SecurityWeek
BEC Scam Losses Top $12 Billion: FBI
The losses and potential losses reported as a result of business email compromise (BEC) and email account compromise (EAC) scams exceed $12 billion globally, according to an alert published last week by the FBI.
US Lifts Export Ban on Suppliers to China's ZTE
The United States on Friday formally lifted a crippling ban on exports to China's ZTE, rescuing the smartphone maker from the brink of collapse after it was denied key components.
The US Commerce Department said it would continue to monitor the company to prevent further violations of US sanctions on Iran and North Korea.
Trump Says 'Might' Ask Putin to Extradite Accused Russian Hackers
Donald Trump has said he may ask Vladimir Putin during their upcoming summit meeting to extradite to the US 12 Russian intelligence officers accused of attempting to interfere with the 2016 presidential election.
BREAKING: 12 Russian Intelligence Officers Indicted for Hacking U.S. Democrats
Twelve Russian intelligence officers were indicted by a US grand jury on Friday, just three days before President Donald Trump is scheduled to meet with Russian leader Vladimir Putin, for interfering in the 2016 presidential election.
Attackers Target iPhones Using Open Source MDM Solution
Recently discovered cyber attacks targeting iPhone users have been using an open source mobile device management (MDM) system to control enrolled devices, Talos reports.
Flaws Expose Siemens Protection Relays to DoS Attacks
Siemens has informed customers that some of the company’s SIPROTEC protection relays are exposed to denial-of-service (DoS) attacks due to a couple of vulnerabilities present in the EN100 communication module.
Cisco Patches High Risk Flaws in StarOS, IP Phone
Cisco this week released a set of security patches to address several vulnerabilities in its products, including High risk issues impacting StarOS and 6800, 7800, and 8800 Series IP Phones.
Support for Python Packages Added to GitHub Security Alerts
GitHub announced on Thursday that developers will be warned if the Python packages used by their applications are affected by known vulnerabilities.
VPNFilter Malware Hits Critical Infrastructure in Ukraine
The Security Service of Ukraine (SBU) revealed this week that the VPNFilter malware, which it attributed to Russian intelligence agencies, had targeted a critical infrastructure organization.
Dark Web Chatter Helpful in Predicting Real World Hacks, Firm Says
Some hacks are serendipitous events for skiddies who happen across a website with an easily exploitable common vulnerability. Others, especially the major breaches of major enterprises, are planned and executed with care. Such planning often leaves traces of noise across the internet. IntSights, founded in 2015, searches both the surface and deep web for this noise, and converts it into actionable intelligence. It looks for evidence of planned attacks before they actually occur.
Arch Linux AUR Repository Compromised
A user-maintained Arch Linux AUR (Arch User Repository) software repository was pulled earlier this week after it was found to contain malware.
HackerOne Bug Bounty Programs Paid Out $11 Million in 2017
White hat hackers who responsibly disclosed vulnerabilities through bug bounty programs hosted by HackerOne earned more than $11 million last year, according to the company’s 2018 Hacker-Powered Security Report.
Timehop Shares More Details on Data Breach
Timehop has shared additional details about the recent data breach that impacted roughly 21 million user accounts, including what the attackers did once they gained access to the company’s systems and what other type of information was compromised.
Five Steps to Security Automation
Two weeks ago, Volvo, the Swedish automaker, announced plans for a Level 4 self-driving car by 2021.
Broadcom Buys Business Software Firm CA for $18.9 Billion
Semi-conductor giant Broadcom, which recently failed in a bid to buy US rival Qualcomm, on Wednesday announced a cash deal to buy software and services firm CA Technologies for $18.9 billion.
Hackers Can Chain Multiple Flaws to Attack WAGO HMI Devices
Germany-based industrial automation company WAGO has patched several vulnerabilities in its e!DISPLAY 7300T Web Panel human-machine interface (HMI) products that can be chained to take control of affected devices.
Hacker Offers Access to Machine at International Airport for $10
The cost of RDP (Remote Desktop Protocol) access to a system located at a major international airport is of only $10 on the Dark Web, McAfee has discovered.
AT&T to Acquire Threat Management Firm AlienVault
AT&T on Tuesday said it would acquire San Mateo, Calif.-based threat management and intelligence firm AlienVault for an undisclosed sum.