This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days.

Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back each Friday for highlights of the goings-on each week!

 

The General Data Protection Regulation (GDPR) Is Coming

Based on the incidents we saw in 2016, it is recommended that organizations enter 2017 with caution. From the growth of Business Email Compromise (BEC) attacks to cybercriminals using more effective ways to exploit Internet of Things (IoT) devices, these security issues should serve as a reminder.

Be Sure Your Organization Is Prepared When Extortionists Come Calling

Trend Micro partnered with ISMG to conduct a survey of financial, healthcare, and government organizations to better understand the challenges they are facing with ransomware. Some of the results surprised us while others were somewhat expected based on what we’ve seen throughout 2016. 

How Cyber Propaganda Influenced Politics in 2016

 In recent years the popularity of the Internet gave these threat actors new tools. Not only do they make use of social media to spin the news, spread rumors and fake news, but they also actively hack into political organizations.

The January 2017 Security Update Review Is Here

Stick to your New Year’s resolution of understanding all there is about security patches and join us in taking a look at the security updates released by Adobe and Microsoft for the month of January 2017. After a record setting 2016, the folks in Redmond start 2017 off by releasing only four bulletins. 

New Malware EyePyramid Supposedly Used in High-Profile Hacks in Italy

Private and public Italian citizens, including those holding key positions in the state, were the subject of a spear-phishing campaign that reportedly served a malware, codenamed EyePyramid, as a malicious attachment.  

Spora Is a New and Highly-Sophisticated Strain of Ransomware

Security researchers have spotted the next evolution of ransomware. It’s called Spora, and it’s been designed to be as easy-to-use as the online stores you frequent. Maybe even easier. At its core, Spora is no different than the other strains of ransomware, but there are several things that set it apart. 

Christmas Themed Ransomware Steals User Data with Files

Unsuspecting internet users could find themselves on the receiving end of an unwanted belated Christmas present, malware that doesn’t only encrypt their Windows PC and hold it to ransom, but also steals personal data and login credentials.

Cyber Crime Group Steals $5 Million Per Day via Bot

A cyber criminal group has been stealing up to $5 million per day from US-based companies, since the past few months. The hack is being carried out with a botnet, which siphons off advertisement earnings by posing as a fake publishing company. 

FDA, DHS Find Cybersecurity Vulnerabilities in St. Jude Heart Devices

The US Food and Drug Administration (FDA) and the Department of Homeland Security (DHS) Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) issued an advisory on Monday warning of cybersecurity vulnerabilities found in St. Jude Medical’s Merlin@home wireless transmitter. 

LA College Pays $28,000 Ransomware Demand

A school in Los Angeles has made the decision to hand over $28,000 to cyberattackers to regain access to locked computer systems infected with ransomware. The Los Angeles Valley College (LAVC), was targeted by a strain of ransomware which quickly spread across the school’s servers on New Years’ Eve. 

Please add your thoughts in the comments below or follow me on Twitter; @JonLClay.

http://feeds.trendmicro.com/TrendMicroSimplySecurity