News

IT risk management

• February 15, 2022 15 Feb'22

  TA2451 targets aviation and transport sector with tailored lures

  Newly designated cyber criminal group favours highly specific lures and a tried-and-tested modus operandi to compromise targets in the aviation, aerospace and transport sectors

• February 15, 2022 15 Feb'22

  China emerges as leader in vulnerability exploitation

  Threat actors linked to China are emerging as a significant force in the weaponisation of newly discovered CVEs

• February 11, 2022 11 Feb'22

  Lack of knowledge disastrous for effective security strategy within Dutch companies

  Most Dutch companies still haven’t realised that security is an integral part of their IT and company strategy

• February 11, 2022 11 Feb'22

  Why security professionals should pay attention to what Russia is doing

  Even though the average organisation is an unlikely target for a Russian state cyber attack, here's why security teams still need to watch what Russian threat groups are up to

• February 11, 2022 11 Feb'22

  Hackney Council could be forced to answer questions about IT security training after Psya ransomware

  Council is negotiating with the information commissioner after refusing to reply to questions under the Freedom of Information Act about staff IT and security training during the pandemic

• February 10, 2022 10 Feb'22

  How diplomatic immunity silenced the prosecutor who coordinated Sweden’s EncroChat probe

  Defence lawyers claim Swedish court decision not to hear evidence from a Swedish prosecutor leaves important legal questions unanswered over international police operation to hack EncroChat cryptophone network

• February 09, 2022 09 Feb'22

  Linux-based clouds an open door for attackers, says VMware

  Its prevalence as a cloud operating system means Linux is becoming a meal ticket for malicious actors, but the security industry does not seem to have cottoned on to this yet, says VMware

• February 09, 2022 09 Feb'22

  Ransomware ever more sophisticated and impactful, warns NCSC

  UK’s National Cyber Security Centre teams up with US and Australian partners in a joint advisory warning organisations of the increasing sophistication exhibited by criminal ransomware gangs

• February 09, 2022 09 Feb'22

  Microsoft stomps on 48 bugs in February Patch Tuesday update

  It’s a light Patch Tuesday for February 2022, as Microsoft issues fixes for just 48 CVEs, including a solitary zero-day

• February 09, 2022 09 Feb'22

  Tech companies risk being compelled by law to protect children, says online safety expert

  John Carr, a child safety campaigner backing a government-funded campaign on the dangers of end-to-end encryption to children, says tech companies have no choice but to act

• February 08, 2022 08 Feb'22

  The Security Interviews: Building the UK’s future cyber ecosystem

  As the government lays out the next iteration of its Cyber Security Strategy, we speak to Plexal and Lorca’s Saj Huq about his work building a cyber ecosystem to support the UK’s future ambitions

• February 04, 2022 04 Feb'22

  Check Point looks to plug ASEAN’s cyber security gap

  Check Point is shoring up its sales force and partner ecosystem to address the cyber security needs of small and mid-sized businesses in a region that is highly targeted by threat actors

• February 03, 2022 03 Feb'22

  BlackCat crew supposedly behind OilTanking ransomware heist

  Preliminary reports from Germany’s national cyber authority indicate the recent OilTanking ransomware attack may have been the work of the BlackCat group

• February 03, 2022 03 Feb'22

  Crisp supply shortage looms after KP Snacks hit by ransomware

  Supplies of Hula Hoops and many other snack brands are under threat after a ransomware attack on the systems of KP Snacks

• February 03, 2022 03 Feb'22

  French Supreme Court raises constitutional questions over EncroChat hacking secrecy

  Conseil Constitutionnel to decide whether ‘defence secrecy’ over state EncroChat cryptophone hacking breaches French constitution

• February 02, 2022 02 Feb'22

  Zero-trust to soar in 2022, but dogged by implementation challenges

  IT leaders are keen to invest in zero-trust, but face issues around a lack of expertise, and selling the concept into the C-suite

• February 02, 2022 02 Feb'22

  Reforms needed to tackle economic crime, says Treasury Committee

  The Treasury Committee is disappointed at progress towards tackling economic crime and fraud in both the online and offline worlds, and is calling for more action

• February 02, 2022 02 Feb'22

  British Council data exposed by third-party cyber failure

  The British Council entrusted confidential data on its students to a third-party and was let down

• February 01, 2022 01 Feb'22

  Over one-fifth of ransomware attacks target financial sector

  Newly published data reveals a significant uptick in cyber attacks against the financial services sector during the third quarter of 2021

• January 28, 2022 28 Jan'22

  Cyber skills gap affecting data privacy practice, finds ISACA

  Organisations are struggling to fill both legal and technical privacy roles, with potentially damaging consequences, according to a report

• January 28, 2022 28 Jan'22

  Korean researchers invent silk-based security device

  Experts from the Gwangju Institute of Science have built a digital security device based on natural silk fibres that they claim is practically unbreachable

• January 27, 2022 27 Jan'22

  CISOs must get out in front of Ukraine cyber crisis, says NCSC

  The National Cyber Security Centre is urging UK organisations to take steps to bolster their cyber security resilience in response to the ongoing Ukraine crisis

• January 26, 2022 26 Jan'22

  More intel emerges on WhisperGate malware that hit Ukraine

  Security experts have been poring over the WhisperGate malware with which alleged Russia-backed entities targeted Ukrainian government websites

• January 26, 2022 26 Jan'22

  MPs to debate landmark IoT security law

  Proposed bill mandates tighter protections for connected products, and adds new rules for broadband roll-out into the bargain

• January 25, 2022 25 Jan'22

  Prepare, but don’t panic, over supposed Russian cyber threat

  A fresh alert from the US Department of Homeland Security may have IT security teams jumpy over the possibility that their organisations could be targeted by Russian state actors

