Top 10 Stories

When the chief of Microsoft Ukraine switched jobs to work for President Petro Poroshenko, he found that everyone in the office used the same login password. It wasn't the only symptom of lax IT security in a country suffering crippling cyber attacks. Sometimes pressing the spacebar was enough to open a PC, according to Dmytro Shymkiv, who became Deputy Head of the Presidential Administration with a reform brief in 2014. View Full Story ORIGINAL SOURCE:...

Whether it is underestimating cyber threats or overestimating employees' ability to cope with an attack, almost all SMBs exhibit more confidence than they should do A survey of 600 SMBs worldwide (200 each in the UK, USA and Australia) has shown that, globally, fewer than 30 per cent consider themselves completely ready to manage IT security - and are underestimating the threat of certain types of attack. View Full Story ORIGINAL SOURCE: Computing

HBO has become hackers’ latest entertainment industry target: attackers have breached the company’s servers, and they claim to have syphoned from them 1.5 terabytes of data. The breach has been confirmed by HBO, who said that proprietary information, including some of their programming, was compromised as a result of the “cyber incident,” but did not specify what specific data was stolen. View Full Story ORIGINAL SOURCE: Help Net Security

Hackers attending this weekend's Def Con hacking convention in Las Vegas were invited to break into voting machines and voter databases in a bid to uncover vulnerabilities that could be exploited to sway election results. The 25-year-old conference's first "hacker voting village" opened on Friday as part of an effort to raise awareness about the threat of election results being altered through hacking. View Full Story ORIGINAL SOURCE: Reuters

The following advisory describes a Remote Code Execution found in McAfee Security Scan Plus. An active network attacker could launch a man-in-the-middle attack on a plaintext-HTTP response to a client to run any residing executables with privileges of a logged in user. View Full Story ORIGINAL SOURCE: Securiteam

Learn how big data and the Zillow Zestimate changed and disrupted real estate. It's an important case study on the power of machine learning models and digital innovation. Anyone buying or selling a house knows about Zillow. In 2006, the company introduced the Zillow Estimate, or Zestimate for short, which uses a variety of data sources and models to create an approximate value for residential properties. View Full Story ORIGINAL SOURCE: ZDNet

'SlowLoris' flaw could see a mouse of a machine take down an elephant of a server An SMBv1 bug described late last week at DEF CON won't be patched, because Redmond says it only needs a suitable block on connections coming from the Internet. The 20-year-old bug was discovered by two RiskSense researchers combing code for vulnerabilities exposed by the NSA's EternalBlue exploit. View Full Story ORIGINAL SOURCE: The Register

A hacker says he turned finding and exploiting flaws in popular MMO video games into a lucrative, full-time, job. Manfred's character is standing still in the virtual world of the 2014 sci-fi online multiplayer game WildStar Online. Manfred, the real life person behind the character, is typing commands into a debugger. In a few seconds of what seems to be an extremely easy hack, Manfred's virtual currency skyrockets up to more than 18,000,000,000,000,000,000, or 18...

The PSNI has said that Chief Constable George Hamilton's Twitter account may have been "maliciously hacked". The incident happened yesterday, with a number of other Twitter users asking why a tweet had been removed from his account. It is unclear what it referred to, but other tweets indicated it included a series of numbers. Detective Chief Inspector Michael Harvey, the head of the PSNI's Cyber Crime Centre, said: "At this time we believe there is...

Ruben Santamarta, a security researcher for IOActive, has found various vulnerabilities in nuclear radiation monitoring equipment from three vendors, who when contacted by the researcher, declined to fix the reported flaws, each for various reasons. The vulnerabilities were found in multiple product models sold by Digi, Ludlum, and Mirion. View Full Story  ORIGINAL SOURCE: Bleeping Computer