Top 10 Stories

Seeing the padlock icon when you’re browsing the internet should make you feel secure, right? It does, after all, mean that the site you’re visiting has a Transport Layer Security (TLS) certificate. The firms who manage those certificates are meant to analyse and approve each domain that gets a TLS certificate, but it looks as though the vetting process is not as stringent as it should be. This has resulted in websites being given the...

The USA’s second-largest retailer, and most famously known for its huge data breach, has rolled out chip and PIN to its house brand REDcards. "We are in the process of reissuing all of our REDcard credit and debit cards chip-and-PIN cards," spokeswoman Molly Snyder tells Information Security Media Group. It first detailed this move back in 2014, saying that "the REDcard portfolio includes proprietary Target debit and credit cards in addition to Target-branded Visa cards,...

Global taxi firm, Uber, has acknowledged that its drivers’ personal data has been leaked due to a software flaw. It reported that around 700 people have been affected in the USA. It looks like the details leaked included social security numbers, tax forms and photographs of drivers’ licences. It’s not known at this stage whether anyone outside of Uber was able to access the information leaked before the issue was fixed. In a statement, Uber...

A warning has been issued by The UK National Crime Agency (NCA) telling of a severe malware strain that has allowed cyber criminals to steal millions from UK bank accounts. The malware, named Dridex, is thought to have been created by skilled cyber criminals in Eastern Europe to obtain online banking credentials. These stolen credentials are then exploited further to steal money from both individuals and businesses globally. Payment systems and financial organisations have been the main...

Attackers are exploiting a previously unknown vulnerability in fully patched versions of Adobe's Flash Player so they can surreptitiously install malware on end users' computers, security researchers warned Tuesday. So far, the attacks are known to target only government agencies as part of a long-running espionage campaign carried out by a group known as Pawn Storm, researchers from antivirus provider Trend Micro said in a blog post published Tuesday. It's not unusual for such zero-day...

An anonymous Casino has lost 150,000 credit cards after being raided by a new hacking group. Researchers Emmanuel Jean-Georges and Barry Vengerik of Mandiant and FireEye say the "Fin5" hacking group had last year skipped through the organisation's "flat" IT architecture to raid its open payment systems. They say the casino lacked even basic firewalls around its payment platforms and did not have logging. "It was a very flat network, single domain, with very limited access...

A rash of hacking attacks on U.S. companies over the past two years has prompted insurers to massively increase cyber premiums for some companies, leaving firms that are perceived to be a high risk scrambling for cover. On top of rate hikes, insurers are raising deductibles and in some cases limiting the amount of coverage to $100 million, leaving many potentially exposed to big losses from hacks that can cost more than twice that. "Some...

Scottrade has began the big task of notifying around 4.6 million customers that their personal information could have been exposed when hackers accessed the company network over several months between 2013 and 2014. The company has claimed that cyber criminals stole client names and street addresses, but no other data. All of those affected by the breach have been offered free access to one year of identity protection services from specialist AllClear ID. In a statement,...

An administration oversight allowed US student Sanmay Ved to buy the right to control Google's domain on 29 September. The oversight left him in charge of Google.com for about a minute until Google caught on and cancelled the transaction. When he bought the domain for £12, he received email confirmation and almost instantly began receiving emails which were intended for Google's web admin staff. Now Mr Ved has been given a cash reward for spotting the...

By Andrew Blake China is reported to have arrested several computer hackers at the behest of the United States government. The arrests come in the wake of President Xi Jinping’s visit to the White House last month, as the U.S. continues to weigh imposing sanctions as a result of cyberattacks blamed on Beijing. Officials within the Obama administration confirmed the arrests to the Washington Post on Friday and said the individuals apprehended are accused of participating in espionage...