “In recent years, the number of endpoints to be managed in corporate networks has risen massively,” says baramundi CEO, Uwe Beikirch. “This trend is likely to continue for the foreseeable future. For administrators, this means a sharp increase in workload and complexity. You need...

Group FaceTime calls on the iPhone and other Apple products are still not working properly, after the company rushed to fix a major bug. Earlier this month, it emerged that it was possible to listen in on people through their iPhone by exploiting a bug in FaceTime, the app used to make audio and video calls over the internet. By adding someone into a group conversation, their phone would start ringing – and during that entire...

Privacy warriors have filed fresh evidence in their ongoing battle against real-time web ad exchange systems, which campaigners claim trample over Europe's data protection laws. The new filings – submitted today to regulators in the UK, Ireland, and Poland – allege that Google and industry body the Interactive Advertising Bureau (IAB) are well aware that their advertising networks' business models flout the EU's privacy-safeguarding GDPR, and yet are doing nothing about it. The IAB, Google – which is...

The majority of vulnerabilities in 2018 were associated with network vulnerabilities, while less than 20% were associated with web applications and APIs, according to the fourth annual Vulnerability Stats Report from edgescan. When it comes to breaches, though, web application security remains the area of greatest risk. “The percentage of high and critical risks combined, compared to all discovered risks is still high at 19.2% for public internet-facing (external) applications and 24.9% for non-public or internal applications,”...

Microsoft has expanded the reach of its cyber security service for political organisations in Europe, after detecting a fresh wave of attacks from Russian hackers. The firm's vice president for customer security and trust Tom Burt said Microsoft's Threat Intelligence Centre (MSTIC) had discovered attacks on employees of the German Council of Foreign Relations, and European offices of the Aspen Institute and the German Marshall Fund. Source: CityAM 

Thousands of websites are being hit by cyber-thieves who implant code to scoop up payment card numbers, research suggests. Security giant Symantec found more than 4,800 websites were being hit by these "form-jacking" attacks every month. High-profile victims of these attacks include airline BA and Ticketmaster. Online crime groups had turned to the attacks as other more established techniques proved less and less lucrative, Symantec said. Source: BBC