Top 10 Stories

Tech behemoths including Apple and Google and leading cryptologists are urging President Obama to reject any government proposal that alters the security of smartphones and other communications devices so that law enforcement can view decrypted data. View full story

Cloud storage provider Dropbox said it has adopted ISO 27018, among the first international standards focusing on the protection of personal data in the public cloud. View full story  

The South Wales Police force has been fined £160,000 after losing video interviews with a sexual abuse victim. The fine has been imposed by the Information Commissioner's Office (ICO) after unencrypted DVDs of interviews were left in a desk drawer. View full story  

A serious security vulnerability has been uncovered in Apple’s Safari web browser that could trick Safari users into visiting a malicious website with the genuine web address. A group of researchers, known as Deusen, has demonstrated how the address spoofing vulnerability could be exploited by hackers to fool victim into thinking they are visiting a trusted website when actually the Safari browser is connected to an entirely different address. View full story

Just over a year after its first breach impacted 25,000 customer records, Sally Beauty Holdings has suffered another data breach. On Thursday, the Texas-based retailer announced that it had enough evidence to suggest that it had suffered a second data breach, confirming Brian Kreb’s initial reportthat fraudulent credit card transactions had been linked to Sally Beauty customer credit cards for a second time. The investigation is still ongoing, and Sally Beauty does not yet know how many...

FireEye Threat Intelligence and the Microsoft Threat Intelligence Center investigated a new command-and-control (C2) obfuscation tactic that had been used on Microsoft TechNet, a web portal for IT professionals. FireEye has determined that APT17, a China-based advanced persistent threat group, posted in forum threads and created profile pages to host encoded C2 IP addresses that would direct a variant of the BLACKCOFFEE backdoor to their C2 server. TechNet’s security was not compromised in this tactic,...

British police have quietly upgraded their cybersecurity skills over the last five years by expanding their training scheme for officers a hundredfold. A freedom of information request fielded by 19 forces showed that almost 4,000 officers have undertaken cybersecurity training since the start of this year, a huge rise on the 37 who took it in 2010. View full story

Ukraine is turning to an unlikely partner in its struggle to defend itself against Russian cyber warfare: Romania. The eastern European country known more for economic disarray than technological prowess has become one of the leading nations in Europe in the fight against hacking. View full story

here's an extremely critical bug in the Xen, KVM, and native QEMU virtual machine platforms and appliances that makes it possible for attackers to break out of protected guest environments and take full control of the operating system hosting it, security researchers warned Wednesday. View full story

Google has published some details of its efforts to comply with the Court of Justice of the European Union's “right to be forgotten” decision that compelled search engines to remove links if citizens ask them to do so. View full story