Top 10 Stories

Chipotle Mexican Grill cannot catch a break. Just as the fast-casual chain reported that sales have rebounded after a prolonged slog in the wake of a food safety outbreak, executives told Wall Street analysts that the company's payment processing system was hacked. "We want to make our customers and investors aware we recently detected unauthorized activity on a network that supports payment processing for purchases made in our restaurants," chief financial officer Jack Hartung told...

Nearly 80% of bank executives are confident about their cybersecurity strategies, according to a new report from Accenture, but lack the ability to test their strategies in a real-world testing environment. The report is based on a global survey of 275 senior security executives across the banking and capital markets sectors. View full story ORIGINAL SOURCE: CIO Dive

A malware signature update issued by the company on Monday triggered the software into mistakenly flagging Windows system files as malware, melting down millions of managed systems around the world. View full story ORIGINAL SOURCE: ZDNet

A group of Israeli researchers has devised a new technique to exfiltrate data from a PC in an air-gapped network through malware controlled via scanners. The team was composed of Ben Nassi, a graduate student at the Cyber Security Research Center at Ben-Gurion University, and his advisor Yuval Elovici, based on an idea of the prominent cryptographer Adi Shamir. The technique could be used by hackers to establish a covert communication channel between a malicious code...

In an operation targeting cybercrime across Asean, the Interpol says it has identified thousands of compromised systems that included command-and-control (C2) servers infected with malware and websites run by governments. Some 8,800 of the servers across eight countries were found to be infected with various malware codes including those targeting financial institutions and used to launch DDoS (distributed denial-of-service) attacks. Investigations involving these systems were still ongoing, according to a statement released by Interpol, which...

With phishing now widely used as a mechanism for distributing ransomware, a new NTT Security reveals that 77% of all detected ransomware globally was in four main sectors – business & professional services (28%), government (19%), health care (15%) and retail (15%). While technical attacks on the newest vulnerabilities tend to dominate the media, many attacks rely on less technical means. According to the GTIR, phishing attacks were responsible for nearly three-quarters (73%) of all...

Chinese state-backed hackers have recently targeted South Korean entities involved in deploying a U.S. missile-defense system, says an American cybersecurity firm, despite Beijing’s denial of retaliation against Seoul over the issue. In recent weeks, two cyberespionage groups that the firm linked to Beijing’s military and intelligence agencies have launched a variety of attacks against South Korea’s government, military, defense companies and a big conglomerate, John Hultquist, director of cyberespionage analysis at FireEye Inc., said in...

Facebook, Twitter and Snapchat are paying hackers to find glitches in their system. Technological giants are shelling out possibly £156,000 to these ‘ethical hackers’ every day. One of the hackers has spoken out about his job. Known as Topiary online, Jake Davis is a former ‘black hat’ – meaning he was an illegal hacker. The 24-year-old was arrested at his Shetland home in 2011 but escaped a possible 10 year jail sentence. Serving just 38 days, Davis...

In a major gaffe, personal details of around 1.5 million penioners in Jharkhand were made public on a state website of social security. The details also included people's Aadhaar card and bank account information. The details were put on the website because of a programming error, according to the Hindustan Times. There are nearly 1.6 million pensioners in Jharkhand and around 1.4 million have linked their bank account with their Adhaar numbers to get direct benefit of...

Rhode Island’s largest health care provider says an employee’s laptop containing patient information was stolen, but there’s no indication that any patient’s information has been accessed or used as a result of the theft. The Providence Journal reports (http://bit.ly/2q4kfy1) that Lifespan recently sent a notice about the potential data breach to about 20,000 patients. The hospital network says the computer was stolen from a car on Feb. 25. The employee immediately reported the theft to police...