Security News > 2017

Hadoop, CouchDB Next Targets in Wave of Database Attacks (Threatpost)
2017-01-20 19:18

Insecure Hadoop and CouchDB installations are the latest attack targets of cybercriminals who are hijacking and deleting stolen data.

Western Union admits it facilitated scammers, forfeits $586 million (Help Net Security)
2017-01-20 18:48

Western Union has agreed to forfeit $586 million and enter into agreements with the Federal Trade Commission, the Justice Department, and several U.S. Attorneys’ Offices. Western Union admits to...

Hack the Army Bounty Pays Out $100,000; 118 Flaws Fixed (Threatpost)
2017-01-20 18:00

The U.S. Army released the results of its Hack the Army bug bounty, and said that close to $100,000 was paid out, and 118 unique and actionable vulnerabilities were reported.

Threatpost News Wrap, January 20, 2017 (Threatpost)
2017-01-20 16:50

Mike Mimoso, Tom Spring, and Chris Brook discuss security-wise what they hope will and won't change under a Trump presidency, then discuss the news of the week, including SHA-1 deprecation,...

New White House Privacy Report (Schneier on Security)
2017-01-20 15:51

Two days ago, the White House released a report on privacy: "Privacy in our Digital Lives: Protecting Individuals and Promoting Innovation." The report summarizes things the administration has...

Satan: A new Ransomware as a Service (Help Net Security)
2017-01-20 15:22

If you’ve been hit by ransomware that has scrambled the names of your encrypted files and has appended the .stn extension to them, you’ve been targeted by Satan – not the “Prince of Darkness”, but...

Data breaches hit all-time record high, increase 40% in 2016 (Help Net Security)
2017-01-20 14:57

The number of U.S. data breaches tracked in 2016 hit an all-time record high of 1,093, according to a new report by the Identity Theft Resource Center (ITRC) and CyberScout. This represents a...

New infosec products of the week​: January 20, 2017 (Help Net Security)
2017-01-20 13:45

Twistlock 1.7 comes with new runtime defense architecture Twistlock unveiled a new runtime defense architecture for its Twistlock 1.7 container security platform that enables both predictive and...

Advancing a standard format for vendors to disclose cybersecurity vulnerabilities (Help Net Security)
2017-01-20 12:45

Technology providers and their customers are joining forces to advance a standard format for vendors to disclose cybersecurity vulnerabilities. The work of the new OASIS Common Security Advisory...

Most employees use unsanctioned group chat tools (Help Net Security)
2017-01-20 12:30

Employees are sharing sensitive company information using group chat tools that are not officially sanctioned for use, according to SpiderOak. The survey consisted of 600 full-time workers ages 21...