Patch Tuesday, November 2019 Edition

Microsoft today released updates to plug security holes in its software, including patches to fix at least 74 weaknesses in various flavors of Windows and programs that run on top of it. The November updates include patches for a zero-day flaw in Internet Explorer that is currently being exploited i...

Continue reading

Retailer Orvis.com Leaked Hundreds of Internal Passwords on Pastebin

Orvis, a Vermont-based retailer that specializes in high-end fly fishing equipment and other sporting goods, leaked hundreds of internal passwords on Pastebin.com for several weeks last month, exposing credentials the company used to manage everything from firewalls and routers to administrator acco...

Continue reading

Study: Ransomware, Data Breaches at Hospitals tied to Uptick in Fatal Heart Attacks

Hospitals that have been hit by a data breach or ransomware attack can expect to see an increase in the death rate among heart patients in the following months or years because of cybersecurity remediation efforts, a new study posits. Health industry experts say the findings should prompt a larger r...

Continue reading

NCR Barred Mint, QuickBooks from Banking Platform During Account Takeover Storm

Banking industry giant NCR Corp. [NYSE: NCR] late last month took the unusual step of temporarily blocking third-party financial data aggregators Mint and QuicBooks Online from accessing Digital Insight, an online banking platform used by hundreds of financial institutions. That ban, which came...

Continue reading

Breaches at NetworkSolutions, Register.com, and Web.com

Top domain name registrars NetworkSolutions.com, Register.com and Web.com are asking customers to reset their passwords after discovering an intrusion in August 2019 in which customer account information was accessed. A notice to customers at notice.web.com. “On October 16, 2019, Web.com deter...

Continue reading

Takeaways from the $566M BriansClub Breach

Reporting on the exposure of some 26 million stolen credit cards leaked from a top underground cybercrime store highlighted some persistent and hard truths. Most notably, that the world’s largest financial institutions tend to have a much better idea of which merchants and bank cards have been...

Continue reading

Cachet Financial Reeling from MyPayrollHR Fraud

When New York-based cloud payroll provider MyPayrollHR unexpectedly shuttered its doors last month and disappeared with $26 million worth of customer payroll deposits, its payment processor Cachet Financial Services ended up funding the bank accounts of MyPayrollHR client company employees anyway, g...

Continue reading

Ransomware Hits B2B Payments Firm Billtrust

Business-to-business payments provider Billtrust is still recovering from a ransomware attack that began last week.  The company said it is in the final stages of bringing all of its systems back online from backups. With more than 550 employees, Lawrence Township, N.J.-based Billtrust is a clo...

Continue reading

Avast, NordVPN Breaches Tied to Phantom User Accounts

Antivirus and security giant Avast and virtual private networking (VPN) software provider NordVPN each today disclosed months-long network intrusions that — while otherwise unrelated — shared a common cause: Forgotten or unknown user accounts that granted remote access to internal system...

Continue reading

EU data watchdog raises concerns over Microsoft contracts

Microsoft's contracts with European Union institutions do not fully protect data in line with EU law, the European Data Protection Supervisor (EDPS) said in initial findings published on Monday.

Wirecard hires KPMG for independent audit after FT allegations

German payments company Wirecard has hired KPMG to conduct an independent audit to address allegations by the Financial Times that its finance team had sought to inflate reported sales and profits, it said on Monday.

Israel's Upstream wins funding to expand in automotive cybersecurity

Israel's Upstream Security has secured $30 million funding from a wide range of global automakers and venture capital firms as it looks to tap into the increasingly competitive market for software to protect vehicles from hackers.

EU data watchdog raises concerns over Microsoft contracts with EU institutions

The European Data Protection Supervisor said on Monday that preliminary results of its investigation into Microsoft contracts with EU institutions show serious issues over compliance with data protection rules.

Wirecard hires KPMG for independent audit after Financial Times allegations

German payments company Wirecard has hired KPMG to conduct an independent audit to address allegations by the Financial Times that its finance team had sought to inflate reported sales and profits, it said on Monday.

