CDSA News Headlines
Check Your Spotify Account: Users Report Unusual Activity After Credentials Posted Online (Financial Post)
If you use the popular music streaming service Spotify, there is a chance you may be vulnerable after a report has surfaced that the emails, usernames, passwords and other details ... More
Firefox: Mozilla Patches Critical Flaws that let Attackers Execute Malicious Code (ZD Net)
Mozilla has released Firefox 46 and patched several memory bugs that could let an attacker take control of a system. The new version of Firefox includes fixes for 10 security is... More
Hackers Steal Millions of Minecraft Passwords (BBC)
Hackers have stolen login data for more than seven million members of the Minecraft site Lifeboat. Lifeboat lets members run servers for customised, multiplayer maps for the smart... More
How to Stay Secure at the Hotel on a Business Trip (Dark Reading)
In 2014, cybercriminals in the DarkHotel campaign targeted business executives staying at hotels in Asia. The attackers used spearphishing as well as kernel-mode keystroke logger a... More
Office 365 Vulnerability Exposed any Federated Account (ThreatPost)
A severe vulnerability in the way Microsoft Office 365 handles federated identities via SAML put an attacker in position to have access to any account and data, including email mes... More
Privacy Activists Cheer Passage of Email Privacy Act, Brace for Senate Battle (ThreatPost)
In a vote of 419-0 on Wednesday, the U.S. House of Representatives passed the Email Privacy Act that would require the government to obtain a warrant in order to access digital com... More
Weekend Vulnerability and Patch Report, May 1, 2016 (Citadel Information Group)
Important Security Updates Apple QuickTime for Window: On April 14, US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Appl... More
Cloud Keynote: Sony Exec Recommends Learning from Piracy (ETC Centric)
Sony DADC NMS (New Media Services) CTO and head of strategy Andy Shenkler keynoted ETC’s Cloud Innovation Conference at NAB 2016 in Las Vegas. Rather than talk pure technology ab... More
PlayStation Network to Get Two-Factor Authentication (PC Mag)
Sony plans to add two-factor authentication to its PlayStation Network. Following Tuesday's PlayStation 3 firmware update (version 4.80), some eagle-eyed users spotted a mention... More
Information Security Culture: It’s Time to Upgrade to 2.0 (Info Security)
Information security requires an approach that involves people, process and technology. But, while we have made great strides in technological advancements in information security,... More
Law Enforcement, Government Agencies See Phishing as Main Cyber Risk (Softpedia)
The Global Cyber Alliance (GCA) was founded at the start of January this year, and on March 19 held its first Strategic Advisory Committee (SAC) meeting. Here, founding members ... More
Malware Attacks More Frequent, Harder To Fight (Information Week)
The frequency and severity of malware attacks has increased "dramatically" since 2011, according to an April 19 State of the Endpoint Report from the Ponemon Institute, sponsored b... More
The Problem With Patching: 7 Top Complaints (Dark Reading)
A term that’s cropped up recently among IT managers is “patching fatigue,” referring to the overwhelming number of patches organizations need to keep their IT environment up-... More
DDoS Attacks: Know Your Enemy (Information Security)
Distributed-denial-of-service (DDoS) attacks are more frequent today than they’ve ever been, according to the latest report by Verisign. In the final quarter of 2015, DDoS attack... More
FBI Paid at Least $1.3M for Zero-Day to get into San Bernardino iPhone (ARS Technica)
FBI Director James Comey suggested to a conference in London that his agency paid more than $1.3 million to gray-hat hackers who were able to unlock the iPhone 5C that was used by ... More
Criminals in the Cloud: How Malware-as-a-Service is Becoming Tool of Choice for Crooks (ZD Net)
Everyone is working to a cloud business model now -- even virus writers. Rather than turning a profit just once by selling a security exploit as a one-off, authors of malicious sof... More
Weekend Vulnerability and Patch Report, April 24, 2016 (Citadel Information Group)
Important Security Updates Apple QuickTime for Window: On April 14, US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Appl... More
Fortium’s MediaSeal File Security Integrated into FileCatalyst Accelerated File Transfer (CDSA)
Unlimi-Tech Software Inc., an Emmy® award winning pioneer in managed file transfers and Fortium, a leading provider of film and entertainment content security solutions, are pleas... More
Zero-Day Exploits More Than Double as Attackers Prevail in Security Arms Race (ARS Technica)
The number of attacks that exploited previously unknown software vulnerabilities more than doubled in 2015 as hackers raced against security defenders to find effective ways to inf... More
Ransomware Alert: Prevent and Mitigate Ransomware Attacks (U.S.-CERT)
In early 2016, destructive ransomware variants such as Locky and Samas were observed infecting computers belonging to individuals and businesses, which included healthcare faciliti... More
