Another audit from the NYS Comptroller is worthy of note here. This one audited the Holland Patent Central School District for access to their student information system (SIS). The District operates four schools with approximately 1,500 students and 300 employees. This audit covered the period of July 1, 2015 – July 31, 2016. According to the state, the…
Expert Hacks Internal DoD Network via Army Website
Eduard Kovacs reports: A security researcher who took part in the Hack the Army bug bounty program managed to gain access to an internal Department of Defense (DoD) network from a public-facing Army recruitment website. [….] Roughly 118 of the reports have been classified as unique and actionable, and participants have been awarded a total…
SEC probing Yahoo over previously disclosed cyber breach: filing
Suzanne Barlyn reports: The U.S. Securities and Exchange Commission is investigating a previously disclosed data breach at Yahoo Inc, the company said in a filing. Yahoo said in a November 2016 quarterly filing that it was “cooperating with federal, state and foreign” agencies, including the SEC, that were seeking information and documents about a “security…
Russian programmer suspected of creating “Banking Trojan”
RAPSI News reports: MOSCOW, January 20 (RAPSI) – Russian programmer Stanislav Lisov arrested in Spain is suspected of developing NeverQuest malware, the so-called “Banking Trojan” which steals bank account logins and gives attackers access to accounts through computers of victims, the Spanish Civil Guard announced on its website on Friday. Damage allegedly caused by Lisov’s actions…
MN: District 833, police investigate after student accesses private employee data
Scott Wente reports: South Washington County Schools is investigating after a student gained access to electronic personnel data. The district notified all of its roughly 3,250 employees last week that it discovered the data breach and was investigating with the help of law enforcement and a computer forensic firm. While it does not appear files…
NYPD tech worker accused of selling officers’ personal info
Sarah Trefethen reports: An IT worker with access to NYPD personnel files released sensitive information of thousands of officers and tried to cash in on his position by selling data on individual members of the Finest, according to prosecutors. Idahosa Ighodaro, 37, an information technology administrator employed by the NYPD, was hit with charges of…