Abandoning a domain name can come back to bite you, research shows

A domain name once left behind can catch up with you – by giving fraudsters access to a treasure trove of sensitive information. Cybercriminals can use an abandoned domain name to obtain all manner of private information belonging to the company that formerly owned the domain, as well as to its clients and employees, a researcher … More Abandoning a domain name can come back to bite you, research shows

100 days of GDPR

What impact has the new data protection directive had on businesses so far? This past weekend marks 100 days since General Data Protection Regulation (GDPR) went into effect, affecting businesses globally. Everyone who expected immediate headline-grabbing penalties must be disappointed. Although the EU Commision received complaints on companies such as Facebook, Google, Instagram and WhatsApp within  hours of … More 100 days of GDPR

Superdrug targeted by miscreants who claim to have stolen customer data

The retailer says that whatever data the crooks have obtained, they weren’t stolen through a breach of its systems. Superdrug is urging its online customers to change their passwords after being contacted by cybercriminals who claim to have secured a range of personal details belonging to 20,000 customers of this British health and beauty retailer, Huffington … More Superdrug targeted by miscreants who claim to have stolen customer data

Some 2.6 billion data records exposed in first half of 2018

The newly-released report provides an overview of the data breach landscape in the first half of this year. The first half of 2018 saw 2,308 publicly disclosed data breaches that resulted in the exposure of approximately 2.6 billion user records, a report from cyberthreat intelligence company Risk Based Security has shown. This represents a drop from … More Some 2.6 billion data records exposed in first half of 2018

Software bugs put nearly 100 million health records at risk of exposure

The slew of vulnerabilities – since patched – were found without the use of automated testing tools. A team of seven researchers has discovered more than 20 security vulnerabilities in OpenEMR, an open-sourceapplication used worldwide for the electronic management of the medical records of almost 100 million people. In keeping with the principles of responsible disclosure, … More Software bugs put nearly 100 million health records at risk of exposure

Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign

D-Link and Changing Information Technologies code-signing certificates stolen and abused by highly skilled cyberespionage group focused on East Asia, particularly Taiwan. ESET researchers have discovered a new malware campaign misusing stolen digital certificates. We spotted this malware campaign when our systems marked several files as suspicious. Interestingly, the flagged files were digitally signed using a valid … More Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign

Two Canadian banks warn attackers may have stolen customer data

Simplii Financial and Bank of Montreal are believed to have suffered a twin attack that was soon followed by blackmail threats. Two Canadian banks have announced that cybercriminals may have made off with the data of up to 90,000 of the banks’ customers in apparent security breaches, according to a CBC.ca report. Online bank Simplii Financial … More Two Canadian banks warn attackers may have stolen customer data