Top 10 Stories

Former NSA head General Keith Alexander is once again warning that western energy companies are unprepared for a potentially catastrophic cyber-attack. "The greatest risk is a catastrophic attack on the energy infrastructure. We are not prepared for that," he said, adding, "We need something like an integrated air-defense system for the whole energy sector." There is growing concern among experts we've interviewed that as more nation-states and groups enter the cyber arena that infrastructure systems...

The Trend Micro Security Intelligence Blog reported, "Enterprises are currently being targeted by the macro malware BARTALEX in a recent outbreak of thousands of spammed emails. The infection routine for BARTALEX uses a Microsoft Word document and social engineering lure that is widely recognized by enterprises—making infection all too possible. This attack highlights how macro malware in Microsoft Office files is fast becoming a big threat to businesses and organizations. View full story

On 25th April, 2015, Indonesian hackers going with the group handle of Gantengers Crew hacked and defaced the Online Resources domain of US based Financial Services Company MasterCard. Hackers left a deface page along with a note on the website, but the reason for targeting MasterCard website wasn’t mentioned anywhere. View full story

TESLA, the car manufacturer, had their website and Twitter accounts hacked as well as the Twitter account of the CEO, Elon Musk. The hack took place on Saturday and once the hackers gained control of the systems began offering free cards if users called a phone number that turned out to be an Illinois number that belongs to a computer repair shop. View full story

Anonymous attacked and took down the Telecom Regulatory Authority of India (TRAI) website over the weekend after a privacy dispute. India Today reported, "In a recent development, hacker group Anonymous India has brought down TRAI's official website after the Indian telecom regulator publicly released the list of email IDs from which it received responses on Net Neutrality. TRAI's controversial move that threatened the privacy of over a million Internet users in India was met with widespread...

Seton Family of Hospitals sent letters on Friday to approximately 39,000 patients who were affected by a recent data breach. Employees were targeted with a phishing attack, and the intruders were able to gain access to patient information including Social Security numbers, names, addresses, dates of birth, medical information and insurance information. "Hundreds" of Social Security numbers were affected, according to Seton. View full story

Yes, you’ve read it right: a critical, unpatched zero-day vulnerability affecting WordPress’ comment mechanisms was disclosed earlier today by Klikki Oy. Who’s affected? If your WordPress site allows users to post comments via the WordPress commenting system, you’re at risk. An attacker could leverage a bug in the way comments are stored in the site’s database. View full story

Sendgrid, an email service used by tens of thousands of companies, including Bitcoin exchange Coinbase, said attackers compromised an employee's account, which was then used to steal the usernames, email addresses and (hashed) passwords of customer and employee accounts. The announcement comes several weeks after Sendgrid sought to assure customers that the breach was limited to a single customer account. View full story

The cyber war between Armenian and Turkish hackers is reaching a new height. It begin with Pope Francis’ remarks in which he used the word ‘genocide’ to refer to mass killings of Armenians by Turks. In reply, Turkish hackers conducted a DDoS attack and shut down the official website of Vatican City. The same Turkish hackers then started targeting Armenian websites amid pope’s remarks and Turkish government’s reply to these remarks.

MyFreedomSmokes acknowledged a data breach of its sites shopping cart information between February 11 and March 15, 2015. The company discovered unauthorized code on its website that it believes was used to steal customer information. Affected data could include customer name, physical address, email address, telephone number, credit card number, expiration date and CVV number. According to Freedom Smokes statement, some customers have reported fraudulent charges appearing on their payment cards. View full story