Top 10 Stories

ReverbNation – an online platform that currently assists more than three million musicians in building their careers – experienced a breach in 2014, and is now notifying an undisclosed number of users and asking them to change their passwords. According to a ReverbNation statement emailed to SCMagazine.com on Thursday, law enforcement recently notified the company that an individual, who has been identified and charged, may have illegally gained access to customer data. View full story

The website of Great Manchester Police in the UK was hit on Wednesday by two DDoS attacks, knocking it offline for two hours. In an official statement, it said that its website, dubbed “the Force,” was first thought to be the victim of a simple glitch. Initial checks did not reveal anything untoward, and the system was quickly brought back online. However, a short time later, the website became unavailable again. That time, a person...

Malicious adverts have been found on the UK version of the Match.com dating website. Anyone caught out by the booby-trapped ads could fall victim to ransomware, said security company Malwarebytes, which spotted the cyber-threat. The malicious ads appeared on pages of the dating site via an ad network that pipes content to Match and many other places. Match briefly suspended adverts on the UK site while it investigated. "We take the security of our members...

Wireless routers made by Belkin have been found to have several vulnerabilities, some of which have no workarounds. According to an advisory by US-CERT, The Belkin N600 DB Wireless Dual Band N+ router model F9K1102 v2 with firmware version 2.10.17 has flaws that could allow a hacker to arbitrarily inject files, perform man-in-the-middle attacks and forge cross-site requests. “A remote, unauthenticated attacker may be able to spoof DNS responses to cause vulnerable devices to contact attacker-controlled hosts...

Users of UK newsagent chain WHSmith's online services have reported large amounts of email arriving in their inboxes, containing personal contact data on other users. The leak appears to be related to an online "Contact Us" form, with numerous users claiming that attempting to report the issue via the form led to further barrages of info-laden email. The incident brought a stream of irate users to social media, with complaints piling up on Facebook and Twitter overnight....

Finance and HR employees represent the biggest cybersecurity threat to organizations of any department, according to new research from security firm Clearswift. The messaging and web security vendor polled 500 data security specialists in the UK, US, Germany and Australia to compile its findings. Nearly half (48%) of respondents claimed finance departments and their employees posed the biggest threat, versus 42% for HR. The main reason for their answers was the fear of staff members...

A London sexual health centre mistakenly leaked the details of nearly 800 patients who have attended HIV clinics, bosses have admitted. The 56 Dean Street clinic in Soho sent out the names and email addresses of 780 people when a newsletter was issued to clinic patients. Patients were supposed to be blind-copied into the email but instead details were sent as a group email. Health Secretary Jeremy Hunt said the breach was "completely unacceptable". Speaking...

Over 190.3 million people in the US own smartphones, but many do not know exactly what a mobile device can disclose to third parties about its owner. Mobile malware is spiking, and is all too often pre-installed on a user’s device. Following its findings in 2014 that the Star N9500 Smartphone was embedded with extensive espionage functions, G DATA security experts have continued the investigation and found that over 26 models from some well-known manufacturers...

CoreBot is a new malware that steals user credentials and have the ability to cause a great amount of trouble. This stealer malware is specifically designed with ample strength that it is quite easy to steal data from targeted victim and have the capability to control the computer, reveals a security report published by IBM. It is relatively common for the security researchers to find information stealing malware; remote access tools (RATs), ransomware, and Trojans. But most of...

Former U.S. Secret Service agent Shaun W. Bridges, 32, has pleaded guilty to stealing $820,000 worth of bitcoins while helping to run the U.S. government's investigation into the notorious underground narcotics marketplace known as "Silk Road" (see Feds Arrest 'Silk Road' Investigators). Bridges pleaded guilty Aug. 31 in California federal court to both money laundering and obstruction of justice, according to the Department of Justice. The former special agent with the Secret Service's Electronic Crimes Task Force...