Top 10 Stories

Reports indicate that Qatar's National Bank (QNB) has been hit with a cyberattack which has exposed roughly 1.4GB of corporate data. According to Cryptome, it is not known how the financial institution's data was leaked, and it could be anything from simple human error to an outside cyberattacker or inside job. Whatever the cause, a 1.4GB file cache has now entered the public realm and is available for download, reportedly containing sensitive corporate data and client...

A nuclear power plant in Germany has been found to be infected with computer viruses, but they appear not to have posed a threat to the facility's operations because it is isolated from the Internet, the station's operator said on Tuesday. The Gundremmingen plant, located about 120 km (75 miles) northwest of Munich, is run by the German utility RWE. View full story ORIGINAL SOURCE: The Daily Telegraph

Bugs in Android's Binder inter-process communication (IPC) mechanism open up a mass of security bugs, according to University of Michigan boffins Huan Feng and Kang Shin. In a paper posted to Arxiv, the duo say developers aren't doing enough sanity checking between Binder server and clients. Specifically, they often forget to sanity-check client-side transactions. View full story ORIGINAL SOURCE: The Register

Internet of Things (IoT) security spending will reach a hefty $348m in 2016, according to Gartner, an increase of 23.7 per cent on the $281.5m in 2015. Ruggero Contu, a research director at Gartner, explained that the IoT security market is small but growing as businesses and consumers adopt smart and networked devices. "Gartner forecasts that 6.4 billion connected things will be in use worldwide in 2016, up 30 per cent from 2015, and will...

NEARLY THREE-QUARTERS of companies have been the victim of a distributed denial-of-service (DDoS) attack, and 80 per cent have been hit more than once, according to a new report from Neustar that puts part of the blame on the Internet of Things (IoT). The Threatscape Widens: DDoS Aggression and the Evolution of IoT Risks report highlights a growing threat to small and medium sized businesses everywhere. View full story ORIGINAL SOURCE: The Inquirer

FireEye researchers spotted a Locky ransomware campaign using Javascript downloaders to infect users instead of macro- or binary-based downloaders. Threat actors are sending the malicious downloaders using malicious .zip and .rar files disguised as invoices, corporate documents, tax information, and other seemingly benign files in order to spread the new downloader. View full story ORIGINAL SOURCE: SC Magazine

Scores of Game of Thrones pirates may have had computers encrypted by ransomware after malvertisers served the dangerous malware through the Pirate Bay during the mega-series' season six première last weekend. MalwareBytes researcher Jerome Segura says the hard-working Magnitude exploit kit authors were able to target pirates after they bought advertising space on the infamous Bittorrent website targeting users with pop-under ads. View full story ORIGINAL SOURCE: The Register

A 1.4GB trove of internal documents, files and sensitive financial data purporting to be from the Qatar National Bank (QNB) has been leaked online. The massive data dump appears to contain hundreds of thousands of records including customer transaction logs, personal identification numbers and credit card data. Additionally, dozens of separate folders consist of information on everything from Al Jazeera journalists to what appears to be the Al-Thani Qatar Royal Family. View full story ORIGINAL...

LANSING - A cyberattack on the Lansing Board of Water and Light's corporate network is an unprecedented dilemma for the city-owned utility that requires help from the Federal Bureau of Investigation, BWL General Manager Dick Peffley told the Lansing State Journal early Tuesday afternoon. View full story ORIGINAL SOURCE: Lansing State Journal

Did you know that there are over 1,200 Android apps, both official and unofficial, that help voters keep track of the happenings in the US presidential primary? Better yet, did you know that over 50 percent of them can expose sensitive user data? We’re talking about account details, location, list of installed apps, device info, unique IMSI number, settings, your phone number – collected by the apps and sent to remote servers, often over unsecured...