fbpx

Latest Security News


Researchers say “totally secure” Internet within reach after quantum breakthrough

The world is one step closer to having a totally secure internet and an answer to the growing threat of cyber-attacks, according to scientists.

A prototype, designed by a team at the University of Bristol, could transform the security of online communication for millions of people across the globe.


New cryptojacking worm propagating through AWS at speed

Researchers have identified a new worm spreading through Amazon’s cloud that is stealing user credentials and deploying cryptojacking malware to mine Monero cryptocurrency.

According to researchers at Cado Security, the hacking group known as TeamTNT is responsible for the worm.

TeamTNT has a history of attacking Docker and Kubernetes systems and the group’s latest worm also uses infiltrated instances to scan the internet for misconfigured Docker systems for later attacks.


Huawei-built Papua New Guinea data centre riddled with security flaws

A data centre built by beleaguered Chinese tech giant Huawei for Papua New Guinea (PNG) in 2018 is plagued with cybersecurity issues, exposing PNG Government data to hackers.

A report commissioned by the Australia-funded PNG National Cyber Security Centre and authored by a security expert hired by the Australian Government claimed old encryption software employed by Huawei exposed data to threat actors.


New report claims 93% of cloud storage services misconfigured

Cloud-native misconfigurations are rampant and rising bad practices risk exposing cloud resources even further, California-based security vendor Accurics has claimed.

According to the company’s latest cloud security report, Summer 2020: State of DevSecOps, unless emerging cloud-native security challenges are not plugged, breaches will “increase in velocity in scale”.

“While the adoption of cloud-native infrastructure such as containers, serverless, and servicemesh is fueling innovation, misconfigurations are becoming commonplace and creating serious risk exposure for organizations,” said Accurics Co-founder & CTO, Om Moolchandani.


Lindy Cameron to replace Ciaran Martin as NCSC CEO in October

The National Cyber Security Centre (NCSC) has announced that Lindy Cameron is to become its new chief executive from October.

She will succeed Ciaran Martin, who led the setting-up of the NCSC in 2016, and joins from her role as director-general of the Northern Ireland Office.

The NCSC, which is part of GCHQ, is the UK’s lead authority on cyber security, overseeing the response to cyber attacks and improving the cyber resilience of the UK’s national infrastructure.


BT CTO warns against fast-tracked removal of Huawei 5G infrastructure

Telecoms firms have warned that bringing forward the date by which they must remove Huawei equipment from 5G networks risks significant service blackouts.

The warning came in response to questioning by Conservative MP Mark Francois during an evidence session for the Defence Sub-Committee with executives from BT and Vodafone.


Garmin confirms Ransomware attack behind ongoing service outage

Smartwatch manufacturer Garmin has confirmed that it fell victim to a serious cyber attack which knocked many of its services offline for five days.

The firm said some of its systems were encrypted by the incident, interrupting its website and call centres, including its ability to receive calls, emails and online chats.

Garmin Connect, the app that users of the company’s wearable devices rely on to sync and monitor their fitness activities, has been significantly hit since problems emerged on Thursday morning.


UK expands Police-backed Cyber Resilience Centres to help vulnerable SMEs counter threats

Police-backed Cyber Resilience Centres are set to expand across the country amid growing threats to vulnerable businesses.

The risk to smaller firms is even greater during the coronavirus outbreak, as bad actors turn their attention to lucrative multibillion-pound online crime.

Cyber Resilience Centres, which first started in Scotland, are regional hubs supported by police forces, working with the private sector and university students.

By the end of the year a number of hubs are expected to be open across the UK, including Greater Manchester, East Midlands, West Midlands, South East, South West and the East, as well as Wales


Google Cloud launches Confidential VMs to woo regulated industries to the cloud

Google Cloud is launching a new suite of security-focused products to persuade cloud-shy organisations to migrate sensitive data to the cloud.

Heavily regulated industries such as financial, insurance, or pharmaceutical firms have been reluctant to go all-in on cloud due to strict security and compliance requirements about how sensitive data is stored.


Huawei infrastructure to be removed from UK 5G network by 2027

Chinese tech giant Huawei’s equipment will be stripped from the UK’s 5G network by 2027, adding millions to the cost and delaying the delivery of the high-speed mobile network.

The National Security Council took the decision – which will increase tensions with Beijing – after the impact of US sanctions raised concerns about Huawei’s continued involvement in the UK’s 5G infrastructure.


UK and Australian data regulators to probe Clearview AI

Data regulators in the UK and Australia have announced a joint investigation into practices of facial recognition app Clearview AI.

The UK Information Commissioner’s Office (ICO) and the Office of the Australian Information Commissioner (OAIC) said they are looking into the firm’s use of data “scraped” from the internet.


How researchers used AI to expose Zoom’s privacy holes

New research has revealed how AI can easily extract the personal information of video conference participants using screenshots uploaded to social media.

Researchers from Ben-Gurion University in Israel used image processing, text recognition tools and social network analysis to process a scraped image dataset of video meetings, which included 15,700 college images and over 140,000 face images of meeting participants.