News

Hackers and cybercrime prevention

• August 02, 2018 02 Aug'18

  Reddit breach exposes 2FA flaws

  Reddit has reported a password breach despite using 2FA, exposing the weaknesses of two-factor authentication based on mobile text messages

• August 02, 2018 02 Aug'18

  GDPR harmonised with local laws in Nordic EU states

  Sweden provides an interesting challenge for the European Union’s data protection regulation due to its laws around freedom of press and free speech

• August 02, 2018 02 Aug'18

  Three Carbanak cyber heist gang members arrested

  Three alleged members of the Carbanak gang believed to be responsible for more than 100 cyber heists worldwide have been arrested, US authorities have announced

• August 01, 2018 01 Aug'18

  Bromium evolves virtualisation-based security

  Virtualisation-based security firm Bromium has evolved its technology to offer bidirectional protection for applications and underlying operating systems

• August 01, 2018 01 Aug'18

  Top dark web indicators of compromise

  There are 10 common activities on the dark web that indicate a data breach or some other security compromise has taken place, according to a specialist monitoring firm

• July 31, 2018 31 Jul'18

  SamSam ransomware reaps $5.9m and counting

  In just two and a half years, SamSam campaigns are believed to have netted nearly $6m for cyber criminals, an analysis of this adaptive and evasive strain of active ransomware reveals

• July 31, 2018 31 Jul'18

  Australia’s health sector reports most data breaches again

  In the first full quarter since Australia’s mandatory breach disclosure scheme came into effect, healthcare providers reported the most data breaches amid controversy over the national health record system

• July 30, 2018 30 Jul'18

  Pentagon flags risky software suppliers

  The Pentagon has drawn up a list of software suppliers that it wants the US military and defence contractors to avoid due to fears of risks to national security

• July 30, 2018 30 Jul'18

  Search begins for UK’s cyber security Unsung Heroes

  The Security Serious cyber awareness campaign has opened nominations for the third annual cyber security Unsung Heroes awards

• July 29, 2018 29 Jul'18

  Burden of data protection rests on firms and governments

  A senior executive at Singapore’s Cyber Security Agency stressed the role of corporate data governance and government regulations in raising the bar on cyber security

• July 27, 2018 27 Jul'18

  Post-quantum security on Airbus’s radar

  With quantum computing on the horizon, multinational aerospace and defence firm Airbus is among those organisations that are looking at evolving their cryptography capabilities to stay ahead of technology

• July 27, 2018 27 Jul'18

  Fileless malware a growing trend, warns McAfee

  Cyber attackers are increasingly moving away from traditional malware to using trusted Windows executables to invade systems and breach corporate networks, say security researchers

• July 27, 2018 27 Jul'18

  Hackers targeting software supply chains, US report warns

  A US government report on cyber espionage by China, Russia and Iran says software supply chains are increasingly under attack

• July 26, 2018 26 Jul'18

  Brace for PowerGhost cryptominer, warns Kaspersky Lab

  Corporate networks are the target of a new illicit cryptocurrency mining malware that is difficult to detect and eradicate, security researchers warn

• July 26, 2018 26 Jul'18

  Crest report highlights need for bug bounty best practice

  A lack of best practice guidelines for bug bounties is leaving researchers, organisations and bounty platforms confused and at risk, a report reveals

• July 26, 2018 26 Jul'18

  Software development remains insecure

  The prevalence of common and well-known web-based vulnerabilities underlines the need for better education around secure software development

• July 26, 2018 26 Jul'18

  Cyber security vulnerability concerns skyrocket

  Security professionals are more worried about data breaches and cyber attacks than they were a year ago, with most fearing that Meltdown-Spectre attacks are becoming the norm

• July 25, 2018 25 Jul'18

  Dark web cyber crime markets thriving

  The market for cyber criminals’ services is thriving on the dark web, research reveals

• July 25, 2018 25 Jul'18

  ERP applications are under cyber attack, research confirms

  ERP applications are increasingly being targeted by cyber criminals, hacktivists and nation-state actors, a report reveals

• July 25, 2018 25 Jul'18

  Apache OpenWhisk users urged to patch

  IBM has patched vulnerabilities in its Cloud Functions service that is based on Apache OpenWhisk in response to vulnerability disclosures, and all other users are urged to do the same

• July 25, 2018 25 Jul'18

  Application attacks demand new security approach

  Applying security software updates is an ineffective way to deal with application layer cyber attacks and businesses should change their approach, security experts advise

• July 25, 2018 25 Jul'18

  Ransomware concern drops despite being top cost

  Fewer organisations are worried about ransomware even though it remains one of the most costly cyber attacks

• July 25, 2018 25 Jul'18

  Australian energy sector caught in security catch-22

  With regulators unwilling to accept security investments that would lead to higher tariffs, there is a chance that Australia’s National Energy Market could face increased cyber risks

• July 24, 2018 24 Jul'18

  Top execs cyber security hypocrites, report shows

  There is a critical disconnect between the cyber security behaviour that top executives recommend and the way they behave themselves, while many firms do not know where their data lives and moves, a report reveals

• July 24, 2018 24 Jul'18

  Most firms have software security vulnerability

  Most firms have a software vulnerability that can be exploited by cyber attackers, a study has revealed

