Short clip: Securing data at E-Loan

Hacker gets a whopping 14 years in prison for running Scan4You service

Ruslan Bondars run a "VirusTotal-for-crooks" operation from 2009 to 2017.
Twitter notifies users about API bug that shared DMs with wrong devs

Twitter said the API bug was active between May 2017 and early September 2018, for nearly 16 months.
New Virobot ransomware will also log keystrokes, add PC to a spam botnet

Virobot will use locally installed Outlook instances to spam other users and spread a copy of itself.

Thousands of WordPress sites backdoored with malicious code

Malicious code redirects users to tech support scams, some of which use new "evil cursor" Chrome bug.
Google to lawmakers: Yep, Gmail data is still open to app developers

Google says third-party developers can access users' Gmail, but it manually vets them first and uses machine learning to monitor apps.
After riches and jail, Belarusian ex-hacker's life lesson? 'Don't steal from Americans. Ever'

ZDNet talks to a former infamous hacker whose "mostly true" book offers a glimpse into the minds of Eastern Europe's cybercriminals.

SingHealth data breach reveals several 'inadequate' security measures

Investigation into the July 2018 incident reveals tardiness in raising the alarm, use of weak administrative passwords, and an unpatched workstation that enabled hackers to breach ...
Cisco releases fixes for remote code execution flaws in Webex Network Recording Player

The bugs could be weaponized to hijack vulnerable software and cause untold damage to victim machines.
Trend Micro Zero Day team discloses unpatched Microsoft Jet RCE vulnerability

Updated: Exploit of the security flaw can lead to the remote execution of malicious code.

More from ZDNet Staff