News

Hackers and cybercrime prevention

June 15, 2021 15 Jun'21
Ransomware most insidious cyber threat facing UK

NCSC CEO urges organisations to do more to prepare for ransomware attacks
June 15, 2021 15 Jun'21
The Security Interviews: How to build a government model to ‘hack for good’

Kyle Hanslovan started Huntress to give back after a career in the intelligence sector. After US authorities took action to help people hit by the Microsoft Exchange attacks, we discussed how governments can ‘hack for good’
June 14, 2021 14 Jun'21
G7 commits to action on ransomware, digital privacy

The G7 urges Russia to do more to hold criminal ransomware gangs operating from within its borders to account as it commits to more action on the issue
June 11, 2021 11 Jun'21
UK promises tougher line on cyber crime

Speaking ahead of the G7 Summit, foreign secretary Dominic Raab says the UK is ready to take on cyber criminals and other malicious actors wherever they may be

June 10, 2021 10 Jun'21
Risk data shows UK energy sector most vulnerable to cyber attack

New report compiled by insurance firm Hiscox reveals the state of cyber preparedness in the UK and beyond
June 10, 2021 10 Jun'21
Australian organisations face heightened cyber attacks

Nearly three in four Australian organisations experienced cyber attacks that largely resulted from a growing remote workforce in 2020
June 09, 2021 09 Jun'21
Unit 42 warns of emergent Prometheus ransomware

Palo Alto’s Unit 42 shares intel on the emergent Prometheus ransomware gang, with apparent links to the Thanos crew
June 09, 2021 09 Jun'21
RSA spins out fraud and risk unit as Outseer

RSA Security is transitioning its fraud and risk intelligence work into a new business to be called Outseer
June 09, 2021 09 Jun'21
Colonial Pipeline ransom seizure is a win, but don’t relax yet

The security community is enthusiastic about the US authorities’ recovery of a significant part of the Colonial Pipeline ransomware payment, but this positivity should perhaps be somewhat tempered
June 08, 2021 08 Jun'21
We Open Tech community supports non-binary and trans security pros

New tech community established to advocate for the interests of non-binary people, trans and cis women, trans men, and other marginalised genders in security

June 07, 2021 07 Jun'21
Police raids around world after investigators crack An0m cryptophone app in major hacking operation

Police in 16 countries carried out raids on after Australian Police and the FBI cracked an encrypted An0M communications network used by crime groups
June 07, 2021 07 Jun'21
Siloscape malware a risk to Windows containers, Kubernetes

Palo Alto’s Unit 42 reports on what appears to be the first-recorded malware targeting Kubernetes clusters through Windows containers
June 07, 2021 07 Jun'21
NCSC updates schools ransomware guidance amid surge

The National Cyber Security Centre says it is dealing with a renewed surge of ransomware attacks targeting schools, colleges and universities
June 07, 2021 07 Jun'21
DNS attacks on the rise in APAC

Attacks on the domain name system in Asia-Pacific grew by 15% last year, with Malaysian organisations seeing the sharpest rise in damages among countries in the region
June 04, 2021 04 Jun'21
HSBC offers all businesses scam awareness app

HSBC is sharing information on the latest scams and how to defend against them thorough its latest app, available to all businesses
June 04, 2021 04 Jun'21
Government action on ransomware epidemic gathers pace

The US government steps up action against ransomware operators, while the UK’s NCSC publishes guidance on preparing to deal with a ransomware attack
June 03, 2021 03 Jun'21
Reports raise alarm over Huawei access to Dutch networks

Espionage accusations raise security questions for Netherlands organisations using Chinese supplier’s equipment and services
June 03, 2021 03 Jun'21
Norway’s auditor general lifts lid on energy industry’s cyber security risks

Auditor General’s Office questions the security posture of Norway’s energy industry
June 03, 2021 03 Jun'21
FireEye sold to private equity, Mandiant regains independence

FireEye has agreed to sell its products business and name to a private equity consortium, while Mandiant will spin out as an independent threat intel business
June 02, 2021 02 Jun'21
Scottish businesses missing out on Cyber Essentials benefits

More than a third of Scottish businesses do not believe they are adequately prepared to deal with a cyber security incident
June 01, 2021 01 Jun'21
European-led consortium investigates quantum cryptography

The arms race to a quantum internet is under way – the European Commission is looking at secure critical national infrastructure and member state comms
June 01, 2021 01 Jun'21
Exagrid pays $2.6m to Conti ransomware attackers

Backup appliance specialist hit by Conti ransomware in May with cyber criminals downloading employee and customer data, confidential contracts and source code
June 01, 2021 01 Jun'21
Ex-IT manager stole over £800,000 from NHS trust

A former senior IT manager at an Essex NHS trust has pleaded guilty to defrauding his employer out of more than £800,000
May 31, 2021 31 May'21
Microsoft brings APAC policymakers together in security council

Microsoft’s APAC public sector security council will meet once a quarter to share threat intelligence and best practices for combating cyber threats
May 26, 2021 26 May'21
Millions of pounds lost to crypto fraud on social media

