Top 10 Stories

New York City Health and Hospitals Corporation (HHC) is notifying patients after a former employee at Jacobi Medical Center emailed protected health information to her personal email account and email account of her new employer, an unnamed agency that works closely with HHC. There's no indication of misuse or malicious intentions surrounding the February incident. Information affected includes names, addresses, dates of birth, phone numbers, medical record numbers, treatment and health information, and health insurance...

The online hacktivist Anonymous breached into the official website of Thailand Senate and Public Health Ministry, ending up leaking login credentials against country’s alleged support for human trafficking.  The Anonymous hacker behind the famous World Trade Organization (WTO) hack is back in news with yet another high-profile breach where login credentials of government officials have been leaked. View full story

The U.S. Senate has delayed until May 31 a decision on whether to follow the House and approve a proposal to scrap the National Security Agency's bulk collection of Americans' telephone metadata. View full story

There has been a proliferation of malware specifically designed to extract payment card information from Point-of-Sale (POS) systems over the last two years. In 2015, there have already been a variety of new POS malware identified including a new Alina variant, LogPOS, FighterPOS and Punkey. During our research into a widespread spam campaign, we discovered yet another POS malware that we’ve named NitlovePOS. The NitlovePOS malware can capture and ex-filtrate track one and track two...

Reportedly BitFinex was hacked but due to strict security measures implementation just minimal amount was lost. BitFinex keeps more than 99.5% of deposits from its customers in highly secure multisig wallets therefore just 0.5% loss was suffered by the Exchange View full story

A security firm has revealed that upwards of 2.8 million users have downloaded scareware masquerading as legitimate Minecraft apps off of Google Play Store. According to a blog post written by Lukas Stefanko, a Malware Researcher for ESET, 30 malicious applications pretending to be cheats for the popular computer game wereuploaded to Google Play Store over the past nine months. However, none of the apps fulfill their promised functionality. Instead they tried to use the...

Got an older Android Smartphone? Be careful how you dispose of it. Because whether you recycle it, give it to a friend, or sell it on eBay, you could be putting your personal information and data at risk. View full story

It’s been almost a year since what some analysts consider the first successful major threat to mobile banking, known as Svpeng, hit the United States. Spreading via a text message campaign, the Svpeng malware went after Android phones. While Svpeng didn’t steal mobile banking credentials, it did detect the presence of certain mobile banking apps and then locked those phones for ransom. Svpeng hit the news again last month when Russia announced on April 11 that several...

Child monitoring firm Mspy has denied reports that its systems have been breached and personal data exposed, but admitted that it was subject to a “predatory attack” by blackmailers. View full story

A vulnerability in Android’s default Web browser lets attackers spoof the URL shown in the address bar, allowing for more credible phishing attacks. View full story