• January 25, 2022 25 Jan'22

  Cyber Essentials programme gets biggest update since launch

  NCSC implements a thorough revision of its Cyber Essentials scheme to reflect the changing security landscape

• January 25, 2022 25 Jan'22

  UK government launches internal cyber strategy

  Multi-pronged government security strategy is designed to protect both core systems and public services

• January 24, 2022 24 Jan'22

  India’s cyber security industry doubles in size amid pandemic

  Revenues from cyber security products and services reached $9.85bn in 2021 thanks to rapid digitalisation and regulatory attention on data and privacy

• January 21, 2022 21 Jan'22

  Mandiant analysts: Russia-backed APTs likely to ramp up attacks

  More cyber attacks like those perpetrated against targets in Ukraine are to be expected, and they may become more destructive

• January 21, 2022 21 Jan'22

  Cyber pros: Don’t revel in REvil’s downfall just yet

  The arrests of REvil’s alleged kingpins is a welcome step, but as with any disruption to cyber criminal activity, it is never wise to assume law enforcement action means the threat has passed entirely

• January 21, 2022 21 Jan'22

  Scam losses in Australia hit record high

  Australians lost a record A$323.7m to scams last year, with investment and romance scams accounting for the bulk of their losses

• January 20, 2022 20 Jan'22

  Updated cyber security regulations proposed for managed services sector

  The Network and Information Systems regulations are to be updated to include MSPs and outsourcers, following a spate of supply chain attacks

• January 20, 2022 20 Jan'22

  MoonBounce firmware bootkit shows advances in malicious implants

  MoonBounce firmware bootkit shows evident technical improvements over others, making it a more dangerous threat to organisations. It is being used by Chinese state-backed actors

• January 20, 2022 20 Jan'22

  Delayed pay: Umbrella company cyber attacks disrupt salary payments to thousands of contractors

  Thousands of contractors across the UK are anxiously waiting to see if their payroll cycles will be disrupted for a second week, after two of the umbrella industry's biggest players were targeted by cyber criminals

• January 20, 2022 20 Jan'22

  Singapore to tighten digital banking security

  Banks in Singapore will have to put in place more stringent measures to combat the rise in online phishing scams targeted at bank customers in the city-state

• January 19, 2022 19 Jan'22

  Investigators find Beijing 2022 app riddled with security flaws

  Security flaws in Olympic app may put personal health data at risk of compromise in a man-in-the-middle attack

• January 19, 2022 19 Jan'22

  Trellix looks to democratise access to XDR in APAC

  The company formed from the merger of FireEye Enterprise and McAfee will team up with managed service providers, among other efforts, to democratise access to extended detection and response capabilities in the region

• January 19, 2022 19 Jan'22

  Trellix XDR platform forged out of McAfee, FireEye union

  The private equity owners of McAfee Enterprise and FireEye are merging the companies into a new entity to ‘define the future’ of cyber security through XDR technology

• January 17, 2022 17 Jan'22

  ‘Russian-backed’ hackers defaced Ukrainian websites as cover for dangerous malware attack

  Kiev claims that a hacking group in Belarus – a close ally of Russia – was responsible for hacking Ukrainian government websites amid threats of military action

• January 17, 2022 17 Jan'22

  Top three questions about the Log4j vulnerability

  Singapore’s Ensign Infosecurity answers the top three questions about the impact of the Log4j vulnerability

• January 14, 2022 14 Jan'22

  Umbrella company Brookson self-refers to NCSC following cyber attack on its network

  Contractor payroll, accounting and compliance firm confirms its networks have been targeted by an ‘extremely aggressive’ cyber attack that has resulted in some of its systems being proactively taken offline

• January 13, 2022 13 Jan'22

  Nordic companies targeted in wave of cyber attacks

  After a slew of cyber attacks hit major companies in the Nordics at the end of last year, we look at how they were affected and how they have recovered

• January 13, 2022 13 Jan'22

  NCSC sounds alarm over Russia-backed hacks

  The UK’s National Cyber Security Centre joins US calls to be wary of Russian state interference in critical national infrastructure IT systems

• January 13, 2022 13 Jan'22

  ICO investigates police use of app to covertly record calls from mobile phones

  Surrey and Sussex police forces call in regulators after 1,000 police officers downloaded an app to covertly record phone calls on police-issued mobile phones

• January 12, 2022 12 Jan'22

  UK government bodies challenged on secure identity

  Public sector bodies in the UK recognise secure identity and access management as critical to the roll-out of digital services, but face challenges in addressing this

• January 12, 2022 12 Jan'22

  Microsoft fixes six zero-days in January Patch Tuesday update

  A larger than of late Patch Tuesday update from Microsoft comes as defenders continue to grapple with Log4Shell

• January 12, 2022 12 Jan'22

  Dutch cyber volunteers receive major funding boost

  The Dutch Institute for Vulnerability Disclosure has received a $100,000 donation to expand the scope of its work

• January 11, 2022 11 Jan'22

  Almost half of Log4j downloads still dangerously exposed

  Whether by error or design is unclear, but a great many IT teams are still exposing themselves by downloading outdated, insecure versions of Apache Log4j

• January 11, 2022 11 Jan'22

  Banks accused of neglecting customer security measures

  Which? singles out Metro Bank, Virgin Money and TSB over insecure online banking processes

• January 11, 2022 11 Jan'22

  Cyber security failure one of biggest risks facing countries and businesses, warns WEF

  Cyber risks are among the top five risks facing organisations and governments over the next two to five years. Digital inequality and the over-crowding of space with communication satellites present further risks