SecurityWeek

Can’t hack this? Oh yes, they can. A few months back when New York Magazine’s Kevin Roose dared (see embedded video below) a couple of expert hackers to hack him, it reminded me of that old Toyota commercial: “You asked for it. You got it!” Only poor Roose didn’t wind up with a Corolla.

CloudFlare and Sucuri reported observing various types of ImageTragick exploits used by malicious actors for reconnaissance purposes and to gain access to vulnerable web servers.

British businesses have a high awareness of cybersecurity risk, but do relatively little about it. This is one of the key findings of a new government-sponsored survey into cyber security and data breaches in the UK.

Blame for the February cyber theft of $81 million dollars from the Bangladesh central bank New York reserves in February has been levelled at SWIFT technicians by the investigating Bangladeshi police, according to Reuters. Swift has rejected these claims.

The Federal Trade Commission (FTC) and the Federal Communications Commission (FCC) have joined forces in an effort to analyze the security update practices of mobile carriers and device manufacturers.

The details of an unspecified number of Google employees were exposed recently by one of the search giant’s third-party vendors.

The Bucbi ransomware, a threat detected back in early 2014, has received a significant update and now uses RDP brute force attacks as its delivery mechanism, researchers at Palo Alto Networks say.

The hacker group that claimed responsibility for stealing and dumping 1.5 GB of data from the Qatar National Bank has now claimed responsibility for a 10 GB dump supposedly stolen from the Sharjah-based InvestBank. This was not unexpected, following hints last week that such a dump was imminent.

Israeli authorities have approved the extradition to the United States of two nationals indicted over a cyber attack against JPMorgan Chase, one of the largest computer frauds in history.

If an IoT device is basically an embedded device with some connectivity, then one of the earliest IoT devices is the smart card. The driving force behind smart card standards is the Smart Card Alliance (SMA), an organization comprising more than 200 worldwide members from finance, government, telecommunications, transport, healthcare and retail. Many of its members involved in chips and services for smart cards are also pursuing new opportunities in the IoT market. 

Contending with hostage situations is no longer something only shipping companies moving goods through pirate-infested waters must consider. With the growing threat of ransomware – malware that locks data until an enterprise pays for its decryption – businesses across industries have found themselves negotiating with criminals to release critical corporate information. 

A security researcher was arrested and charged after finding some serious vulnerabilities on a couple of elections websites in Florida.

A new Android banking Trojan capable of spying on users and stealing credit card info is achieving persistency on infected devices by asking for device administrator rights and continuously showing the dialog window until the user gives in.

Researchers have created an experimental worm that is capable of spreading from one programmable logic controller (PLC) to another without needing a PC or a server.