US DOE Introduces New Cybersecurity Office to Protect Energy Sector

The U.S. Department of Energy (DOE) has announced the establishment of a new cybersecurity office to help protect and prepare the energy sector, including the oil and gas industry. Named the Office of Cybersecurity, Energy Security, and Emergency Response, or CESER, the new office received nearly $96 million in funding for the 2019 fiscal year. […]… Read More

The post US DOE Introduces New Cybersecurity Office to Protect Energy Sector appeared first on The State of Security.

The post US DOE Introduces New Cybersecurity Office to Protect Energy Sector appeared first on Security Boulevard.

from US DOE Introduces New Cybersecurity Office to Protect Energy Sector

Facebook’s New Policy Bans All Ads Promoting Cryptocurrencies

Facebook announced on Tuesday its plans to ban all ads that promote Bitcoin and other digital currency exchanges, initial coin offerings (ICOs) and binary options. The social network said the new policy aims to protect users from scams, describing such financial services as “frequently associated with misleading or deceptive promotional practices.” In a company blog […]… Read More

The post Facebook’s New Policy Bans All Ads Promoting Cryptocurrencies appeared first on The State of Security.

The post Facebook’s New Policy Bans All Ads Promoting Cryptocurrencies appeared first on Security Boulevard.

from Facebook’s New Policy Bans All Ads Promoting Cryptocurrencies

UK Critical Infrastructure Firms Could Face £17m Fine for Inadequate Cybersecurity

Organizations operating critical infrastructure could face hefty fines of up to £17m if they lack adequate cybersecurity measures, the UK government announced over the weekend. The penalties would apply to energy, transport, water and health firms that “fail to have the most robust safeguards in place against cyber attack,” the UK government said in a […]… Read More

The post UK Critical Infrastructure Firms Could Face £17m Fine for Inadequate Cybersecurity appeared first on The State of Security.

The post UK Critical Infrastructure Firms Could Face £17m Fine for Inadequate Cybersecurity appeared first on Security Boulevard.

from UK Critical Infrastructure Firms Could Face £17m Fine for Inadequate Cybersecurity

Uber Reportedly Ignored Security Flaw That Grants Hackers Access to User Accounts

Uber is under fire for reportedly dismissing a security flaw that can allow hackers to bypass the app’s two-factor authentication (2FA) and gain unauthorized access to user accounts. A New Delhi-based security researcher, Karan Saini, discovered the flaw and filed a report with HackerOne, which administers the ride-hailing app’s bug bounty program. According to Saini, […]… Read More

The post Uber Reportedly Ignored Security Flaw That Grants Hackers Access to User Accounts appeared first on The State of Security.

The post Uber Reportedly Ignored Security Flaw That Grants Hackers Access to User Accounts appeared first on Security Boulevard.

from Uber Reportedly Ignored Security Flaw That Grants Hackers Access to User Accounts

Uber Reportedly Paid Hackers $100K to Conceal Data Breach Impacting 57M Users

A massive breach impacting 57 million Uber customers and drivers went undisclosed for more than a year. According to Bloomberg, the ride-hailing app ousted its Chief Security Officer Joe Sullivan and one of his deputies for attempting to conceal the data breach. The cyberattack, which dates back to October 2016, led to the exposure of […]… Read More

The post Uber Reportedly Paid Hackers $100K to Conceal Data Breach Impacting 57M Users appeared first on The State of Security.

The post Uber Reportedly Paid Hackers $100K to Conceal Data Breach Impacting 57M Users appeared first on Security Boulevard.

from Uber Reportedly Paid Hackers $100K to Conceal Data Breach Impacting 57M Users

Forever 21 Alerts Customers of Potential Payment Card Breach

Forever 21 announced that it recently learned of unauthorized access to its payment systems, potentially exposing the credit card details of customers who shopped in stores. In a press release on Tuesday, the popular fast fashion retailer said it immediately began an investigation after receiving a report from a third-party regarding the security incident. The […]… Read More

The post Forever 21 Alerts Customers of Potential Payment Card Breach appeared first on The State of Security.

