Top 10 Stories

A group of researchers has released a data set on nearly 70,000 users of the online dating site OkCupid. The data dump breaks the cardinal rule of social science research ethics: It took identifiable personal data without permission. The information — while publicly available to OkCupid users — was collected by Danish researchers who never contacted OkCupid or its clientele about using it. View full story ORIGINAL SOURCE: Vox

Employees of Kern Superintendent of Schools have been alerted to a data breach at the organization, 23ABC News has learned. In a note sent to staff members on Monday, Superintendent Christine Lizardi Frazier said the group's payroll department fell victim to a data phishing scam. A KCSOS spokesman told 23ABC the incident happened on Friday, May 6, and employees were also notified that day about the breach. View full story ORIGINAL SOURCE: Turnto23

Swift, the global financial messaging network that banks use to move billions of dollars every day, warned on Thursday of a second malware attack similar to the one that led to February’s $81 million cyberheist at the Bangladesh central bank. The second case targeted a commercial bank, Swift spokeswoman Natasha de Teran said, without naming it. It was not immediately clear how much money, if any, was stolen in the second attack. View full story ORIGINAL SOURCE:...

File storage site Mega has been ordered to hand over IP address information to the Kazakhstan Government that could identify a user alleged to have uploaded more than 100,000 stolen documents to the service. View full story ORIGINAL SOURCE: The Register

TalkTalk profits have more than halved after an attack on its systems last October resulted in 160,000 customers' credit card and bank card details being exposed. Profits fell to £14 million compared to £32 million a year earlier. The "significant and sustained cyber attack" cost TalkTalk £42 million and resulted in the loss of 101,000 subscribers in the third quarter of 2015 as users fled to other networks. View full story ORIGINAL SOURCE: The Independent

Yahoo said Wednesday that it's working closely with congressional technology experts after the House was reported to have been the target of recent "ransomware" attacks. The House Information Security Office advised representatives late last month that it had blocked access to its networks from Yahoo Mail accounts because of the attacks, the business and tech site Fast Company first reported last week. View full story ORIGINAL SOURCE: NBC News

Mr. Robot was the biggest 'Hacking Drama' television show of 2015 and its second season will return to American TV screens on Wednesday 13th of July 2016. However, the new promotional website for season two of Mr. Robot has recently patched a security flaw that could have easily allowed a hacker to target millions of fans of the show. A White Hat hacker going by the alias Zemnmez discovered a Cross-Site Scripting (XSS) vulnerability in Mr. Robot website on...

Earlier this month, researchers revealed that the popular image-processing suite ImageMagick is plagued by a serious vulnerability that allows attackers to execute arbitrary code on vulnerable servers by uploading a specially crafted image file. The flaw, tracked as CVE-2016-3714 and dubbed “ImageTragick,” can be exploited to target websites that allow users to upload images, such as profile pictures. View full story ORIGINAL SOURCE: Security Week

Information security boffins have pilloried Verizon's latest data breach report, suggesting its list of top security vulnerabilities do not represent reality. The 2016 Data Breach Investigations report  is Verizon's ninth in the series drawing on a wider pool of data including some 100,000 security incidents and 2260 data breaches last year. It includes case load data from Verizon and some 50 other organisations including computer emergency response teams. View full story ORIGINAL SOURCE: The Register

Security firm Symantec has reported that South Korea has been affected by targeted attacks that exploited an Internet Explorer zero-day vulnerability. According to a post on the company's blog, attackers were able to use an exploit -- dubbed Microsoft Internet Explorer Scripting Engine Remote Memory Corruption Vulnerability CVE-2016-0189 -- to execute an arbitrary code. View full story ORIGINAL SOURCE: ZDNet