Top 10 Stories

A researcher has earned a significant reward from Twitter after finding a critical security hole that gave him access to the source code of Vine, the social media company’s popular video sharing service. View full story Original source: Security Week

France’s privacy watchdog has declared that Windows 10 is gobbling up too much data and snooping on users’ browsing without their consent. The National Data Protection Commission (CNIL) has given Microsoft 3 months to get its act together and to get compliant with the French Data Protection Act. View full story Original source: Naked Security

One of the largest adult websites, Pornhub, has been hacked, with the perps raking in $22,000 for the accomplishment. Security researchers Dario Weißer (@haxonaut), cutz and Ruslan Habalov (@evonide) attacked what Pornhub is built upon—PHP—and ended up successfully breaking it. They found two use-after-free vulnerabilities in PHP’s “garbage collection” algorithm, which are remotely exploitable over PHP’s unserialize function. View full story Original source: Infosecurity Magazine

The FBI has launched an investigation into the hacking of the Democratic National Committee’s computers, even as more evidence surfaced of possible Russian involvement in the attack. The data breach was first disclosed last month, when hackers published confidential DNC files, including opposition research on Republican presidential candidate Donald Trump. View full story Original source: Computer World

European police agency Europol is teaming up with cybersecurity companies in an initiative aimed at slowing an "exponential" rise in ransomware. The scheme revolves around a website that connects victims and police, gives advice and helps with data recovery. The number of ransomware victims tripled in the first three months of 2016, according to one estimate. View full story Original source: BBC News

Security researcher Scott Helme has turned up a dumb password reset bug in UK energy company Ecotricity's car charging app. The bug is in the app the company provides for users of its network of 'leccy car recharge points: it had a bad user enumeration bug that would let an attacker reset someone else's password and therefore take over their account. View full story Original source: The Register

Cybersecurity experts and analysts are constantly trying to keep pace with changes and trends in the volatile and ever-shifting landscape of IT security. Despite sophisticated tools and solutions that are being rolled out by cybersecurity vendors, every IT security officer knows that data breaches eventually happen — it’s not about the if but the when — and they usually go undetected for a long time. View full story Original source: Techcrunch

Bank customers throughout the UK have been falling victim to a ‘distraction scam’, in which criminals literally distract a person at a cash machine for a few brief seconds, in which time they can gain full access to that person’s account. View full story Original source: The Telegraph

Just days after a bloody coup attempt shook Turkey, WikiLeaks dumped some 300,000 emails they chose to call “Erdogan emails.” In response, Turkey’s internet governance body swiftly blocked access to WikiLeaks. View full story Source: Huffington Post

O2 customer data is being sold by criminals on the dark net, the Victoria Derbyshire programme has learned. The data was almost certainly obtained by using usernames and passwords first stolen from gaming website XSplit three years ago to log onto O2 accounts. When the login details matched, the hackers could access O2 customer data in a process known as "credential stuffing". View full story Original source: BBC News