Security News > 2020 > July

North Korean Hackers Operate VHD Ransomware, Kaspersky Says
2020-07-29 11:02

The VHD ransomware family that emerged earlier this year is the work of North Korea-linked threat actor Lazarus, Kaspersky's security researchers reveal. Several malware families have been attributed to Lazarus over the past several months, including new Mac malware families and the cross-platform malware framework MATA. Now, Kaspersky reveals that the threat actor is also operating the VHD ransomware, which has been observed in two campaigns in March and May 2020.

Cybersecurity Training Company RangeForce Raises $16 Million
2020-07-29 10:45

Virginia-based cybersecurity training company RangeForce announced on Tuesday that it has raised $16 million in a Series A funding round. RangeForce plans on using the money for global growth, to accelerate go-to-market efforts, boost product development, and expand its network of training orchestration partners.

ZDI Announces Rules, Prizes for Pwn2Own Tokyo 2020
2020-07-29 10:08

Trend Micro's Zero Day Initiative on Tuesday announced the rules and prizes for its Pwn2Own Tokyo 2020 hacking competition, which invites white hat hackers to demonstrate their smartphone and IoT device exploits. Pwn2Own Tokyo 2020 will take place on November 3-5 and it will coincide with the PacSec conference, which typically takes place in Tokyo that time of year.

OkCupid Security Flaw Threatens Intimate Dater Details
2020-07-29 10:00

Researchers have discovered a slew of issues in the popular OkCupid dating app, which could have allowed attackers to collect users' sensitive dating information, manipulate their profile data or even send messages from their profile. Check Point researchers disclosed their findings to OKCupid, after which OkCupid acknowledged the issues and fixed the security flaws in their servers.

The future of encryption: Getting ready for the quantum computer attack
2020-07-29 09:12

PQShield, a spin-out from the UK's Oxford University, is developing advanced cryptographic solutions for hardware, software and communications to protect businesses' data from the quantum threat. All stored data currently deemed secure by modern standards - whether that's health records, financial data, customer databases and even critical government infrastructure - could, in theory, be cracked by quantum computers, which are capable of effectively short circuiting the encryption we've used to protect that data until now.

India Bans 47 More Chinese Mobile Apps
2020-07-29 08:37

India has banned 47 more Chinese apps just weeks after blocking the highly popular video-sharing platform TikTok and 58 others over national security and privacy concerns, an information ministry official and media reports said Monday. "We have banned 47 mobile apps from China in this ongoing exercise which highlights the government's seriousness about data privacy and security," the official, who asked to remain anonymous, told AFP. "The order was issued on Friday. Most of these 47 apps are banned for the same reasons as the earlier 59, and many were lite versions or variants of the earlier banned applications."

No wonder Brit universities report hacks so often: Half of staff have had zero infosec training, apparently
2020-07-29 08:01

Nearly half of British university staff say they have received no cybersecurity training, according to a recent survey. 46 per cent of staff received no training at all, while one Russell Group uni said that just 12 per cent of its staff had received "Any" training in infosec matters.

Is Your Security Vendor Forcing You To Move to the Cloud? You Don't Have To!
2020-07-29 07:33

Cloud vs. On-Premise The cloud vs. on-premise argument continues to rage. Many companies also realize improved security as the cloud provider may employ security measures that are out of reach for an individual company-and of course, cloud apps are accessible anytime from anywhere via almost any device.

Is Your Security Vendor Forcing You To Move to the Cloud? You Don't Have To!
2020-07-29 07:33

Cloud vs. On-Premise The cloud vs. on-premise argument continues to rage. Many companies also realize improved security as the cloud provider may employ security measures that are out of reach for an individual company-and of course, cloud apps are accessible anytime from anywhere via almost any device.

Japan starts work on global quantum crypto network
2020-07-29 07:02

Japan is poised to start work on global quantum key distribution service and associated infrastructure. Quantum Communications Link Technology that realizes high-speed, long-distance, and high-availability links in quantum cryptographic communication networks;.