Top 10 Stories

At  least 53,172 PCs, laptops, tablets and smartphones in San Diego County contained malicious software last year, according to a survey conducted by Webroot, an Internet security company. View full story ORIGINAL SOURCE: San Diego Tribune

A researcher is urging the security community to consider the implications of massive botnets of fake Twitter accounts. Security researchers have reported further evidence of cyber attackers abusing legitimate tools after the discovery of networks of hundreds of thousands of fake accounts lying dormant on Twitter. View full story ORIGINAL SOURCE: Computer Weekly

According to industry estimates, enterprises have historically spent more than 75% of their infosec technology budgets on preventative technologies. According to a new survey conducted by Anderson Research, the portion of security budgets targeted for detection solutions increased substantially over 2015. View full story ORIGINAL SOURCE: Help Net Security

Google promoted today its Chrome 56 web browser to the stable channel for all supported platforms, including GNU/Linux, macOS, and Microsoft Windows, which comes about 55 days after Chrome 55 was released. View full story ORIGINAL SOURCE: Softpedia

One of the vulnerabilities patched in Adobe Systems' most recent software update was a flaw in the JPEG decoder and parser of Adobe Acrobat Reader, which could have been exploited to execute code remotely, Cisco's Talos threat intelligence division. View full story ORIGINAL SOURCE: SC Magazine

The total cost of fraudulent activity in the UK surpassed a billion pounds for the first time in five years, reaching £1.137bn in 2016 compared to £732m the year before. Fraud against businesses was up sevenfold last year, with inside jobs committed by employees and management the most common method, as measured by alleged fraud cases reaching court. View full story ORIGINAL SOURCE: The Register

A stored cross-site scripting (XSS) vulnerability found in a popular comments widget exposed a large number of websites to attacks. The security hole was quickly patched by the product’s developers. A 14-year-old security enthusiast named Ibram Marzouk recently discovered a stored XSS flaw in the comments section of code snippet marketplace PasteCoin. View full story ORIGINAL SOURCE: Security Week

Arbor Networks released its 12th Annual Worldwide Infrastructure Security Report offering direct insights from network and security professionals at global service providers, cloud/hosting and enterprise organizations. The stakes have changed for network and security teams. The threat landscape has been transformed by the emergence of IoT botnets. As IoT devices proliferate across networks, bringing tremendous benefits to businesses and consumers, attackers are able to weaponize them due to inherent security vulnerabilities. View full story ORIGINAL...

Sage 2.0 is a new ransomware recently spotted by security experts, it was first observed in December and not now it is distributed via malicious spam. Sage is considered a variant of CryLocker ransomware, it is being distributed by the Sundown and RIG exploit kits. The current campaign also leverages steganography to exfiltrate information about the victim’s PC inside a PNG image. View full story ORIGINAL SOURCE: Security Affairs

Ransomware app found its way into Google Play and managed to make at least one victim. The app has since been removed by the Android team. According to security firm Check Point Software Technologies, several weeks ago they detected and quarantined an Android device that had this malware on it. The owner of the phone had downloaded an app that had this 0day mobile ransomware on it, named “Charger’. View full story ORIGINAL SOURCE: Softpedia