Security Blog

  Favourite Security Reads of the Week (23 Dec 2016) .   "Favourite Security Reads of the Week". Each week we share five news or articles that we like. We hope you will love this column and we welcome your comment via email to [email protected].   Below is the Favourite Security Reads of this Week.   木馬程式變種 誘自拍盜資料 (Written by HKCERT on Hong Kong Economic Times, 2016-12-16, Chinese) 核實優惠信息 防墮釣魚陷阱 (Written by HKCERT on Hong Kong...

On December 14, Yahoo confirmed a data breach happened in August 2013, one billion user accounts were affected. The stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in...

  Favourite Security Reads of the Week (16 Dec 2016) .   "Favourite Security Reads of the Week". Each week we share five news or articles that we like. We hope you will love this column and we welcome your comment via email to [email protected].   Below is the Favourite Security Reads of this Week.   More Warnings on Security in Implantable Medical Devices (The Security Ledger, 2016-12-15) Three Misconceptions about Business Email Compromise (BEC) Attacks, Debunked (ProofPoint, 2016-12-02) Oldest Internet Scam — How to Avoid It (WhoIsHostingThis.com, 2016-12-05) Adobe Flash Player flaws remain the most used by Exploit Kits (Security Affairs, 2016-12-06) 認識殭屍網絡　避免成為犯罪工具之一 (Lapcom, 2016-12-06, Chinese)

  Favourite Security Reads of the Week (9 Dec 2016) .   "Favourite Security Reads of the Week". Each week we share five news or articles that we like. We hope you will love this column and we welcome your comment via email to [email protected].   Below is the Favourite Security Reads of this Week.   唱K神器App存保安風險 (Written by HKCERT on Hong Kong Economic Times, 2016-12-02, Chinese) Sony kills off secret backdoor in 80 internet-connected CCTV models (The Register, 2016-12-06...

 HKCERT is aware that a security vendor disclosed a malware campaign called Gooligan, which is a variant of “Ghost Push” mobile malware discovered in 2015. Cybercriminals made use of Ghost Push to download other mobile apps in the infected device for monetization. This Gooligan...

  Favourite Security Reads of the Week (2 Dec 2016) .   "Favourite Security Reads of the Week". Each week we share five news or articles that we like. We hope you will love this column and we welcome your comment via email to [email protected].   Below is the Favourite Security Reads of this Week.   木馬程式活躍 電腦病毒傳播力強 (Written by HKCERT on Hong Kong Economic Times, 2016-11-25, Chinese) Internet outage in Germany blamed on failed botnet attack (CNET, 2016-11-29...

  Source: Europol   A joint operation to take down the “Avalanche” cybercrime hosting platform was led by Europol, and conducted with law enforcement, judiciaries, and security researchers from more than 30 countries. In this operation, 5 individuals were arrested, and...

  Cover Story SME Free Web Security Health Check Pilot Scheme (2016) Final Report 3 billion phone numbers with identities exposed by "Caller Blocking" apps Hot Topic Hong Kong Google Play Store's Apps Security Risk Report (November 2016)   ...

HKCERT launched "SME Free Web Security Health Check Pilot Scheme" in Jan 2016. 35 companies joined the scheme, and 30 of them had gone through the scanning. We have also conducted a survey on the profile of the participants of the scheme.   Here is...

  Favourite Security Reads of the Week (25 Nov 2016) .   "Favourite Security Reads of the Week". Each week we share five news or articles that we like. We hope you will love this column and we welcome your comment via email to [email protected].   Below is the Favourite Security Reads of this Week.   更新Android裝置 堵塞保安漏洞 (Written by HKCERT on Hong Kong Economic Times, 2016-11-18, Chinese) Strategic Principles for Securing the IoT (US-CERT, 2016-11-15) How to Secure...