Security News > 2019 > January

773 million records exposed in massive data breach
2019-01-17 11:43

Someone has compiled a massive collection of email addresses and plain text passwords, apparently from 2000+ hacked databases, and has made the trove freely available for download via the MEGA...

Six Steps to Segmentation in a Perimeterless World
2019-01-17 11:31

Setting Objectives and Having a Clear Roadmap is the Best Path to a Successful Network Segmentation Journey read more

Airline Booking System Exposed Passenger Details
2019-01-17 10:33

Vulnerability Highlights Poor Security Controls for Passenger Name RecordsAirline booking system provider Amadeus - used by 500 airlines - is investigating a software vulnerability that exposed...

Ukrainian Police Arrest 6 Hackers Linked to DDoS and Financial Attacks
2019-01-17 09:33

Ukrainian Police have this week busted out two separate groups of hackers involved in carrying out DDoS attacks against news agencies and stealing money from Ukrainian citizens, respectively....

South Korea says mystery hackers cracked advanced weapons servers
2019-01-17 08:01

No idea who could have been behind this one... The South Korea Ministry of National Defense says 10 of its internal PCs have been compromised by North Korea unknown hackers .…

Unprotected Government Server Exposes Years of FBI Investigations
2019-01-17 07:48

A massive government data belonging to the Oklahoma Department of Securities (ODS) was left unsecured on a storage server for at least a week, exposing a whopping 3 terabytes of data containing...

Two Code Execution Flaws Patched in Drupal
2019-01-17 07:08

Updates released on Wednesday for Drupal 7, 8.5 and 8.6 address two potentially serious vulnerabilities that can be exploited for arbitrary code execution. read more

Compromised ad company serves Magecart skimming code to hundreds of websites
2019-01-17 07:00

Security researchers have flagged a new web-based supply chain attack by one of the cybercriminal groups that fall under the Magecart umbrella. The attackers managed to compromise Adverline, a...

2019 cybersecurity workforce: Recruiting vs. re-skilling
2019-01-17 06:45

The cybersecurity talent gap is not just an IT industry crisis. It’s one with global ramifications. As the inevitable march towards digitalizing the world continues, it brings with it a steady...

Cyber risk management and return on deception investment
2019-01-17 06:30

This article is fifth in a five-part series being developed by Dr. Edward Amoroso in conjunction with the deception technology team from Attivo Networks. The article provides an overview of how...