Industry News: ESG5

2019-03-27

New York Times:  Microsoft took control of 99 websites that it said Iranian hackers had used to try to steal sensitive information from targets in the United States, according to court documents unsealed Wednesday. By taking over the sites, Microsoft can stop future cyberattacks and monitor how previously infected computers were compromised, the company said...

2019-03-29

ZD Net:  Japanese car maker Toyota announced its second data breach today, making it the second cyber-security incident the company acknowledged in the past five weeks. While the first incident took place at its Australian subsidiary, today's breach was announced by the company's main offices in Japan...

2019-04-03

Reuters:  U.S.-Israeli cybersecurity firm Aqua Security said on Wednesday it raised $62 million in a funding round led by Insight Partners, bringing the company’s total venture funding to more than $100 million. Aqua’s existing investors - Lightspeed Venture Partners, Microsoft’s venture fund M12, TLV Partners and Israeli billionaire Shlomo Kramer - also participated in the round...

2019-04-03

Silicon:  The risk of data security incidents is increasing as pension funds insufficiently factor cybersecurity into their risk assessments, Dutch pensions supervisor De Nederlandsche Bank (DNB) has warned. In its annual security monitor, the regulator said that financial institutions, including pension funds, insufficiently evaluated their risk management in this area, or failed to anticipate developments in data security...

2019-04-01

IPE:  The risk of data security incidents is increasing as pension funds insufficiently factor cybersecurity into their risk assessments, Dutch pensions supervisor De Nederlandsche Bank (DNB) has warned. In its annual security monitor, the regulator said that financial institutions, including pension funds, insufficiently evaluated their risk management in this area, or failed to anticipate developments in data security...

Read more...

2019-04-01

CSO: Carbon Black, a leader in cloud-delivered, next generation endpoint security, today released the results of its first Australian Threat Report. According to the survey research, attacks are increasing in volume and sophistication, causing regular security breaches affecting 89% of organisations surveyed. The report analyses survey results from different industries, organisation sizes and IT team sizes to build a picture of the modern attack and cyber defence landscape in Australia...

Read more...

The target: Verification.io, who offer ‘e-mail validation’ services to advertisers.

The take: Over two billion records were exposed, consisting of e-mail addresses, often with associated names, social media accounts, phone numbers, dates of birth, ZIP codes – as well as credit score information, mortgage amounts, interest rates, and other data. Also exposed were names, revenues, and other business-specific data for a number of companies.

The attack vector: A database server was discovered by security researchers to be exposed to the public web, completely unencrypted and without any form of password protection or access control in place.

Read more...

2019-03-25

Reuters: Hackers were able to deliver malware to the more one million-plus Asus computer owners last year by hijacking the company’s software update system, security researchers said on Monday. Moscow-based cyber security provider Kaspersky Lab said the attack took place between June and November last year and was used to deliver a software update with a “backdoor” that would give hackers access to infected machines...

Read more...

2019-03-22

StraitsTimes: E-mail log-in information of employees in several government agencies and educational institutions, as well as details of over 19,000 compromised payment cards from banks here, has been put up for sale online by hackers. Russian cyber-security company Group-IB revealed on Tuesday that it discovered the user log-ins and passwords from several government organisations on the Dark Web over the past two years. The compromised payment card information, which it said was valued at more than US$640,000 (S$863,000), was found last year...

Read more...

2019-03-27

BBC: A cyber-attack on a Norwegian aluminium company has cost it at least 300 million Norwegian kroner (£25.6m). Hydro, which employs 35,000 people in 40 countries, was hit by malware last week. The company said it was slowly bringing affected systems back online but the "preliminary" cost of the incident had been about 300-350 million kroner. Most of those losses had been in its Extruded Solutions division, which makes aluminium facades, Hydro said...

Read more...