• July 24, 2018 24 Jul'18

  Singapore public healthcare sector limits internet use

  Healthcare workers who require internet access will have to use separate internet workstations following an unprecedented attack on Singapore’s public healthcare system

• July 23, 2018 23 Jul'18

  Zero trust security model boosts business confidence

  Organisations that combine the zero trust security model with next-gen access are more confident about meeting access control challenges, a study shows

• July 20, 2018 20 Jul'18

  Huge Singapore data breach shows need for new approach

  A major data breach in Singapore underlines the need for a new approach to protecting critical data and applications, say security experts

• July 20, 2018 20 Jul'18

  GDPR drives down UK insider threat

  The insider threat in European countries is falling post-General Data Protection Regulation, but continues to rise in the US, a study has revealed

• July 20, 2018 20 Jul'18

  NCSC report underlines cyber threat for legal firms

  Legal firms are a top target for cyber attackers, the latest report from the National Cyber Security Centre shows, emphasising the need for comprehensive cyber defence capabilities

• July 20, 2018 20 Jul'18

  UK alerted to potential cyber risks of Huawei equipment

  A report has raised concerns about the shortcomings of Huawei engineering processes, which it says could put UK telecommunications networks at risk

• July 19, 2018 19 Jul'18

  Cyber criminals use fake domains to scam businesses

  UK police are warning businesses that cyber criminals are using fake domains to scam businesses out of hundreds of thousands of pounds

• July 19, 2018 19 Jul'18

  CNI sector lacks cyber security skills, government warned

  The UK’s critical national infrastructure sector is being negatively impacted by the lack of cyber security skills, a report warns

• July 19, 2018 19 Jul'18

  Collaborative alliance to advance UK’s cyber security profession

  Leading UK organisations in cyber security have united to develop a national professional body in the field

• July 18, 2018 18 Jul'18

  Retail cyber security spending ineffective as breaches rise

  Cyber attacks on the retail sector are increasing, and although most retailers plan to increase cyber security spending, planned investments are unlikely to be effective, a report reveals

• July 18, 2018 18 Jul'18

  Deloitte launches EMEA-wide initiative to close cyber security gender gap

  Professional services organisation Deloitte expands its UK efforts to encourage more women into cyber security to cover the EMEA area

• July 18, 2018 18 Jul'18

  Cyber security top priority for aircraft makers, says Airbus

  There is a high level of collaboration in the aircraft industry on cyber security, but not all other industries are at the same level, according to an industry veteran at multinational aerospace and defence firm Airbus

• July 18, 2018 18 Jul'18

  Singapore to bolster threat intelligence sharing in financial sector

  Singapore’s Cyber Security Agency has partnered the Financial Services Information Sharing and Analysis Centre to glean cyber threat intelligence for the country’s financial industry

• July 18, 2018 18 Jul'18

  Spectre variant gives buffer overflow a new twist

  New variants of the Spectre microprocessor bugs use buffer overflow-style attacks to run malicious code

• July 17, 2018 17 Jul'18

  Cryptominers plateau while backdoors shoot up

  Illicit cryptocurrency mining appears to be slowing down, but backdoors increased rapidly in the second quarter of the year, a report warns

• July 17, 2018 17 Jul'18

  A third of organisations do not have a security expert, survey shows

  Around a third of organisations are vulnerable to cyber attacks due to a lack of dedicated in-house cyber security experts, finds Gartner survey

• July 16, 2018 16 Jul'18

  Mobile devices lost in London underline security risk

  The security risk of lost mobile devices is underlined by the fact that almost 26,000 mobile phones and computing devices were lost in London in the past year alone

• July 16, 2018 16 Jul'18

  Russian cyber attacks show need for international rules

  Russian cyber attacks aimed at influencing foreign elections highlight the need for the international community to agree on rules of conduct and punitive consequences

• July 13, 2018 13 Jul'18

  Hackers increasingly targeting cloud infrastructure

  Cloud infrastructure is a growing target for cyber attackers because of available computing resources, as well as the repositories of valuable data, a report reveals

• July 12, 2018 12 Jul'18

  Cyber attackers cashing in on ‘hidden’ attack surface

  Cyber attackers are cashing in on organisations’ lack of visibility into all online interactions that can involve multiple third parties, a report reveals

• July 11, 2018 11 Jul'18

  White-hat hackers find record number of vulnerabilities

  White-hat hackers are finding more vulnerabilities than ever before, with crowdsourced security testing continuing to gain popularity, a report reveals

• July 11, 2018 11 Jul'18

  UK firms too confident about cyber security

  Three-quarters of UK companies say their cyber protection is above average, and nearly half think they are a “top performer” despite the growth in data breaches

• July 10, 2018 10 Jul'18

  Hidden costs of data breaches difficult to manage, study finds

  The full cost of “mega breaches” can be up to £264m, with the average UK data breach costing £2.69m, a study has revealed

• July 10, 2018 10 Jul'18

  Corporate networks vulnerable to insider attacks, report finds

  Researchers found that 100% of corporate networks tested in 2017 were vulnerable to insider attacks, with Wi-Fi networks and employees among the top areas of weakness

• July 09, 2018 09 Jul'18

  Collaborative taskforce launches security intelligence network

  BAE Systems, Vodafone, cyber security incubator CyLon and other partners have joined forces in unveiling a manifesto for safeguarding society in the digital age