Heimdal Security - Must-read cyber security news

By Heimdal Security | The most important cyber security news of the week, hand-picked and summed up so you can stay on top of things at all times.

CIA's Windows XP to Windows 10 malware: WikiLeaks reveals Athena

WikiLeaks says the CIA's Athena malware can be used to spy on Windows XP through to Windows 10 computers.<p>The latest file revealed in WikiLeaks' Vault …

Microsoft

SSD Drives Vulnerable to Attacks That Corrupt User Data

NAND flash memory chips, the building blocks of solid-state drives (SSDs), feature what could be called "programming vulnerabilities" that can be …

Questions Raised After Reporter Fools Bank Biometrics

Security experts have warned about the limitations of biometric authentication systems after a BBC reporter’s twin brother was able to access his …

Privacy warning: Netgear routers copy Windows 10 and start 'collecting analytics data'

A firmware update to the Netgear R7000 router adds a new feature that will concern privacy advocates. The update allows Netgear to start "collecting …

Wi-Fi

BT Branded Email Scam Aims To Exploit WannaCry Ransomware Fears

The phishing scam is piggy-backing onto WannaCry warnings<p>The UK’s national fraud and cyber crime reporting centre, Action Fraud has issued a warning …

Identity Theft

Windows 7 Most Hit by WannaCry Ransomware

<b>Most of the computers affected by the WannaCry ransomware outbreak were running Windows 7, security researchers have revealed.</b><p>Initially, the malware …

North Korea denies link to WannaCry ransomware attack

It’s understandable that people should look for someone to blame after a malware outbreak as significant as WannaCry.<p>Is it the fault for the NSA for …

North Korea

Your Password is Already In the Wild, You Did not Know? - /dev/random

There was a lot of buzz about the leak of two huge databases of passwords a few days ago. This has been reported by Try Hunt on his blog. The two …

Security

More than 600K User Accounts Exposed in DaFont Database Theft

A hacker compromised more than 600,000 users’ accounts when they stole a database operated by the font sharing site DaFont.<p>In early May 2017, the …

Security

Twitter abandons 'Do Not Track' privacy protection

Is this the end for 'Do Not Track', the web-tracking privacy service?<p><i>The most shocking internet privacy laws.</i><p>Twitter was one of the first companies …

Privacy

WannaCry Ransomware Decryption Tool Released to Unlock Files Without Paying Ransom

If your PC has been infected by WannaCry – the ransomware that wreaked havoc across the world last Friday – you might be lucky to get your locked …

FCC votes to overturn net neutrality rules

<b>The US Federal Communications Commission has voted to overturn rules that force ISPs to treat all data traffic as equal.</b><p>Commissioners at the agency voted two-to-one to end a "net neutrality" order enacted in 2015.<p>Ajit Pai, head of the FCC, said the rules demanding an open internet harmed jobs and …

Your PC might be being hijacked to make someone rich

A new form of malware is targeting innocent victims in order to mine cryptocurrency for its creators.<p>Adylkuzz, which targets the Monero …

Security

Facebook is losing the fight against the spread of fake news

Leaked photos showing how Obama practiced Islam in the White House! Trump’s legalization of bald-eagle hunting! … The president’s <i>cancellation of</i> …

Journalism

Zomato Hacked! Database of 17 Million Users Stolen

Although it’s good news to hear that no payment card information has been accessed by the hackers, a serious security breach has clearly …

Bloke charged under UK terror law for refusing to cough up passwords

British police have charged a man under antiterror laws after he refused to hand over his phone and laptop passwords.<p>Muhammad Rabbani, the …

Terrorism

WannaCry fallout -- the worst is yet to come, experts say

The massive scale of the recent WannaCry ransomware attack has exposed some significant weaknesses in global IT systems, and we're likely to see more …

Security

Who is listening? The problem of online microphones

Windows 10 credential theft: Google is working on fix for Chrome flaw

Google is addressing a problem that allows a crafty credential theft attack on Windows through Chrome's default behavior.<p>Attackers can use Google's …

Information Security

After WannaCry chaos, ShadowBrokers threaten 'Data Dump of the Month' service, including Windows 10 exploits

News over the past week has been dominated by the fallout from the WannaCry ransomware. Now the hacking group that released the NSA's hacking tool …

Security

Ransomware attack: How a nuisance became a global threat

Ransomware has evolved to take on bigger targets, and has become more dangerous along the way.<p>Ransomware was already becoming a higher priority …

Cybersecurity

DocuSign admits hackers accessed its customer email database, sent...

If you ever work on contracts with other companies there is a good chance you will have found yourself signing a document electronically, and if …

Security

North Korea Possibly Behind WannaCry Ransomware Attacks

<b>An earlier WannaCry ransomware sample shows code similarities with malware used by a North Korea-linked hacking group responsible for multiple</b> …

Bell Canada Hack Hits 1.9 Million Customers

MONTREAL — Bell Canada says an anonymous hacker has obtained some customers' names and telephone numbers as well as email addresses.<p>The …

Disney hack: Ransom demanded for stolen film

<b>Film studio Disney has said hackers have threatened to release one of the studio's forthcoming movies unless it pays a ransom.</b><p>Disney CEO Bob Iger told ABC employees about the demand at a town hall meeting on Monday, The Hollywood Reporter said.<p>He did not name the film, but Deadline reports that it …

Pirates of the Caribbean: Dead Men Tell No Tales

5 Emergency Mitigation Strategies Combat WannaCry Outbreak

sponsored by<p>Patch or Perish, and Don't Block Nonsense WannaCry Domain, Experts Warn Mathew J. Schwartz (euroinfosec) • May 14, 2017<p>Drop everything …

Information Security

Government claims NHS followed 'pretty good' procedure on cyber-attack

The UK government has defended the NHS's cyber-security procedures, days after a number of trusts were taken offline by the WannaCry …

Cybersecurity

Over 50 Google Play Apps Found Serving Adware, Warn Researchers

Information Security

All OnePlus Devices Vulnerable to Remote Attacks Due to 4 Unpatched Flaws

There is a really bad news for all OnePlus lovers.<p>A security researcher has discovered four vulnerabilities that affect all OnePlus handsets, …