Top 10 Stories

Exabeam has published its 2018 Cyber Security Professionals Salary and Job Report (registration required). While the survey pool was low at just 481 respondents, the results are interesting none the less. View full story ORIGINAL SOURCE: Enterprise Times

Two-factor authentication may not be the panacea of securing access to online accounts that many believe it is as KnowBe4's Kevin Mitnick shows how easily this defensive measure can be spoofed. View full story ORIGINAL SOURCE: SC Magazine

EE, the largest cell network in the UK with some 30 million customers, has secured a critical code repository after a security researcher found anyone could log in with the default username and password. View full story ORIGINAL SOURCE: ZDNet

Nest, the Google-owned manufacturer of home automation devices best known for its smart thermostat, has warned a customer of a password breach, urging him to change it and deploy two-factor authentication (2FA). View full story ORIGINAL SOURCE: Computing

Iran has increasingly moved into the clandestine side of the online world to infiltrate enemies and counter threats. With President Trump's decision to remove the U.S. from the nuclear deal with Iran, many now fear the nation's hackers, inspired by Russia's successes in online sabotage, will lead the charge in response to American antagonism. View full story ORIGINAL SOURCE: Forbes

Iran has increasingly moved into the clandestine side of the online world to infiltrate enemies and counter threats. With President Trump's decision to remove the U.S. from the nuclear deal with Iran, many now fear the nation's hackers, inspired by Russia's successes in online sabotage, will lead the charge in response to American antagonism. View full story ORIGINAL SOURCE: Forbes

New UK laws implementing the EU directive on the security of network and information systems (NIS) goes into effect on 10 May 2018. All organisations classified by the NIS Competent Authorities to be “operators of essential services” will be affected by new laws. The new rules are aimed at ensuring the UK’s most critical industries boost cyber security and are backed by hefty fines for any organisation in the sector that fails to take adequate...

4iQ is a identity threat intelligence company that monitors the internet for identity records exposed in data breaches and accidental leaks.  The latest 4iQ identity breach report indicates that between 2016 and 2017 there was a 182 percent increase in raw identity records discovered by its team. View full story ORIGINAL SOURCE: Bleeping Computer

Many organizations, including the likes of Panera, UnderArmour, Delta and Sears, have suffered the consequences of a "golden child" app that runs wild. They all have experienced high-value web-app attacks. A new study released by Arxan, 2018 Global Study on Application Security, takes a look at the impact apps running in unsecured environments pose to businesses and the specific tools and techniques businesses are currently using to get in front of these risks. View full story ORIGINAL SOURCE: Infosecurity Magazine

A new “nasty”  Facebook Messenger malware has been uncovered that can install without you knowing and steal your passwords. Called FacexWorm, the malware was spotted by consumer tech radio host Kim Komando and is apparently being used by cyber criminals to communicate their latest phishing scheme to innocent users. View full story ORIGINAL SOURCE: The Sun