The post Forever 21 Alerts Customers of Potential Payment Card Breach appeared first on Security Boulevard.

from Forever 21 Alerts Customers of Potential Payment Card Breach

New ‘IcedID’ Banking Trojan Found Targeting Financial Institutions, Researchers Warn

Security researchers have discovered a new banking Trojan that is actively targeting U.S. financial institutions. Dubbed IcedID, the malware is believed to have emerged in the wild back in September 2017, when its first test campaigns were launched. According to IBM X-Force, IcedID was developed with “modular malicious code and modern capabilities” similar to those […]… Read More

The post New ‘IcedID’ Banking Trojan Found Targeting Financial Institutions, Researchers Warn appeared first on The State of Security.

The post New ‘IcedID’ Banking Trojan Found Targeting Financial Institutions, Researchers Warn appeared first on Security Boulevard.

from New ‘IcedID’ Banking Trojan Found Targeting Financial Institutions, Researchers Warn

Fake WhatsApp Downloaded Over 1 Million Times Pulled from Google Play

Over one million Android users unknowingly downloaded a fake version of the popular WhatsApp messaging service from the Google Play Store. Disguised as an “update,” the app was designed to look nearly identical to the official version, and claimed to be developed by “WhatsApp Inc.” Over the weekend, however, several users on Reddit flagged the […]… Read More

The post Fake WhatsApp Downloaded Over 1 Million Times Pulled from Google Play appeared first on The State of Security.

The post Fake WhatsApp Downloaded Over 1 Million Times Pulled from Google Play appeared first on Security Boulevard.

from Fake WhatsApp Downloaded Over 1 Million Times Pulled from Google Play

FBI Charges 22-Year-Old Student for Hacking System to Change Grades

A former student at the University of Iowa was arrested on computer-hacking charges for accessing copies of exams in advance, and altering grades for himself and his classmates. Chemistry major and wrestler Trevor Graves, 22, allegedly plugged keyloggers into university computers in classrooms and labs, allowing him to see whatever his professors typed, including their […]… Read More

The post FBI Charges 22-Year-Old Student for Hacking System to Change Grades appeared first on The State of Security.

The post FBI Charges 22-Year-Old Student for Hacking System to Change Grades appeared first on Security Boulevard.

from FBI Charges 22-Year-Old Student for Hacking System to Change Grades

Mexican Tourist Tax Refund Firm Exposes 455K Customer Records

Tourists that visited Mexico in the past year, and applied for a tax refund on goods purchased while there, may have had their personal information exposed. According to security researchers, a database containing over 455,000 documents – including scanned passports, identification cards, credit cards, boarding passes and travel tickets – was left open to the […]… Read More

The post Mexican Tourist Tax Refund Firm Exposes 455K Customer Records appeared first on The State of Security.

from Mexican Tourist Tax Refund Firm Exposes 455K Customer Records

Nearly Half of Popular Consumer Websites Lack Basic Password Security Requirements

A new analysis of over 40 popular consumer and enterprise websites revealed that many fail to implement the most basic password security requirements. According to the Password Power Rankings study conducted by Dashlane, a surprising 46 percent of consumer sites have “dangerously lax” password policies, including widely used Dropbox, Netflix and Pandora. Of the enterprise […]… Read More

The post Nearly Half of Popular Consumer Websites Lack Basic Password Security Requirements appeared first on The State of Security.

from Nearly Half of Popular Consumer Websites Lack Basic Password Security Requirements

Svpeng Mobile Banking Trojan Now Equipped with Keylogger Capabilities

Security researchers have uncovered a new variant of the infamous Android mobile banking Trojan Svpeng, which now comes equipped with a keylogger feature. According to Kaspersky Lab, the latest update allows cybercriminals to steal entered text by exploiting a device’s accessibility services. Designed for users with disabilities or those temporarily unable to interact fully with […]… Read More

The post Svpeng Mobile Banking Trojan Now Equipped with Keylogger Capabilities appeared first on The State of Security.

from Svpeng Mobile Banking Trojan Now Equipped with Keylogger Capabilities

Trickbot Trojan Found Targeting US Financial Institutions

Security researchers have observed a new, Necurs-powered Trickbot spam campaign targeting international and US-based financial institutions. The notorious banking Trojan has been responsible for man-in-the-browser (MitB) attacks since 2016. Until now, however, the malware’s webinject configuration had only targeted organizations outside of the US. Researchers at Flashpoint discovered the new Trickbot spam campaign earlier this […]… Read More

