Top 10 Stories

Less than two weeks after more than 177 million LinkedIn user passwords surfaced, security researchers have discovered three more breaches involving MySpace, Tumblr, and dating website Fling that all told bring the total number of compromised accounts to more than 642 million. "Any one of these 4 I'm going to talk about on their own would be notable, but to see a cluster of them appear together is quite intriguing," security researcher Troy Hunt observed...

A British teenager has hacked North Korea's version of Facebook just days after it was launched. Andrew McKean, 18, from Scotland, gained access to the site by correctly guessing the login and password were set to 'admin' and 'password'. The college student was then able to take control of the page and promptly changed the advertising boxes so they read: 'Uh, I didn't create this site just found the login.' He said he also had...

The Tor Browser lets you use Tor on Windows, OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser to protect your anonymity, and is portable. Tor Browser 6.0 is now available. Some of the improvements include: Code-signing for OS X systems is introduced. This should help users who had trouble with getting the Tor Browser to work on their Mac...

China is once again renewing its efforts to get all people who sign up for a mobile number to use their real names. According to state-run news agency China News Service (link via Google Translate), the government has declared that everyone who buys a SIM card in China, even non-citizens, need to show a passport or another form of valid identification. The report also says that more than 100 million SIM cards have not been registered...

The FBI released the Internet Crime Compliant Center – IC3 report of 2015 last week. During the last calendar year, IC3 received 288,012 complaints and 44 percent of them reported financial loss equal to $1,070,711,522. Business Email Compromise (BEC), Email Account Compromise (EAC), and Ransomware are the hottest topics of 2015 report. The annual report aims to promote the public awareness by aggregating and highlighting the data provided by the general public. IC3 has received 3,463,620...

A new version of ransomware, dubbed Ransom:Win32/ZCryptor.A, that is able to move itself from computer to computer is hitting Microsoft Windows users. Microsoft's Threat Research & Response blog issued an alert to its customers on 26 May warning them of the bug, which also goes by the name ZCryptor. The nastiest aspect of this piece of malware is its ability to reproduce and then spread to other systems through removable media devices, such as flash...

Email addresses and hashed and salted passwords of 65 million Tumblr users are being sold online by “peace_of_mind,” aka “Peace”, the individual that recently offered for sale LinkedIn users’ data dating back to a 2012 breach. The account credentials stolen from Tumblr are also old – according to researcher Troy Hunt, they were stolen in the site’s February 2013 breach. Tumblr warned about it earlier this month, but neglected to tell how many users are...

MacKeeper security researcher Chris Vickery, the scourge of all companies that run unprotected MongoDB databases, revealed yesterday another case of such server, this time exposing sensitive data from energy sector giant Pacific Gas and Electric (PG&E). Vickery says that, sometime last week, he discovered a MongoDB server exposed to the Internet with no administrator account password. A further investigation revealed to him that the server belonged to PG&E, and the data contained inside was typical...

A number of severe problems have been discovered within the Samsung Knox security system in Android smartphones. Three vulnerabilities affecting Android devices running Samsung's Knox security feature were recently revealed in a paper presented by Uri Kanonov and Avishai Wool, researchers from Tel Aviv University. The security flaws affect versions of Knox on older Samsung devices; in particular, Knox 1.0 -- 2.3 running on Android up to version 4.3. Knox was designed to cater for...

The newly spotted ZCryptor ransomware has also the ability to spread like a worm, Microsoft warns. Once it infects a system, it also copies itself on removable drives, in the hopes that the same drives will end up plugged into another system and spread the infection. Other than that, ZCryptor does not differ much from other ransomware.   Original Source: Help Net Security View the full story here