Top 10 Stories

Last year, hackers leaked 1 terabyte of data from the Milan’s Expo 2015 website. Now, the online hacktivist Anonymous Italy – LulzSec ITA has hacked into the websites of several Italian job portals and employment agencies leaking personal data of hundreds and thousands of employees and business owners for operation OpNessunDorma to protest against the new labour laws in the country. View full story ORIGINAL SOURCE: Hack Read

The FBI issued a rare bulletin admitting that a group named Advanced Persistent Threat 6 (APT6) hacked into US government computer systems as far back as 2011 and for years stole sensitive data. The FBI alert was issued in February and went largely unnoticed. Nearly a month later, security experts are now shining a bright light on the alert and the mysterious group behind the attack. View full story ORIGINAL SOURCE: Threatpost

Scammers have bilked American companies out of $2.3bn from 17,642 victims since 2013, the FBI has warned, and the problem is going to get worse before it gets better. Basically, the hustle works like this: miscreants pretending to be top bosses send emails to employees, particularly those handling sensitive financial information, asking for records. The staffers, tricked into thinking the messages are legit, hand over the data to the crooks, who then exploit the info...

Brazen criminals, weak law enforcement give Brazil the gold medal in online scams. When you think cybercrime, you probably think of Russia, or maybe China. But when it comes to banking scams and phishing, according to a recent report by the cybersecurity company Kaspersky Lab, Brazil ranks No. 1. View full story ORIGINAL SOURCE: CBC

A babyfaced computer geek designed programmes which helped cyber hackers crash 224,000 websites around the world . Grant Manser created the damaging software from his bedroom and sold it on the ‘dark web’ to customers around the globe for as little as £4.99, a court heard. The then 16-year-old's “stresser” program worked by bombarding websites, servers and email addresses with so much information they crashed. View full story ORIGINAL SOURCE: The Daily Mirror

A London-based childbirth charity has admitted that over 15,000 parents have been caught up in a data breach after hackers were able to compromise usernames and passwords from its website. The National Childbirth Trust (NCT), which provides help and support to hundreds of thousands of parents during the childbirth process, has sent a message to those affected explaining their email addresses, usernames and passwords have been hijacked. View full story ORIGINAL SOURCE: International Business Times

A German researcher reportedly netted $500 (£354) from PayPal's bug bounty programme for a vulnerability that could have allowed an attacker to carry out phishing and other attacks. Vulnerability Laboratory researcher Benjamin Kunz Mejri discovered what he described as a “Filter Bypass and Persistent Profile Mail Encoding Web Vulnerability,” according to a 30 March advisory. The bug also could have allowed session hijacking, persistent redirecting to external sources and persistent manipulation of affected or connected service module context, the advisory said....

Apple has reportedly fixed a vulnerability that could have allowed hackers to bypass the passcode on iPhone 6s and 6s Plus running iOS 9.3.1 in order to access the address book and photos. The bypass technique was discovered by researchers from German security firm Evolution Security and takes advantage of Siri's integration with apps like Twitter or Facebook and the new 3D Touch feature that's only available on the iPhone 6s and 6s Plus models. View full story ORIGINAL SOURCE: PC...

GitHub, a frequent target of distributed denial of service (DDoS) attacks, experienced a major outage Tuesday morning; however, the software development hosting service tweeted shortly thereafter that it identified the problem and that its online operations were running normally again. As of writing, it is not publicly known if the outage stemmed from an internal error or from the latest in a series of external cyber-attacks against the service. GitHub's site performance was noticeably impacted just this...

A new type of phishing email that includes the recipient's home address has been received by thousands of people, the BBC has learned. Members of the BBC Radio 4's You and Yours team were among those who received the scam emails, claiming they owed hundreds of pounds to UK firms. The firms involved have been inundated with phone calls from worried members of the public. View full story ORIGINAL SOURCE: BBC