(Flickr user Ben Nuttal) How GitHub untangled itself from the ‘Octopus’ malware that infected 26 software projects It's an example of the potentially insidious nature of open-source supply chain compromises. May 29, 2020 By Sean Lyngaas
(Getty Images) New York man nabbed for carrying computers with stolen credit card details through JFK, feds say The same man previously was arrested for drug possession and domestic violence, according to a complaint. May 29, 2020 By Jeff Stone
Japanese IT services firm reveals hack affecting up to 621 corporate customers Between cloud computing and other IT services, NTT Communications has a wealth of data for hackers to aim at. May 28, 2020 By Sean Lyngaas
It’s a significant ruling which effectively affords the attorneys suing Capital One with a breakdown of which bank behaviors were successful, and which failed. (Getty) Judge rules Capital One must hand over Mandiant’s forensic data breach report It's the kind of ruling that could give Fortune 500 firms pause. May 28, 2020 By Jeff Stone
(Getty) NSA calls out Russian military hackers targeting mail relay software The National Security Agency has issued a rare warning publicly attributing exploitation activity to Russian government hackers working for the GRU. May 28, 2020 By Shannon Vavra
Israeli cyber chief Yigal Unna (ICT). Israeli official confirms attempted cyberattack on water systems Was Israel behind a hack on an Iranian port? “Maybe and maybe not,” says Yigal Unna. May 28, 2020 By Sean Lyngaas
A screenshot of Roberto Escobar’s gold iPhone. Escobar is suing Apple for $2.6 billion. (Getty Images) Roberto Escobar, former Medellín Cartel accountant, sues Apple for $2.6 billion, report says The brother of the deceased drug lord also happens to be marketing his own phone product. May 28, 2020 By Jeff Stone
‘Valak’ gives crooks flexibility in multi-stage malware attacks More than just a “loader” that delivers malicious code, Valak can also be used to siphon off data from enterprise networks. May 28, 2020 By Sean Lyngaas
The World Health Organization headquarters in Geneva, Switzerland. Google has found hacker-for-hire groups impersonating the WHO in emails. (Getty Images) Google finds Indian hack-for-hire firms exploiting coronavirus fears via spearphishing schemes Indian hack-for-hire firms are impersonating the World Health Organization in spearphishing email campaigns, according to Google. May 27, 2020 By Shannon Vavra
(Getty Images) Sponsored Adjusting to the new security realities of a remote workforce McAfee’s chief technology officer shares strategies for more securely meeting the needs of employees working from home. May 27, 2020 By Steve Grobman