Security News

Serious Security: Don’t let your SQL server attack you with ransomware
2019-05-25 14h17

Serious Security: Don’t let your SQL server attack you with ransomware Tales from the honeypot: this time a MySQL-based attack. Old tricks still work, because we're still making old mistakes - here's what to do.

Georgia Supreme Court Rules that State Has No Obligation to Protect Personal Information
2019-05-25 06h33

Almost exactly one year after the stringent European General Data Protection Regulation came into effect (May 25, 2019), the Supreme Court of the state of Georgia has ruled (May 20,  2019) that the state government does not have an inherent obligation to protect citizens' personal information that it stores. read more

Millions of personal files exposed by insurance biz, serial web hacker strikes again, and more from infosec land
2019-05-25 02h52

Your two-minute guide to all the other security news this week Roundup It's a bumper three-day weekend in the US and UK, so we won't keep you long. Here's a rapid summary of information security news from the past week beyond what El Reg has already covered.…

Friday Squid Blogging: More Materials Science from Squid Skin
2019-05-24 17h11

Article: "How a Squid's Color-Changing Skin Inspired a New Material That Can Trap or Release Heat." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here....

First American Financial Corp. Leaked Hundreds of Millions of Title Insurance Records
2019-05-24 16h47

The Web site for Fortune 500 real estate title insurance giant First American Financial Corp. [NYSE:FAF] leaked hundreds of millions of documents related to mortgage deals going back to 2003, until notified this week by KrebsOnSecurity. The digitized records -- including bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images -- were available without authentication to anyone with a Web browser.

NSA Hawaii
2019-05-24 15h14

Recently I've heard Edward Snowden talk about his working at the NSA in Hawaii as being "under a pineapple field." CBS News recently ran a segment on that NSA listening post on Oahu. Not a whole lot of actual information. "We're in office building, in a pineapple field, on Oahu...." And part of it is underground -- we see a...

Snapchat Privacy Blunder Piques Concerns About Insider Threats
2019-05-24 14h33

After a report found that Snap employees were abusing their access to Snapchat data, experts are warning that insider threats will continue to be a top challenge for privacy.

What the future looks like as GDPR's one-year anniversary approaches
2019-05-24 13h57

ZDNet's Danny Palmer sits down with TechRepublic's Karen Roby to break down exactly what GDPR is, what it does, and what the future looks like as its one-year anniversary approaches.

Joomla and WordPress Found Harboring Malicious Redirect Code
2019-05-24 13h48

New .htaccess injector threat on Joomla and WordPress websites redirects to malicious websites.

GitHub Adds New Tools to Help Developers Secure Code
2019-05-24 13h12

Microsoft-owned GitHub on Thursday announced the introduction of several new security tools and features designed to help developers secure their code. read more

Microsoft Defender ATP for Mac Now in Public Preview
2019-05-24 12h19

Microsoft’s unified endpoint security solution is now publicly available for Mac users, following two months of limited preview.  read more

Microsoft Beefs Up Wi-Fi Protection
2019-05-24 11h52

The Windows 10 update that's rolling out addresses insecure Wi-Fi hotspots with new user notifications.

One Year on, EU's GDPR Sets Global Standard for Data Protection
2019-05-24 10h24

The EU's strict data laws have set the global benchmark for protecting personal information online since coming into force a year ago, but some worry that many users have barely noticed the change. read more

New York Department of Financial Services Launches Cybersecurity Unit
2019-05-24 10h03

The New York State Department of Financial Services (DFS) this week announced that it has launched a new cybersecurity division whose role is to protect consumers and financial services organizations from cyber threats. read more

Oh Canada: Why half of phishing attacks target the Great White North
2019-05-24 09h58

Though phishing volume remained relatively stable, attacks against Canadian users dominate, according to an RSA report.