The post Trickbot Trojan Found Targeting US Financial Institutions appeared first on The State of Security.

from Trickbot Trojan Found Targeting US Financial Institutions

Hard Rock Hotels & Casinos Warns of Seven-Month Payment Card Breach

Hard Rock Hotels & Casinos is, once again, warning customers of a data breach that may have compromised their payment card information. In a press release last week, the popular hotel, resort and casino franchise announced it was recently alerted of a security incident through its third-party hotel reservation system – Sabre Hospitality Solutions SynXis. […]… Read More

The post Hard Rock Hotels & Casinos Warns of Seven-Month Payment Card Breach appeared first on The State of Security.

from Hard Rock Hotels & Casinos Warns of Seven-Month Payment Card Breach

Anthem to Pay $115 Million to Settle Class-Action Lawsuit Over 2015 Data Breach

Anthem has agreed to pay $115 million to settle a class-action lawsuit over the 2015 data breach that compromised the personal information of nearly 80 million customers. If approved, the proposed settlement – which will be heard in a federal court next month – would be the largest ever in regards to data theft. The […]… Read More

The post Anthem to Pay $115 Million to Settle Class-Action Lawsuit Over 2015 Data Breach appeared first on The State of Security.

from Anthem to Pay $115 Million to Settle Class-Action Lawsuit Over 2015 Data Breach

Over Half of ICS Companies Experienced Security Incidents Last Year

Over half of companies operating industrial control systems (ICS) worldwide suffered between one and five IT security incidents in the last year. The findings come from Kaspersky Lab’s 2017 The State of Industrial Cybersecurity report, which polled more than 350 industrial cybersecurity practitioners. At the same time, the survey found that 83 percent of respondents […]… Read More

The post Over Half of ICS Companies Experienced Security Incidents Last Year appeared first on The State of Security.

from Over Half of ICS Companies Experienced Security Incidents Last Year

14-Year-Old Japanese Teen Arrested for Allegedly Creating Ransomware

Japanese authorities arrested a 14-year-old teen on Monday for allegedly creating and spreading ransomware. According to reports, the third-year junior high school student is suspected of combining free encryption programs to create the malicious software. The teenager admitted to creating the malware on Jan. 6 and uploading it to a foreign website, where it was downloaded […]… Read More

The post 14-Year-Old Japanese Teen Arrested for Allegedly Creating Ransomware appeared first on The State of Security.

from 14-Year-Old Japanese Teen Arrested for Allegedly Creating Ransomware

Survey: Over Half of Medical Device Makers Expect an Attack on Their Devices In the Next Year

A new survey found that 67 percent of medical device manufacturers and 56 percent of healthcare delivery organizations (HDOs) believe an attack on their devices is likely to happen within the next 12 months. Despite the risks, however, a mere 17 percent of device makers and only 15 percent of HDOs say they are taking significant […]… Read More

The post Survey: Over Half of Medical Device Makers Expect an Attack on Their Devices In the Next Year appeared first on The State of Security.

from Survey: Over Half of Medical Device Makers Expect an Attack on Their Devices In the Next Year

Target Agrees to $18.5 Million Settlement with States

Target Corp. has reached an agreement with 47 states and the District of Columbia, resolving investigations on the infamous 2013 breach that exposed 41 million customer payment card accounts. According to an announcement by the Attorney General Eric T. Schneiderman’s office on Tuesday, the agreement is the largest multi-state data breach settlement to date. Target […]… Read More

The post Target Agrees to $18.5 Million Settlement with States appeared first on The State of Security.

from Target Agrees to $18.5 Million Settlement with States

Nearly 10% of PCs Running Unpatched Windows Operating Systems, Finds Survey

According to a recent survey, about 1 in 10 PC users (9.8 percent) in the US ran unpatched Windows operating systems in the first quarter of 2017 – up from 6.8 percent the previous year. The findings come from Flexera Software’s latest Personal Software Inspector Country Report, which aims to highlight the state of security among PC […]… Read More

The post Nearly 10% of PCs Running Unpatched Windows Operating Systems, Finds Survey appeared first on The State of Security.

from Nearly 10% of PCs Running Unpatched Windows Operating Systems, Finds Survey