Top 10 Stories

North Korea's intelligence agency Reconnaissance General Bureau has a special cell called Unit 180 and it could be behind some of the most successful cyberattacks, security experts have claimed. Kim Heung-kwang, a former computer science professor in North Korea told Reuters the cyberattacks by North Korea were said to be organised by Unit 180. The attacks were aimed at raising money. View full story ORIGINAL SOURCE: IB Times

Two US senators have proposed a law limiting American intelligence agencies' secret stockpiles of vulnerabilities found in products. The Protecting our Ability To Counter Hacking (PATCH) Act  would set up a board chaired by an Department of Homeland Security (DHS) official to assess security flaws spies have found in code and hardware, and decide if manufacturers should be alerted to the bugs so they can be fixed for everyone. Right now, as you probably know, the...

The European Banking Federation (EBF) has asked the EU Commission to support a ban on "screen scraping". Screen-scraping services, seen as a first-generation direct access technology, allow third parties to access bank accounts on a client’s behalf using the client's access credentials. The Revised Directive on Payment Services (PSD2) introduces a general security upgrade for third-party access to a client’s data. View full story ORIGINAL SOURCE: The Register

AKAMAI HAS WARNED that, while the volume of DDoS attacks has so far declined in 2017, a proliferation of Mirai-style hack on IoT devices means that bigger attacks could be just around the corner. The content distribution company, which accounts for as much as 30 per cent of all online traffic, made the claims in its latest State of the Internet (PDF) report. Like any product, DDoS attack tools follow a 'hype cycle', it suggested, but it is typically much faster than...

London City Airport is to become the first UK airport to install a digital air traffic control tower. Air traffic controllers who have until now looked out from the tower to direct planes for take off and landing will be moved to a virtual control tower more than 80 miles away. The airport will decommission its traditional tower in 2019, meaning aircraft will be directed from Hampshire by controllers watching live footage from high-definition video...

A popular font sharing site DaFont.com has been hacked, exposing the site's entire database of user accounts. Usernames, email addresses, and hashed passwords of 699,464 user accounts were stolen in the breach, carried out earlier this month, by a hacker who would not divulge his name.The passwords were scrambled with the deprecated MD5 algorithm, which nowadays is easy to crack. As such, the hacker unscrambled over 98 percent of the passwords into plain text. The site's...

If you're using an HP Inc wireless keyboard/mouse combo and the cursor starts behaving badly, someone might be pranking you. That's because the wireless mouse in the ERK-321A bundle is unencrypted: anyone can sniff its signals, learn its protocol and commands, and inject their own signal in a spoofing attack. German pentesters Syss reported the bug to HP Inc in March, got no response, and went public yesterday. View full story ORIGINAL SOURCE: The Register

Cosmetics peddler Tatcha is warning customers after hackers were able to compromise its website and harvest payment card details as orders poured in. The US branch of the Japanese biz has been sending notices this month to customers whose card details were apparently stolen on January 8 of this year and discovered in April. "During the early part of 2017, an unauthorized person may have gained access to information keyed into the Tatcha checkout process," Tatcha's notice...

Ukrainian accusations that Moscow was behind cyber attacks on President Petro Poroshenko's official website are baseless, Kremlin spokesman Dmitry Peskov said on Wednesday. "The lack of any details confirms the groundlessness of the accusations," Peskov told reporters during a regular conference call. Ukraine accused Russia on Tuesday of carrying out an organised cyber attack on Poroshenko's website in response to Kiev's decision to impose sanctions against a number of major Russian internet businesses. View full...

Cybersecurity researchers have identified a second ongoing global cyberattack that has quietly hijacked hundreds of thousands of computers around the world, including many in the United States, for a massive cryptocurrency mining operation.While investigating the WannaCry ransomware attacks, researchers at the cybersecurity firm Proofpoint stumbled upon another “less noisy” form of malware called Adylkuzz that, the firm says, has likely generated millions of dollars in cryptocurrency for the unknown attackers. View full story  ORIGINAL SOURCE:...