News

IT risk management

• August 31, 2018 31 Aug'18

  Security Serious Week to feature flash mob event

  “Flash mob” event will create a human collage, highlighting cyber security advice

• August 31, 2018 31 Aug'18

  Fraudulent money transfers are top aim of business email compromise

  Business email compromise is increasingly popular with cyber criminals to steal money and information as well as spread malware, security researchers find

• August 30, 2018 30 Aug'18

  Cobalt cyber heist group mounts new campaign

  Security researchers discover new campaign using two malicious links to double the chances of infection, which is believed to be linked to a notorious cyber crime group

• August 30, 2018 30 Aug'18

  Machine identity management crisis looming

  Managing machine identities is looming as the next big security challenge, a study reveals, with few organisations capable of protecting them as they increasingly form the basis of online communications

• August 29, 2018 29 Aug'18

  Improving security is top driver for ISO 27001

  Organisations are implementing the ISO 27001 standard in recognition of the fact that cyber attacks are increasingly inevitable and that it is best to be well-prepared to fend off attacks and mitigate their effect

• August 29, 2018 29 Aug'18

  Security teams and C-suite exec views not aligned

  There are key differences and potential challenges when it comes to security teams and C-suite executives communicating and aligning about cyber threats, a study shows

• August 29, 2018 29 Aug'18

  IT leaders at a crossroads as they grapple with digital technology

  CIOs have the opportunity to influence their company strategy as digital technology reshapes business. A survey of CIOs across 70 countries charts a path for IT leaders through emerging technologies

• August 28, 2018 28 Aug'18

  Cyber attackers switching to covert tactics

  Cyber criminals are moving away from mass, high-profile attacks to ones that are stealthy and more subtle – as well as attacks targeting systems typically used in critical infrastructure, researchers say

• August 28, 2018 28 Aug'18

  Sharp rise in business email compromise

  Cyber attackers are expanding their attack methods to steal money and to gain access to corporate and employee data, a report reveals

• August 24, 2018 24 Aug'18

  UK universities targeted by Iranian hackers

  UK universities are among those targeted by a cyber threat group associated with the Iranian government

• August 24, 2018 24 Aug'18

  North Koreans add Mac OS to cryptocurrency-stealing malware attacks

  A North Korean hacking group is targeting cryptocurrency exchanges using Trojanised cryptocurrency trading software designed for both Microsoft’s Windows and Apple’s Mac OS, say researchers

• August 23, 2018 23 Aug'18

  Apache Struts users urged to update due to new security flaw

  Another security flaw has been discovered in the Apache Struts, which was at the heart of the massive Equifax data breach in 2017

• August 23, 2018 23 Aug'18

  Councils at risk from unsupported Windows Server and SQL Server

  Some local authorities are using unsupported server software, while others are not paying for extended support

• August 22, 2018 22 Aug'18

  European cloud adopters still lack basic security

  Despite outpacing the rest of the world, the majority of organisations adopting cloud in Europe, the Middle East and Africa lack basic security, a report reveals

• August 22, 2018 22 Aug'18

  Superdrug denies data breach

  Superdrug has warned online customers it believes may have had personal details exposed, but claims its systems were not compromised, in what could be the first GDPR-related extortion attempt

• August 21, 2018 21 Aug'18

  New Zealand to run national cyber security exercise

  The island-nation will test the resilience of its critical infrastructure in November 2018, bringing together multiple agencies to protect assets of national significance

• August 21, 2018 21 Aug'18

  Online crime costs more than $1m a minute

  More than $1m is lost to cyber crime every minute, a report reveals, underlining the increasing and significant threats businesses face online

• August 21, 2018 21 Aug'18

  Retail and finance top cyber targets

  Retail and finance remain the top cyber attack targets, but the second quarter also saw a spike in attacks against the manufacturing industry and an increase in remote desktop attacks, a report reveals

• August 21, 2018 21 Aug'18

  Malaysia’s financial sector warms up to cloud, but lacks security leadership

  Almost two-thirds of Malaysia’s financial services firms are developing a cloud strategy, but not all have a security plan in place

• August 17, 2018 17 Aug'18

  ASEAN firms need to overcome DevOps hurdles

  Southeast Asia has had pockets of success with DevOps, but most organisations across the region will need to overcome cultural and legacy challenges to succeed

• August 16, 2018 16 Aug'18

  Global infosec spending to top $114bn in 2018, says Gartner

  The need for improved detection, response and privacy is driving the demand for security products and services in response to security risks, business needs and industry changes, Gartner reveals

• August 16, 2018 16 Aug'18

  Google Chrome flaw puts privacy at risk

  Imperva security researcher urges Google Chrome users to update to the latest version after discovering a vulnerability that could be exploited to uncover private data

• August 15, 2018 15 Aug'18

  The National Archives deploys Egress to support FoI requests

  Egress Secure Workspace is being used by the Advisory Council for The National Archives, who require a collaboration environment to assess FoI requests

• August 15, 2018 15 Aug'18

  ICS security at risk in key verticals, report shows

  The security of industrial control systems (ICS) is at risk in key verticals due to under staffing, under investment and human error, a report reveals

• August 15, 2018 15 Aug'18

  Intel releases fix for latest chip security flaws

  Businesses and consumers are advised to download security updates from Intel for new security flaws that could allow attackers to access protected data, but some cloud providers could see a performance impact

