Google pulls 85 adware apps downloaded nine million times from Google Play
Millions of Google Play users exposed to adware hiding in game, TV and remote control simulator apps.
Wireless / Mobile Security — News
iOS jailbreaks now worth $2m as WhatsApp and iMessage exploits hit $1m
Zeriodum now offers 10 times Apple's top payout in its iOS bug bounty.
The holidays in security: Breaches drive governments to bug bounties
Australia may have taken it easy for the holiday season, but hackers weren’t easing off during the festivities.
David Braue | 08 Jan | Read more
EU to launch bug bounties for 14 open source projects
Europe stumps up cash for bug bounties to secure over a dozen popular open source projects.
US charges two Chinese nationals for massive data thefts from NASA and others
US lays charges against employees of Chinese private firm accused of working for the Chinese government.
Nation-state attackers fingered for exploiting bug in Twitter's anti-troll tools
Nation-state hackers could be undermining Twitter's efforts to clamp down on state-backed trolls.
Signal: we can't comply with Aussie encryption law even if we wanted to
But the Australian government could follow Brazil's lead by blocking WhatsApp, which uses Signal's encryption protocol.
VPNFilter hit many more routers and could infect devices behind routers
VPNFilter was even more complex than previously known, according to Cisco's Talos researchers.
As banking Trojans outpace ransomware, financial-services attacks regain their currency
Banking Trojans were a more common email payload in the first quarter of this year than ransomware, according to new figures that reflect a tactical shift that has security experts warning of a resurgence of financial cybercrime.
David Braue | 04 Jun | Read more
GDPR is here, but few Australian staff know what to do about it
Eurovision may have accepted Australia as one of its own, but Australian businesses may be hoping European Union authorities forget about them for a while as survey after survey suggests that they have missed today’s deadline for compliance with the EU’s general data protection regulation (GDPR) by a country mile.
David Braue | 25 May | Read more
Adobe: attackers can hack Windows 7 with this critical Acrobat PDF flaw
If you use Windows 7 and Adobe Acrobat Reader you need patch now.
When it comes to password hygiene, Australians are almost the least awful of a bad bunch
Australians are more fastidious than those in other countries about separating work and personal passwords – and more careful than many in protecting sensitive data like healthcare accounts – but use of secure passwords remains uncommon, according to new figures, and high rates of password reuse suggest that we still aren’t learning to protect sensitive information right.
David Braue | 04 May | Read more
As automated scan unearths pen-testing gold, careless businesses must polish their DevSecOps
Concerns over the security of companies’ development cultures were validated for an Australian cybersecurity specialist after a recent global scan of GitHub projects identified more than 200,000 servers where developers had left hardcoded passwords and other sensitive information in publicly available source code.
David Braue | 27 Apr | Read more
New app alerts you when strangers open your unattended Mac
Former NSA hacker invents tool to thwart ‘evil maid’ attacks.
Lack of security skills has become a drag on Australia’s digital transformation
A lack of cybersecurity skills has forced more than half of Australian IT decision-makers to slow down their cloud rollouts, according to new research that has redoubled the urgency of strategies for building and deploying Australia’s cybersecurity capabilities.
David Braue | 18 Apr | Read more
Record-setting Australian DDoS attack is a reminder to get your IoT security in order
Internet of things (IoT) security will become a key corporate compliance issue as growing adoption opens up new avenues for cybersecurity compromise, experts have warned as analysis of traffic analysis confirmed that the Memcached attack delivered Australia’s largest-ever distributed denial of service (DDoS) attack in February.
David Braue | 09 Apr | Read more
Relatively benign, cryptomining is displacing ransomware – but that’s not necessarily a good thing
Cybercriminals’ surging interest in cryptocurrency miners has seen the quickly-evolving technique apparently displacing ransomware, a new analysis has found, as instigators work to keep ahead of enterprises’ slowly-maturing information defences.
David Braue | 28 Mar | Read more
Google boosts Gmail anti-phishing defenses to tackle BEC fraud
Google's new G-Suite updates aim to shut out sophisticated CEO impersonation phishing attacks.
Surge in cryptocurrency-mining malware heralds bigger problems for CSOs
As surging investment drives interest in cryptocurrency, cryptomining malware has emerged from nowhere to become one of the biggest threats facing enterprise security managers.
David Braue | 16 Mar | Read more
“Truly frightening” IoT security should motivate CSOs to reconsider their endpoint strategies
More than a few Israeli security researchers are reconsidering their personal purchase of home security cameras, baby monitors, doorbells and thermostats after a hackathon revealed “truly frightening” security vulnerabilities that highlight the true extent of the Internet of Things (IoT) security threat to individuals and enterprises.
David Braue | 15 Mar | Read more