February’s Top Cybersecurity News Stories: Nice Phish You Got There

Last month’s cybersecurity news cycle featured a tricky cryptocurrency-stealing Trojan, targeted phishing attacks, interesting insights about millennials’ identity protection habits and more.

The post February’s Top Cybersecurity News Stories: Nice Phish You Got There appeared first on Security Intelligence.

Continue reading February’s Top Cybersecurity News Stories: Nice Phish You Got There

Most healthcare breaches still come from hacking

In 2017 the number of individuals affected by breaches within the healthcare sector reached a four-year low. However, 71 percentof breaches in 2017 were due to hacking and IT incidents, and a growing proportion growth trend that has continued since 201… Continue reading Most healthcare breaches still come from hacking

On a server I run, bogus incoming mail for a username which is my name. Should I be worried?

A server I run has a minimal public-facing mail exposure, running postfix on port 25 (no authentication on this port; IMAP is accessible by other means). In my mail logs it is not uncommon to find ‘bogus’ mail destined for no… Continue reading On a server I run, bogus incoming mail for a username which is my name. Should I be worried?

Russian hackers sentenced to prison in US for compromising 160 million credit cards

Two Muscovites have been sentenced to years in prison for their roles in the biggest data breach conspiracy ever prosecuted in the United States. Three co-conspirators are still at large. Vladimir Drinkman, 37 and Dmitriy Smilianets, 34, had previously… Continue reading Russian hackers sentenced to prison in US for compromising 160 million credit cards

Indictments reveal how Russia’s 2016 election information warfare worked

Russian operatives were able to obfuscate their activities in 2016 by stealing the identities of U.S. citizens, renting servers based in the U.S. and using a VPN all while posting targeted propaganda on social media to disrupt American politics, according to a new and lengthy criminal case against multiple Russian nationals. The Justice Department on Friday released an indictment against 13 Russian individuals and three Russian companies accused of violating federal U.S. criminal law to interfere with the 2016 U.S. presidential election. The defendants are charged with conspiracy to defraud the United States, wire fraud and identity theft. Special Counsel Robert Mueller’s investigation into Russian interference released the detailed charges Friday, accusing a long list of Russians of supporting Donald Trump’s presidential campaign and working against Hillary Clinton’s candidacy. A recent leak of Julian Assange’s personal messages showed WikiLeaks pushing for the same goal. “The defendants waged what they called ‘information warfare against the […]

The post Indictments reveal how Russia’s 2016 election information warfare worked appeared first on Cyberscoop.

Continue reading Indictments reveal how Russia’s 2016 election information warfare worked

DataVisor raises $40 million Series C for machine-learning fraud detection

DataVisor, a company that uses machine learning to detect fraud, announced a $40 million Series C funding round Monday led by Sequoia Capital China. The company, founded by two former Microsoft Research employees, uses unsupervised machine learning to discover malicious behavior. Unsupervised learning allows machines to track patterns across data sets in order to make decisions on their own, as opposed to supervised learning, which trains computers through data feeds provided by engineers. DataVisor detects various types of fraud and abuse, including fraudulent transactions, fake content, spam and abuse, identity theft, application fraud and money laundering. The company says its technology protects 2 billion users globally, with a client list that includces Pinterest, Yelp, Alibaba Group, Dianping, Toutiao, Cheetah Mobile and Tokopedia. “Enterprises today are facing constantly evolving threats from sophisticated and tech-savvy fraudsters who continuously experiment and find ways to evade detection,” said Yinglian Xie, CEO and co-founder of DataVisor. “This new […]

The post DataVisor raises $40 million Series C for machine-learning fraud detection appeared first on Cyberscoop.

Continue reading DataVisor raises $40 million Series C for machine-learning fraud detection

IBM Study Shows Consumers Don’t Trust Social Networks With Identity Data

IBM Security’s “Future of Identity Study” found that consumers don’t trust social media networks to securely collect their identity data, such as biometrics and other PII.

The post IBM Study Shows Consumers Don’t Trust Social Networks With Identity Data appeared first on Security Intelligence.

Continue reading IBM Study Shows Consumers Don’t Trust Social Networks With Identity Data

Unpatched Vulnerability Exposes WordPress Sites to Denial-of-Service Attacks

Attackers can render many WordPress websites unresponsive by exploiting an unpatched vulnerability in core modules that loads JS and CSS files to improve performance. The issue stems from the “load” parameter in the load-styles.php and load… Continue reading Unpatched Vulnerability Exposes WordPress Sites to Denial-of-Service Attacks