• August 14, 2018 14 Aug'18

  Businesses urged to patch Microsoft flaw allowing MFA bypass

  Security researchers are urging enterprises to update their software after the discovery of a vulnerability that could undermine the security provided by multifactor authentication

• August 14, 2018 14 Aug'18

  FBI warns of global ATM cyber crime spree

  The FBI has issued a warning to banks that cyber criminals are planning to steal millions in a coordinated worldwide attack on cash machines

• August 13, 2018 13 Aug'18

  Banks lead in digital era fraud detection

  All e-commerce businesses should follow the banks’ lead in how to detect fraud in the digital era, says RSA fraud and risk expert

• August 13, 2018 13 Aug'18

  Most security pros concerned about election infrastructure

  A majority of information security professionals believe that election infrastructure is vulnerable to cyber attack, a survey shows

• August 13, 2018 13 Aug'18

  UK firms concerned about cyber arms race

  Continuous investment and activity are key in the cyber arms race, according to Databarracks, as research shows UK firms are worried about keeping up with security challenges

• August 13, 2018 13 Aug'18

  Millions of businesses vulnerable to fax-based cyber attack

  Hackers could exploit security vulnerabilities in fax machines to launch cyber attacks in millions of organisations around the world, researchers warn, underlining the need for cyber resilience

• August 12, 2018 12 Aug'18

  Over 146 billion records to be stolen over next five years

  The US will bear the brunt of data exfiltration efforts by cyber criminals, though Asia-Pacific nations such as Singapore will not be spared

• August 10, 2018 10 Aug'18

  Mimecast extends core email security to enable cyber resilience

  Mimecast continues to widen its cyber security capability through in-house development and strategic acquisition, as well as extend its core email security technologies to all other areas it applies

• August 10, 2018 10 Aug'18

  NCR patches ATM vulnerabilities

  NCR has patched ATM vulnerabilities discovered by Positive Technologies

• August 09, 2018 09 Aug'18

  Under half of firms use vulnerability assessments

  Less than half of organisations base their cyber defences on strategic vulnerability assessments, and a third of these do the bare minimum to meet compliance requirements, a study shows

• August 09, 2018 09 Aug'18

  Smart cities a tempting target for cyber attackers

  Smart cities are an attractive target for cyber attackers because of the growing number of connected systems embedded throughout their infrastructure

• August 09, 2018 09 Aug'18

  Brace for more Triton-like attacks, researchers warn

  The world has not seen the last of industrial control system (ICS) attacks like Triton, researchers have warned

• August 09, 2018 09 Aug'18

  Incomplete visibility a top security failing

  Incomplete visibility of IT environments is among the most common basic enterprise security failings, as most organisations are still failing to achieve basic cyber security hygiene, a survey reveals

• August 08, 2018 08 Aug'18

  Financial services firms lack the culture to innovate fast

  Finance firms appear to be struggling to release new software quickly, a study from Contino has found

• August 08, 2018 08 Aug'18

  Check Point warns of WhatsApp vulnerabilities

  Researchers are warning of vulnerabilities in WhatsApp that allow threat actors to intercept and manipulate messages sent in a group chat

• August 08, 2018 08 Aug'18

  Cyber security double agents most common in the UK

  Cyber security professionals who alternate between criminal and legitimate activities or move full-time into cyber criminal activity are more common in the UK than other countries, a report reveals

• August 08, 2018 08 Aug'18

  Australia calls for interventionist approach in new cyber agenda

  The Australian government is forming a cyber defence network comprising security agencies and private sector partners to support a more interventionist approach towards cyber security

• August 07, 2018 07 Aug'18

  AI security hype putting businesses at risk

  The hype around artificial intelligence may be putting businesses at risk, according to a study that found most IT decision-makers believe AI is the answer to all cyber security challenges

• August 07, 2018 07 Aug'18

  Lack of Dmarc email validation puts brands and customers at risk 

  There is a worldwide lack of Dmarc email validation to defend against fraud and phishing attacks, putting organisations and customers at risk, a study shows

• August 07, 2018 07 Aug'18

  Industrial control systems a specialised cyber target

  Cyber attackers specialising in industrial control systems are fast, efficient and able to move between IT and OT environments, a study has revealed

• August 06, 2018 06 Aug'18

  Mobile banking Trojans reach all-time high

  Mobile banking Trojans topped the list of cyber threats in the second quarter of the year, according to research by Kaspersky Lab

• August 06, 2018 06 Aug'18

  Virus outbreak at iPhone chip plant could delay shipments

  A computer virus at an iPhone chip manufacturing plant could delay shipments of Apple’s latest smartphones, but the impact will be limited, say analysts

• August 03, 2018 03 Aug'18

  UK security centre to launch IoT security standard

  The London-based Centre for Strategic Cyber Space and Security Science is working on an internet of things security standard and has roped in participants from eight markets

• August 02, 2018 02 Aug'18

  Gorgon Group shows simple cyber attacks remain effective

  A highly effective cyber attack group that appears to be based in Pakistan is carrying out targeted attacks against nation states at the same time as criminal operations, researchers have found

• August 02, 2018 02 Aug'18

  Reddit breach exposes 2FA flaws

  Reddit has reported a password breach despite using 2FA, exposing the weaknesses of two-factor authentication based on mobile text messages