Top 10 Stories

Met police are investigating a possible hack after its website went down during the Million Mask March in Trafalgar Square last night – which saw 53 people arrested. Scotland Yard is looking into whether cyber activists are responsible for its news website experiencing ‘technical difficulties’ during the rally. The march, attended by thousands of anti-establishment protesters, was organised by Anonymous – the hacktivist group responsible for cyber-attacks against the US government, Isis and Ku Klux Klan View full story...

“You’re looking for the bad guys, the tracks they leave and their mistakes, and you’re also trying to predict where they’re headed, so it’s thinking like a Columbo — always asking the questions,” says Kevin Bocek, strategist at Venafi, a cyber security business. In the digital world of cyber crime, it might seem odd to refer to a now old-fashioned figure such as Columbo, the bumbling and disheveled TV detective known for his crumpled raincoat...

With the Presidential election only one day away, the threat of a future cyberwar between Russia and the United States is looking more likely, at least according to a report claiming that U.S. military hackers have penetrated Russian systems and will launch an attack if they believe that Russia is trying to interfere in the election. NBC News makes the claim, quoting “a senior intelligence official and top-secret documents” that say or show that the...

A new security survey from Accenture finds that in the past twelve months, roughly one in three targeted attacks resulted in an actual security breach, which equates to two to three effective attacks per month for the average company. Still, a majority of security executives (75 percent) surveyed are confident in their ability to protect their enterprises from cyber attacks. View full story Original source: PC Quest

Another mass DDOS attack might be responsible for shutting down social media platform Twitter. Twitter's servers were unresponsive for around 30 minutes on Monday evening, with users unable to access the website or refresh the app. Wikileaks, the whistleblowing website responsible for releasing American presidential candidate Hillary Clinton's private emails, was also down. It reported a "massive targeted DDOS attack" on Facebook. View full story Original source: Stuff

Cisco has fixed a vulnerability in its Professional Careers portal that may have exposed truckloads of personal information. The networking giant has sent an email to affected users in which it says a "limited set of job application related information" was leaked from the mobile version of the website, blaming an "incorrect security setting" placed after system maintenance on a third party site. An unnamed researcher reported the flaw. Cisco says it has not found...

Tesco Bank today froze all online transactions as an emergency measure after 20,000 people had as much as £2,000 stolen from accounts in a cyber attack that still may not be over. Chief executive Benny Higgins has apologised abd revealed that 40,000 accounts were hacked into and 20,000 had cash stolen - but he refused to say how much in total had been taken.  All online transactions will be stopped today to keep the situation 'under...

If you’ve recently installed a Flash Player Android app and now almost every app you open asks you for your payment card details, you’ve been infected with a banking Trojan. It is unclear where the fake, malicious Flash Player can be downloaded from, but it’s likely one or more third-party apps stores popular around the world. What is clear is that the app is bad news. Once victims install and run it, it will push...

The Internet of things (IoT) has already been used to launch the biggest DDoS attacks ever, but now it represents a potential path for attackers to compromise cell phones. Flaws in Belkin WeMo devices - electrical switches, cameras, light bulbs, coffee makers, air purifiers, etc. – enabled Invincea Labs researchers to not only hack into the devices, but to use that access to attack an Android phone running the app that controls the WeMo devices....

Cloud-based web host Wix.com is vulnerable to a DOM-based cross-site scripting vulnerability that can give attackers control over any of the millions of websites hosted on the platform. “Simply by adding a single parameter to any site created on Wix, the attacker can cause their JavaScript to be loaded and run as part of the target website,” according to Matt Austin, senior security research engineer with Contrast Security. View full story ORIGINAL SOURCE: Threat