Top 10 Stories

The terrorist database used by global banks and intelligence agencies World-Check has reportedly leaked online. The mid-2014 version of the database contains some 2.2 million records and is used by 49 of the world's 50 largest banks, along with 300 government and intelligence agencies. The Thomson Reuters database is accused of falsely designating citizens and organisations as terrorists. Banks have used this data in whole or in part to shutter accounts, effectively locking people out...

A 16-year-old British boy has admitted launching cyber attacks on websites around the world. The defendant, who cannot be named due to his age, admitted targeting Florida's SeaWorld theme park and Devon and Cornwall Police in the attacks. The teenager, from Plymouth, pleaded guilty at the city's youth court to three offences, committed between October 2014 and January 2015. View full story ORIGINAL SOURCE: BBC

Google scans billions of "potentially harmful apps" on the Play store, but a malware app has slipped through, and is automatically rooting phones it infects. The since-scuppered malware masqueraded as a spirit level application dubbed Level Dropper. When installed it would root Android devices and install additional applications to generate advertising revenue. Lookout chief strategy officer Colin Streicher found in tests that Level Dropper installed 14 applications 30 minutes after the app is first run....

Hackers have reportedly stolen $10m from a bank in Ukraine by exploiting the Swift messaging system, according to reports emerging from the region citing an independent IT monitoring organisation called the Information Systems Audit and Control Association (ISACA). English-language newspaper, the Kyiv Post, has reported the ISACA branch in Ukraine disclosed that cybercriminals were able to compromise the bank's security in similar fashion to the incident at the Bangladesh central bank in which $81m (£56m) was stolen...

PUNE: Insider data theft and malware attacks top the list of the biggest concerns for enterprise security executives,as per a new report by Accenture and HfS Research. According to the State of Cybersecurity and Digital Trust 2016 survey, 69% of the respondents experienced an attempted or successful theft or corruption of data by insiders during the last 12 months, with media and technology organizations reporting the highest rate (77%). View full story ORIGINAL SOURCE: Times...

US whistleblower Edward Snowden has criticised new anti-terrorism legislation approved by Russia's parliament. He wrote on Twitter that the "Big Brother law" was an "unworkable, unjustifiable violation of rights that should never be signed". Among the new rules are tough punishments for failing to report crime, or inciting terrorism online. It must still be signed into law by Russian president Vladimir Putin. View full story ORIGINAL SOURCE: BBC

Attackers are packaging the newest and most sophisticated attack tools in long out-of-date malware wrappers, targeting medical devices running legacy operating systems, to breach hospital networks for advanced persistent attacks. View full story ORIGINAL SOURCE:

It's 2016, and Microsoft Office macros are still a viable infection vector: security outfit Avanan says it's spotted a week-long, large-scale malware attack against Office 365 users. The campaign began on June 22, and Microsoft started blocking the malicious attachment on June 23. Avanan says the attackers tried to send messages to 57 per cent of the organisations on its security platform using Office 365. Users were sent an Office document that invoked the malware via...

Facebook is undoubtedly the most used social media around the world and that’s what makes it an attractive target for cyber criminals as every now and then users complain about their account being compromised due to phishing or malware scam. Currently, a malware scam is infecting Facebook users in which they receive a notification in the app and/or in their email about a friend tagging in a comment, upon clicking the link, a malware is downloaded on their device. Though just downloading it...

America's Internal Revenue Service (IRS) has brought forward the discontinuation of the electronic filing PIN that was supposed to protect customers. After an embarrassing security breach in February of this year, it issued PINs to millions of Americans to try and protect what secrets they still had. That program was suspended in March after scammers got their hands on enough PINs to file 800 fraudulent returns. View full story ORIGINAL SOURCE: The Register