Top 10 Stories

Probing the bowels of what he believed to be North Korean hacking architecture, American cybersecurity researcher Darien Huss found an outlier: iPhone software. It appeared at first glance to be a fairly mundane program, a mobile device management (MDM) tool. Such apps are typically used for businesses to remotely monitor and control employees' phones. But, according to Huss, it's most likely one of, if not the only, example of North Korean spyware for Apple's smartphone. View Full Story...

Researchers find campaigns distributing Gandcrab by hosting malware on legitimate websites with poor security measures. Cryptominers may have stolen the spotlight as cybercrime's hottest new trend, but it doesn't mean we can stop paying attention to ransomware. Researchers at Cisco Talos detected a new batch of Gandcrab ransomware being distributed through legitimate but poorly secured sites. View Full Story ORIGINAL SOURCE: Dark Reading

Malware has harvested payment card details from some Chili's restaurants, Brinker International, the company behind the restaurant chain announced on Friday. Brinker says it detected the malware on Friday, May 11, the same day it made the announcement. The company said it is still investigating the incident together with law enforcement and third-party forensic experts. View Full Story ORIGINAL SOURCE: Bleeping Computer

Twitter and Instagram have been criticised by an MP for failing to remove posts advertising Xanax. There is evidence the anti-anxiety medication is increasingly being used recreationally by young people, some of whom have needed hospital treatment. View Full Story ORIGINAL SOURCE: BBC

A team of nine academics is warning the world about critical vulnerabilities in the https://en.wikipedia.org/wiki/Pretty_Good_Privacy and https://en.wikipedia.org/wiki/S/MIMEemail encryption tools. The flaws, if exploited, allow an attacker to decrypt sent or received messages, according to the researcher team. View Full Story ORIGINAL SOURCE: Bleeping Computer

Five academics from the Vrije University in Amsterdam and one from the University of Cyprus have discovered a way for launching Rowhammer attacks via network packets and network cards. Their discovery makes Rowhammer attacks easier and much more convenient to launch, as an attacker only needs to bombard a victim's network card with specially-crafted packets. View full story ORIGINAL SOURCE: Bleeping Computer

In the web browser war, Mozilla is positioning itself to dominate over the competition with its release of Firefox 60, which includes the option of a password-less signin. The latest version of the Firefox browser uses a Web Authentication API, WebAuthn for short, which enables authentication using public key cryptography, taking credentials management to a new level. View full story ORIGINAL SOURCE: Infosecurity Magazine

In the web browser war, Mozilla is positioning itself to dominate over the competition with its release of Firefox 60, which includes the option of a password-less signin. The latest version of the Firefox browser uses a Web Authentication API, WebAuthn for short, which enables authentication using public key cryptography, taking credentials management to a new level. View full story ORIGINAL SOURCE: Infosecurity Magazine

Equifax acknowledged a relatively small number of passport images and information were stolen as part of last year’s security breach, despite previously denying such a thing occurred. View full story ORIGINAL SOURCE: NY Post

Organizations are often so hyper focused on securing the network perimeter they overlook the fact that a lot of corporate data on mobile devices is making them the preferred target for phishing attacks. In fact, the rate at which people fall for phishing attacks has increased 85 per cent every year since 2011, according to mobile security startup Lookout. View full story ORIGINAL SOURCE: Enterprise Mobility Exchange