Top 10 Stories

The administrator of the popular Darknet email service, SIGAINT, is warning users that the email service has become a suspected target of a law enforcement agency who tried to compromise it. About a week ago, SIGAINT has been targeted by an attacker who tried to hack the service by using nearly 70 bad Tor exit nodes, one of the service's administrator informed its users via the tor-talk mailing list on Thursday. View full story

A new report from Symantec has revealed that one in every five Android apps are actually malware. In 2003, researchers said that around 700,000 were virus-laden. Now they're saying that “17 percent of all Android apps (nearly one million total)” are actually malware in disguise. According to its latest Internet Security Threat Report, more than one third of all Android apps were found to be what Symantec dubs as “grayware” or “madware.” View full story

Russian hackers have stolen unclassified emails sent and received by US President Barack Obama as part of an October White House breach. The emails could contain sensitive information such as diplomatic correspondence, schedules, and policy debate, unnamed officials tell the New York Times. The White House says the attackers did not breach classified networks nor Obama's personal Blackberry. View full story

Having reported a series of security problems to discount and deal site Groupon, security researcher Brute Logic from XSSposed.org was expecting a pay-out -- but the site refuses to stump up the cash. In all, Brute Logic reported more than 30 security issues with Groupon's site, but the company cites its Responsible Disclosure policy as the reason for not handing over the cash. On April 17 he contacted Groupon to report the problems and heard back...

According to this email, which has the subject line 'Tesco Bank Changes to Interest rate', you can view the latest interest rate news and changes from Tesco Bank by opening an attached file. However, the email is not from Tesco Bank. It is a phishing scam designed to steal your account login details. Opening the attachment in the scam email loads a fraudulent webpage in your default browser. The webpage, which includes the Tesco Bank logo,...

A breach affecting nearly 760 patients at St. Vincent Medical Group in Indiana is the latest example of a healthcare organization falling victim to an apparent upswing in phishing attacks targeting employees. According to the healthcare provider, the employee email account subject to the phishing contained some personal health information for approximately 760 patients. This is the third major health data breach since 2010 reported by St. Vincent Medical Group, a 20-hospital system that's part of...

Fortinet today have announced a partnership with Exodus Intelligence designed to facilitate information sharing between the two organizations, to further protect enterprises across the globe from looming cyber threats. In addition to the intelligence sharing elements of the partnership, both Exodus and Fortinet will work on the development of new customer-facing threat mitigation and incident response services. Logan Brown, president of Exodus Intelligence, said that sharing threat intelligence was key to protecting organisations from cyber...

Tripwire today announced that Tripwire® IP360 TM now discovers more than 100,000 conditions, including vulnerabilities, configurations and operating systems, and more than 15,000 applications. Tripwire's VERT team identifies emerging vulnerabilities and creates unique detection signatures that are constantly updated in the company’s vulnerability and risk management solutions – delivering unprecedented vulnerability discovery coverage. Recent updates include expanded coverage for the following: Apple TV. HP Data Protector. Synology DiskStation. F5 BIG-IP. IBM DB2. Over the past year,...

A fake Facebook interface will display an attractive looking “Hot Video” link. If you hit Play button, you will be requested to download Flash Player. As usual, a Trojan will be installed on your computer if you agree to download the player — Beware of such links as this technique has become relatively common modus operandi of hackers. There is an independent group responsible for this scam. Hackers have abused Google’s free online file storage...

Researchers have identified a vulnerability in wpa_supplicant, the popular Wi-Fi Protected Access (WPA) supplicant for Linux, BSD, Mac OS X, Windows, and various other operating systems. According to an advisory published on Wednesday by Malinen, the supplicant is plagued by a security bug (CVE-2015-1863) that can lead to unexpected program behavior, exposure of memory contents, denial-of-service (DoS), and possibly even arbitrary code execution. A patch has been released to address the issue. The fix will also be included in...