Top 10 Stories

Cybersecurity provider ESET today unveiled the results of a cyber IQ test, conducted on 1000 UK workers. The results appear to show that the majority of UK workers are still in the dark when it comes to cybersecurity, with my not knowing staple terms of security or how to spot when they may be at risk from hackers. Only 29% of those surveyed understood that strong password are effective, with a further 46% of respondents...

Pen Test Partners bod Ken Munro has mapped and hacked insecure smart kettles across the capital, with the appliances sharing Wi-Fi passwords with him once inside. The iKettle is designed to save time and effort by allowing owners to switch it on and off using their smartphone. Having accessed the kettle, Munro said that rather than simply being able to control whether it is on or off, he can actually get it to share Wi-Fi passwords "easily" using...

AT&T and Verizon's implementations of LTE are said to leave device owners open overcharging, eavesdropping and data spoofing by hackers. T-Mobile customers were affected, but spokespeople have since confirmed the issue is resolved for their customers. Apple products are also unaffected b the issue. The risk is said to come from improper permissions models for LTE networks - Verizon and AT&T's software is said to be the most vulnerable. The advisory, posted by Carnegie Mellon University's...

There are fears that Beijing could threaten the UK's national security through new commercial deals, which has led to British spies being briefed to monitor and analyse computer systems and cybersecurity measures at nuclear sites in the UK that were built be Chinese firms. With the arrival of Xi Jinping in London tonight, GCHQ has confirmed it will be working on protecting Britain's energy network from cyberattacks. David Cameron has hailed the start of a...

Yahoo's next step in password security could be to eliminate them altogether. Starting today, the company announced, users of the Yahoo Mail app on both iOS and Android will have access to a new service called Yahoo Account Key, which uses smartphones to verify identities in lieu of traditional passwords. When users who sign up for Account Key try to access Yahoo Mail, they will no longer need to enter their password. Instead, the Account Key service...

Readers of the Daily Mail's website were shown fake advertisements that linked to malware, a security company has discovered. Bogus ads for shoes briefly appeared among the selection of banners displayed on DailyMail.com. Instead of online shops, the advertisements linked to malware that can expose computers to "ransomware". Ransomware encrypts files on a victim's computer and asks for a payment to decrypt them again. The practice is known as "malvertising". Security company Malwarebytes made the discovery last week...

For years, privacy advocates have pushed developers of websites, virtual private network apps, and other cryptographic software to adopt the Diffie-Hellman cryptographic key exchange as a defence against surveillance from the US National Security Agency and other state-sponsored spies. Now, researchers are renewing their warning that a serious flaw in the way the key exchange is implemented is allowing the NSA to break and eavesdrop on trillions of encrypted connections. The cost for adversaries is...

Google has just released the first antivirus tool that effectively combats the dangerous and hard-to-remove Ghost Push Malware that’s infected close to a million Android smartphones and other devices worldwide since being first detected in mid-September. The “Ghost Push Trojan Killer” developed by CM Security, an Android antivirus apps firm, safely removes this stubborn trojan that’s defeated previous attempts to delete it from infected Android devices. Ghost Push Trojan Killer can be downloaded for free...

Lloyds Banking Group – a major financial outfit in the UK – has closed a security flaw that potentially exposed banking records on tens of thousands of Brits. The vulnerability would have allowed criminals to open an account using only a person's name, address, and date of birth, and then view other accounts that person had with Halifax-Bank of Scotland (HBOS). View full story   ORIGINAL SOURCE: Shaun Nichols, The Register

Anti-malware software company, Malwarebytes, has revealed a ransomware attack which has hit readers of the web site of the Daily Mail, one of the UK’s biggest national newspapers and the world’s most popular online newspaper. The attackers used the Angler Exploit Kit to obtain victims by seeking to take advantage of security flaws in Microsoft's Internet Explorer and Adobe Flash. The attackers were able to gain access to the website via its automated advertising platform,...