Top 10 Stories

The Russian government, together with the Ministry of Internal Affairs aim to design a package of measures to fight cyber-criminals specialising in the theft of bank-card personal data according to an official Ministry spokesman. Alex Monkov, an official spokesman for the Russian Ministry of Internal Affairs department dealing with cyber-crimes told SCMagazineUK.com that the number of cyber-attacks targeting personal data of cardholders in Russia has significantly increased this year. View full story ORIGINAL SOURCE: SC...

Malaysia’s national cybersecurity agency said it detected intrusions in several local servers for years and issued advisories to victims but ignorance was still making them easy targets for hackers. It was found that over 2,100 servers have been compromised and their access sold to hackers for as low as RM29 (US$6) up to RM24,600 (US$6,000) on an underground cybercrime shopping website, xDedic, the “eBay of cybercrime” where hackers shop access and passwords for infiltrated servers...

Given the growing severity and frequency of cyberattacks, it’s no surprise that organizations of all sizes are spending more money to shore up their digital defenses. The market for cybersecurity products and services is expected to surpass $60 billion in 2016, and that figure could double by 2020. View full story ORIGINAL SOURCE: Ooda Loop

Business-related inbox scams are reaching epidemic levels with the total cost to business reaching a whopping $3.1 billion. The dire warning comes from the FBI that says skyrocketing losses represent a 1,300 percent increase since January 2015. Identified by the FBI as business e-mail compromise (BEC) crimes, the scams attempt to trick email recipients into money wire transfers, forwarding sensitive employee data such as W-2 data, paying fake invoices, or hijacking employee email accounts in...

Some 45 million logins for 939 popular sites including motorcycle.com, autoguide.com, and mothering.com have been stolen. The method of attack and actor responsible is unknown, although many of the sites ran a vastly outdated and hackable versions of vBulletin. Usernames, email addresses, IP information, and passwords are breached. Breach data aggregator LeakedSource which obtained the records says the Verticalscope site and its domains were hacked February. It is allowing users to search if they are affected, but victims have...

Adobe has promised to issue a fix for another major security flaw in its Flash software. Adobe has credited Kaspersky with uncovering evidence that the flaw is being used by a group of Russian hackers dubbed ScarCruft. The flaw is notable because it can be used against Windows, OS X, Linux, and Chrome OS systems. Adobe plans to issue a fix for the problem by 16 June. View full story ORIGINAL SOURCE: V3.co.uk

Just three days ago we reported how Anonymous was hacking Twitter accounts of the so-called Islamic State (ISIS aka Daesh) terrorist group and defacing them with pornographic content. Now, the same hackers are defacing the hacked ISIS accounts with gay pornographic material against recent Orlando shooting in which 49 people were left dead. The hacker who goes by the handle of @WauchulaGhost has been hacking, defacing and deleting pro-ISIS twitter accounts since last year after Anonymous launched OpISIS following the Paris bombings but lately accounts supporting...

Security certification body Crest has joined forces with the National Crime Agency (NCA) to call on UK industry to support efforts to give talented youngsters an alternative to cyber crime and boost the ranks of cyber defenders at the same time. View full story ORIGINAL SOURCE: Computer Weekly  

We’ve already seen ransomware take on many forms this year, but researchers this week claim they’ve noticed a new strain unlike any they’ve seen prior–a type composed entirely of JavaScript. The ransomware, dubbed RAA by researchers, has been circulating through attachments masquerading as Word .doc files according to Lawrence Abrams, who wrote about the malware late Monday night on his site BleepingComputer.com. Initially discovered by two security researchers, @JAMES_MHT and @benkow_, RAA encrypts files using code...

Once again Adobe Flash Player is the target of hackers in the wild. Adobe has released security updates for several of its products announcing that the fix for a critical Flash Player zero-day vulnerability (CVE-2016-4171) exploited in targeted attacks will only be issued later this week. A security fix for the vulnerability is expected to become available starting from June 16. The security vulnerability was reported by Anton Ivanov from Kaspersky that explained that the flaw could...