Top 10 Stories

A growing number of WordPress websites have been infected by attackers exploiting a vulnerability that remains unpatched in a widely used plugin called WP Mobile Detector, security researchers warned. The attacks have been under way since last Friday and are mainly being used to install porn-related spamming scripts, according to a blog post published Thursday. The underlying vulnerability in WP Mobile Detector came to light on Tuesday in this post. The plugin has since been...

TeamViewer customers are still unable to access the company’s remote support services 24 hours after the company suffered a DDoS attack. According to IT Pro sources, the service, which allows IT teams to remotely access users’ desktops in order to resolve support issues, is inaccessible to businesses across the UK, Europe and the US. Sources said the company appears to have a DNS issue, suggesting it may once again be under attack.   Original Source:...

In the wake of Duo Security’s report on the critical vulnerabilities sported by Original Equipment Manufacturer (OEM) updaters loaded on popular laptop and desktop computers, Lenovo has advised users to uninstall its Accelerator Application. “The vulnerability (CVE-2016-3944) resides within the update mechanism where a Lenovo server is queried to identify if application updates are available,” the company explained. The flaw can be exploited by an attacker with local network access to perform remote code execution...

China-based hackers have been fingered for bit-squatting attacks against Taiwan's Democratic Progressive Party, FireEye researchers say. The attackers replicated the DPP website on a malicious domain in a bid to glean information about visitors. The presence of payloads or specific techniques was not detailed in the CNN report. Attacks lasted several days last month and follow the inauguration of President Tsai Ing-wen.   Original Source: The Register View the ful story here

As of the end of March, 93 percent of all phishing emails contained encryption ransomware, according to a report released today by PhishMe. That was up from 56 percent in December, and less than 10 percent every other month of last year. View full story ORIGINAL SOURCE: CSO Online

Lloyds Banking Group, a London-based financial institution, claimed it's seen a substantial reduction in the number of cyber-attacks it was hit with this year, according to The Telegraph newspaper.  While acknowledging an increase between June and February in the number of cyber-attacks within the UK, Miguel-Ángel Rodríguez-Sola, Lloyds' digital director, said over the past two months he's seen five times less cyber-attacks targeting Lloyds than at the end of last year. View full story ORIGINAL SOURCE: SC...

The Australian Department of Prime Minister and Cabinet, in an excess of security ineptitude, has mistaken the cc: field for the bcc: field. The inevitable result: a database of names and addresses has leaked. The department, on behalf of the government, was e-mailing women on a register called AppointWomen to tell them that register was being decommissioned. View full story ORIGINAL SOURCE: The Register

GCHQ and the US National Security Agency (NSA) have access to intercepted emails sent and received by all members of the UK Parliament and peers, including with their constituents, a Computer Weekly investigation has established. The intelligence agency in Cheltenham has been able to harvest traffic details of all parliamentary emails, including details of the sender, recipient and subject matter, for at least three years. View full story ORIGINAL SOURCE: Computer Weekly

TeamViewer users say their computers were hijacked and bank accounts emptied all while the software company's systems mysteriously fell offline. TeamViewer denies it has been hacked. In the past 24 hours, we've seen a spike in complaints from people who say their PCs, Macs and servers were taken over via the widely used remote-control tool on their machines. Even users with strong passwords and two-factor authentication enabled on their TeamViewer accounts say they were hit....

Scrum.org, the Scrum certification and training site run by Scrum co-creator Ken Schwaber, appears to have contacted users to warn them of a nasty security breach. Reg reader "KB" has sent us an email sent to Scrum.org members and customers that says "On May 26, 2016, we noticed an issue with the Scrum.org website outgoing mail server." "Upon investigation, we determined that emails used to communicate initial passwords were not being sent. After further investigation,...