25 Nov 2019

Cybercriminals targeting e-commerce website vulnerabilities this holiday season

98% of Alexa 1000 websites have not adopted sufficient client-side cybersecurity measures to prevent threat actors from attacking the websites to carry out personal, financial and credential theft, a recent study by Tala Security found. This risk is elevated during the holiday season when ecommerce sales and cybercriminial activity related

Read More
25 Nov 2019

Developers worry about security, still half of teams lack an expert

A new survey by WhiteHat sheds light on the state of security in the context of software development. Three in four (75%) developers express concerns about application security and 85% say that security is of high importance in the  software development lifecycle (SDLC). However, close to half of software development

Read More
22 Nov 2019

Senators Demand Amazon Disclose Ring Privacy Policies

Amazon’s home surveillance and doorbell system Ring data collection policies are attracting attention, with US Senator demanding that Amazon disclose how it is securing footage. After several security vulnerabilities and privacy-related incidents, 5 Senotros wrote a list of demands in a letter to Amazon CEO Jeff Bezos. The Senators stated

Read More
22 Nov 2019

Allied Universal Breached by Maze Ransomware, Stolen Data Leaked

US security company Allied Universal was targeted by the group Maze Ransomware, encrypting their computers and obtaining access to sensitive files. After the deadline was missed for receiving the ransom payment requested, $2.3 million, Maze Ransomeware published 700 MB worth of stolen data. Maze Ransomware claimed it only released 10%

Read More
18 Nov 2019

US Govt Recommends Vendor System Configs To Block Malware Attacks

The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) reminded users last week to property configure systems to defend against malware. CISA published the document through the US National Cyber Awareness System, which is designed to keep users updated on current security threats. The agency recommended installing and

Read More
15 Nov 2019

New phishing email campaign impersonates US postal service to deliver malware

A report published on Thursday by Proofpoint states that a phishing campaign that has been targeting Europe has now been attacking the United States with the goal of spreading Trojan malware onto computers. The latest phishing attacks impersonate the US Postal Service and contain a Word document that, when opened,

Read More
14 Nov 2019

Secret Iranian Network Behind ‘Aggressive’ U.S. Cyberattacks Exposed In New Report

Iranian hacking group APT33, well known for the Shamoon attack on Saudi Aramco, has made headlines again for aggressive attacks on civilians and critical infrastructure. Trend Micro recently reported that APT33 has developed its methods to attack the oil and gas industry, creating more a higher risk to companies in

Read More
13 Nov 2019

Counterterrorism expert: Small healthcare companies are the new ransomware targets

MonsterCloud CEO Zohar Pinhasi states that his firm has seen a 500% increase in calls from healthcare companies over the past several months. Pinhasi claims that ransomware attackers have shifted from attacking high-profile targets to small and medium-sized businesses with smaller ransoms. This can be fatal for smaller companies that

Read More
12 Nov 2019

Large-scale cyberattack hits Labour Party systems

A month out from UK’s General Election, the Labour Party reported they had been hit with a cyberattack. The Labour Party stated that the attack was sophisticated and affected the party website, which was down yesterday while security experts worked on responding to the attack. The Labour Party stated that

Read More
08 Nov 2019

New Study: Hospital Breaches Could Be Killing Patients

Research by Vanderbilt University and the University of Central Florida implies that data breaches affecting hospitals could have deadly consequences, as mortality rates at hospitals that suffered a breach significantly increased in the three years following a breach. Among the most dangerous observed effects of data breaches was an increase

Read More