CyberSec News

ꕤ CyberSec SOURCE as indicated #cybersecurity malware, named XcodeGhost secretly collects info on devices / uploads data to servers WeChat instant messaging app exposed 600 million users to malware downloading the program from #Apple Inc XcodeGhost malware only affected WeChat version 6.2.5 for iOS {new versions of 6.2.6 or later not affected} http://www.bloomberg.com/news/articles/2015-09-21/tencent-fixes-flaw-exposing-wechat-app-users-to-malicious-code How malware is building hacking corporations / underground market teams /  marketed kits http://www.cbronline.com/news/cybersecurity/how-malware-is-building-hacking-corporations-4673904 #cybersecurity DDoS extortion attacks -  new threat / mitigation =  on-premises & cloud-based anti-DDoS tech http://www.scmagazineuk.com/ddos-extortion-attacks--a-new-threat-to-look-out-for/article/439394/ China = one of Boeing's best customers = 25 percent of the Boeing's commercial aircraft http://steelerslounge.com/2015/09/china-wants-us-tech-companies-to-play-by-its-rules/11923/ #cybersecurity (June 2015) expect insurance lobby to seek changes New Zealand Privacy Act  1993 / no mandatory notification / no notification to data breach customers required, either http://www.cio.co.nz/article/577982/cyber-risk-put-it-agenda-before-it-becomes-agenda/ Israel #cybersecurity co:   enSilo /  data exfiltration prevention model shift from inbound / deals w. attackers on inside enSilo tech =  blocking malicious outbound comm. =  employees can continue working even if devices infected http://jewishbusinessnews.com/2015/09/20/ensilo-blocks-the-exit-door-for-data-thieves/ #cybersecurity #cloud 28% #SaudiArabia co's planning to use hybrid cloud services / mobility users & mobility of resources http://ameinfo.com/technology/it/software/saudi-companies-eye-hybrid-cloud ---------------------- ꕤ ---------------------- COMMENT Various that caught my attention. Boeing makes a lot of money out of China.  A quarter of their business is in China.  That's a huge reliance on one country. New Zealand doesn't require notification of data breaches to customers or reporting of breaches to authorities.   Judging by the input from the insurance guy in the New Zealand article (June article), if there's any lobbying for changes to the New Zealand Privacy Act  1993, it will most likely come from the insurance industry and business lobbies, I'm guessing. Israeli cybersec company has a different approach:  stopping data going out while hackers are in. Nothing super exciting here. ---------------------- ꕤ ---------------------- Boeing | here William Edward Boeing  |  here ꕤ