Five critical security bulletins to address this month
Whalers Con Employee W-2s Out of Environmental Resource Management
Part of a rash of tax season phishing efforts, ERM is the latest to hand over everything needed for identity theft and tax return fraud.
Consumers Don’t Trust .ninja and Other Newfangled Domains
Over half of surfers (52%) express discomfort in visiting websites ending in new domains.
EFF Releases Millionth Free HTTPS Cert
‘Let’s Encrypt CA’ helps build a more secure and better encrypted internet.
NatWest Vows to Improve Security After SIM Swap Fiasco
Investigation shows how easy it is to drain bank accounts
Google Open Sources Framework to Improve Third Party Security
Vendor Security Assessment Questionnaire should help firms and their suppliers
High-Seas Pirates Turn to Cyber-Espionage
Uncommonly wired sea-pirates hacked bills of lading for future shipments and vessel routes to plot out their attacks ahead of time.
Fresh APT Found Targeting Indian Military, Diplomats
The multi-vector campaign drops a remote access trojan (RAT) with data exfiltration, screen capture and keylogging capabilities.
Cox Communications Investigates Data Breach Affecting 40K Employees
Names, email addresses, phone numbers and phishing-ready info on employees has turned up on a Dark Web marketplace.
‘KeRanger’ Ransomware Hits OS X
Palo Alto Networks has unearthed a new piece of ransomware that is specifically targeting the OS X platform.