More than £63m has been lost nationally by victims of investment fraud via a social media platform, says Action Fraud
May 25, 2021 25 May'21
Legacy vulnerabilities may be biggest enterprise cyber risk

While high-profile cyber attacks and zero-days grab headlines, statistics gathered by network security specialists Cato suggest CISOs should be addressing legacy threats
May 24, 2021 24 May'21
Air India is latest victim of Sita hack

Data on millions of people who flew with Air India between 2011 and 2021 appears to have been compromised in the recent Sita supply chain attack
May 24, 2021 24 May'21
Dutch researchers build security software to mimic human immune system

Software could help IT systems develop immunity to some cyber attacks in a similar way to how the body fights infection
May 24, 2021 24 May'21
Why the security stack needs to move to the edge

Akamai’s chief technology officer Robert Blumofe makes the case for a decentralised security model to address cyber threats that are emanating from the network edge
May 20, 2021 20 May'21
Malicious scans for at-risk systems start minutes after disclosure

Statistics collated by Palo Alto Networks reveal malicious actors begin scanning the internet for systems at risk of new CVEs within minutes
May 19, 2021 19 May'21
Reports of stolen Irish health service data being leaked online

Leaking of deeply confidential and personal information on patient healthcare marks a new low for the criminal Conti gang
May 19, 2021 19 May'21
Barclays first bank to publish online scam refund details

All banks must be transparent about the proportion of victims of authorised push payment fraud they refund, says consumer rights organisation Which?
May 19, 2021 19 May'21
Flexxon bakes AI into SSDs to fight unknown threats

Singapore-based Flexxon has developed a solid-state drive that uses artificial intelligence to fend off malware and other unknown threats
May 18, 2021 18 May'21
Australian budget lends support to digital economy

Australia’s A$1.2bn Digital Economy Strategy ticks most of the right boxes, but some industry experts say areas such as broadband infrastructure and artificial intelligence are still underfunded
May 17, 2021 17 May'21
Conti ransomware syndicate behind attack on Irish health service

More details continue to emerge of the significant ransomware attack on Ireland’s HSE
May 17, 2021 17 May'21
NCSC study to probe disability and neurodiversity in cyber

National Cyber Security Centre and KPMG have launched a new diversity study aiming to capture benchmarks on disability and neurodiversity in cyber
May 17, 2021 17 May'21
Government seeks input on supply chain security

Amid concerns that too few companies are addressing vulnerabilities in their supply chain, DCMS is opening a consultation on new measures to enhance security
May 14, 2021 14 May'21
Colonial Pipeline paid $5m ransom, reports say

Colonial Pipeline may have paid a significant ransom within hours of being attacked, it has emerged, but it’s unlikely the story ends here
May 14, 2021 14 May'21
Irish health service hit by major ransomware attack

IT systems in hospitals across Ireland have been switched off following a significant ransomware attack
May 14, 2021 14 May'21
Dutch police used deep learning model to predict threats to life

Dutch police developed a deep learning model in their EncroChat investigation to predict which messages contain serious threats to life
May 13, 2021 13 May'21
Publishing exploit code does more harm than good, says report

Disclosing exploit code before patches are available gives malicious actors a ‘massive’ head-start, says Kenna Security
May 13, 2021 13 May'21
Biden beefs up public-private security cooperation

Joe Biden has signed a new Executive Order to harden US cyber security and government networks, with an emphasis on information sharing
May 13, 2021 13 May'21
Refuge launches tech safety site for domestic abuse victims

Created with the help of survivors, Refuge’s resource site offers guidance on protecting yourself from tech-enabled domestic abuse
May 13, 2021 13 May'21
Verizon DBIR underscores year of unprecedented cyber challenge

Verizon 2021 Data Breach Investigations Report draws predictable conclusions as the impact of the Covid-19 pandemic continues to be felt
May 12, 2021 12 May'21
Inside DarkSide: Researchers share intel on break-out cyber gang

Security researchers swap information on the newly famous DarkSide ransomware gang, the group that doesn’t appear to understand what ‘being a criminal’ actually means
May 12, 2021 12 May'21
CyberUK 2021: NCSC encourages startups to invest in cyber

National Cyber Security Centre is launching bespoke cyber security guidance aimed at the UK’s valuable startup community
May 12, 2021 12 May'21
UK to fund national cyber teams in Global South

Government will commit millions of pounds to supporting vulnerable countries in establishing cyber capacity
May 12, 2021 12 May'21
Microsoft fixes four critical bugs on lighter Patch Tuesday

Four critical RCE vulnerabilities put users of various Microsoft products at risk, and should be patched right away
May 12, 2021 12 May'21
The Security Interviews: Why helpful bots could hurt vaccine roll-outs

Earlier this year, spikes in traffic to websites containing information about Covid-19 vaccines were attributed by Imperva to automated bots scraping data. Why is that a problem?
May 11, 2021 11 May'21
UK Plc invited to sign up for Early Warning of cyber incidents

The launch of the Early Warning incident notification service is among the enhancements being made by the NCSC to its service packages