Gojek CEO quits to join Indonesian cabinet, replacements named

Gojek CEO and co-founder Nadiem Makarim said on Monday he had resigned to join Indonesia's cabinet, and the ride-hailing and payments company said two senior officials would jointly take over running operations of the $10 billion firm.

SAP in three-year cloud partnership with Microsoft

Business software group SAP said on Monday it had reached a three-year deal with Microsoft to help its large enterprise customers move their business processes into the cloud.

Hacking the hackers: Russian group hijacked Iranian spying operation, officials say

Russian hackers piggy-backed on an Iranian cyber-espionage operation to attack government and industry organizations in dozens of countries while masquerading as attackers from the Islamic Republic, British and U.S. officials said on Monday.

Facebook open to currency-pegged stablecoins for Libra project

Facebook Inc , facing growing skepticism about its digital currency project Libra, on Sunday said the initiative could use cryptocurrencies based on national currencies such as the dollar, instead of the synthetic one it initially proposed.

China's Xiaomi says plans to launch more than 10 5G phones next year

Chinese smartphone maker Xiaomi Corp plans to launch more than 10 5G phones in 2020, CEO Lei Jun said on Sunday, speaking at the World Internet conference in the eastern Chinese town of Wuzhen.

China's propaganda chief says Cold War mentality hindering mutual trust in cyberspace

A "Cold War mentality" and "bully behavior" are hindering mutual trust in cyberspace, China's propaganda chief said on Sunday at the start of the World Internet Conference in the eastern Chinese town of Wuzhen.

China's next commercial rockets to make test flights in 2020, 2021: Xinhua

China will launch test flights for the next two space rockets in its Smart Dragon series meant for commercial use in 2020 and 2021, the official Xinhua news agency reported on Sunday, as an expected boom in satellite deployment gathers pace.

SoftBank seeks to avoid WeWork's liabilities with new investment: sources

SoftBank Group Corp is attempting to become the majority owner of WeWork without assuming the onerous lease obligations of the U.S. office-space sharing firm, according to people familiar with the matter.

Exclusive: Huawei in early talks with U.S. firms to license 5G platform - Huawei executive

Blacklisted Chinese telecoms equipment giant Huawei is in early-stage talks with some U.S. telecoms companies about licensing its 5G network technology to them, a Huawei executive told Reuters on Friday.

News Corp to supply headlines for Facebook's upcoming news tab

Facebook Inc's upcoming news tab will feature headlines from the Wall Street Journal and some other News Corp media properties when it launches in fall of 2019, the social network said on Friday.

G20 kicks off debate to regulate 'stablecoins' in hit to Facebook's Libra

Group of 20 finance leaders on Friday agreed to set strict regulations on cryptocurrencies such as Facebook's Libra, warning that issuance of such "stablecoins" should not be allowed until various global risks they pose are addressed.

House antitrust probe report likely by 'first part' of 2020

The House of Representatives Judiciary Committee expects to have a final report on its probe of big technology companies and their potential breaches of antitrust law, by the "first part" of next year, the chair of its antitrust panel said on Friday.

Apple's star-studded 'The Morning Show' joins #MeToo conversation

Apple Inc is jumping into the streaming video wars with a series that explores accusations of sexual misconduct at a fictional morning television news show, a story that tackles issues brought to life over the past two years of the #MeToo movement.

G20 agrees stablecoins give rise to 'serious' risks: press release

Group of 20 finance leaders agreed that global stablecoins give rise to a set of "serious" public policy and regulatory risks, a press release from Japan, the group's chair, showed on Friday.

Facebook's Libra cryptocurrency should be prevented: German finance minister

German Finance Minister Olaf Scholz on Friday redoubled his criticism of Facebook's plans to launch its Libra cryptocurrency, and said creation of a new world currency should be prevented.

FTC official says data collection allows Big Tech to hurt competition

Vast troves of consumer data collected by big technology companies allow them to gain a competitive edge and pose a threat to competition, Federal Trade Commission's Rohit Chopra said on Friday.