Top 10 Stories

SentinelOne has uncovered a major flaw the affects all version of Apple's OS X. The bug enables local privilege escalation, as well as allowing users to bypass the much touted System Integrity Protection feature that was issued last year. View full story ORIGINAL SOURCE: Infosecurity Magazine//Reed Exhibitions Written by Michael Hill

Sprouts Farmers Market is the latest corporation to fall victim to a W-2 phishing scam, with the company admitting an employee sent off the tax data for all its workers to an unknown person. View full story ORIGINAL SOURCE: SC Magazine

Another US hospital has had its records scrambled by ransomware trying to extort money from the sawbones. This time: it's the Methodist Hospital in Kentucky that's been infected. "We've notified the FBI, we're dealing with federal authorities on how to deal with it," the hospital's chief operating officer David Park told local station News Channel 10. "Depending upon the number of records that were locked, depends upon whether we're going to consider looking into whether...

WhatsApp's earlier announcement that it's leaving the BlackBerry ecosystem was apparently only the beginning of Facebook's exodus from the platform. The world's biggest social network and its Messenger app will stop working on the BlackBerry OS, including BB10, by the end of 2016. In a blog post on the company's website, the app team said Facebook decided to "discontinue support of their essential APIs for BlackBerry." They tried to change their minds, but it sounds...

Google's announced another expansion to the security information offered in its transparency projects: it's now going to track certificates you might not want to trust. Certificate Authorities (CAs) that your browser (or smartphone) trusts have a suitable entry in “settings”, but if a site presents a certificate from an unknown source, the user is prompted about what to do. Since users too often click through those warnings, Google's decided that a list of untrusted CAs...

A malware researcher has found a few tricks to stop one of the latest types of ransomware, called Locky, from infecting a computer without using any security programs. Ransomware is malware that encrypts a computer's files. Users are shown instructions for how to pay a fee to get the decryption key. The costs can range from a few hundred dollars to thousands, payable to cybercriminals in bitcoin. Locky is a relative newcomer to the ransomware...

A hacker recently breached the systems of USA Cycling and potentially compromised members' personal information. On Friday afternoon, USA Cycling, the official cycling organization recognized by the International Olympic Committee (IOC) and the United States Olympic Committee (USOC), warned that it had suffered a "data security incident". In an email sent out to its over 62,000 members USA Cycling said a breach of its IT systems may have exposed members' names, mailing addresses, email addresses,...

Even if Night Shift or CareKit don't appeal to you, there are lots of good reasons to consider updating your iPhone or iPad to iOS 9.3. iOS 9.3, which was announced and released today, includes dozens of security fixes. A total of 39 vulnerabilities are addressed by iOS 9.3, several of them allowing arbitrary code execution via remote exploits. Examples include multiple XML processing issues, and openings for maliciously-crafted certificates, font files and unspecified web content....

The FBI says it may have found a way to unlock the San Bernardino attacker's iPhone without Apple's assistance. A court hearing with Apple scheduled for Tuesday has been postponed at the request of the US Justice Department (DOJ), Apple has confirmed. The DOJ had ordered Apple to help unlock the phone used by San Bernardino gunman Rizwan Farook. But Apple has continued to fight the order, saying it would set a "dangerous precedent". View...

News outlets in Sweden went dark over the weekend in the face of a large-scale distributed denial-of-service (DDoS) attack. Newspaper Dagens Nyheter (DN) reports here (but English-speakers will need help with the translation) that as well as the attack it suffered, media outlets Expression, Svenska Dagbladet, Aftonbladet, Sydsvenskan, Helsingborgs Dagblad, and financial outlet Dagens Industri were hit. DN says the police and security services (Sweden's Civil Contingencies Agency) are involved, but the only public threat...