Advertisement
Top

Tag: cyber security


Threats & Malware, Vulnerabilities

Stop Counting Vulnerabilities & Start Measuring Risk

October 31, 2017

Via: Dark Reading

As a security team, you are what you measure. The problem is that too many security teams are counting vulnerabilities, not measuring risk. It’s time we examine how vital it is for security teams to establish risk-based metrics, while offering […]


Malware

National Cyber Security Awareness Month: Be Aware and Beware

October 20, 2017

Via: Zone Alarm

October is National Cyber Security Awareness Month, when global events on the topic have become top of mind for people and businesses in recent years, given the staggering number of recent data breaches and global ransomware attacks. NCSAM was launched […]


Cyber-crime, Network security

Hacker or Hero? Why a Hacker Isn’t Always a Supervillain

September 20, 2017

Via: Security Week

Summer is coming to a close, and with it the end of a steady stream of superhero movies that have been lighting up the box office over the past few months. But while on-screen heroes have been lassoing bad guys […]


Hacker, Malware

Iranian Hackers Target Aerospace, Energy Companies

September 20, 2017

Via: Security Week

A cyber espionage group linked by security researchers to the Iranian government has been observed targeting aerospace and energy organizations in the United States, Saudi Arabia and South Korea. The threat actor, tracked by FireEye as APT33, is believed to […]


Data loss, Phishing

News in brief: Linux advice for Equifax; fired over phish; Security.txt standard proposed

September 19, 2017

Via: Naked Security

Writing on the Double Pulsar site, infosec practitioner Kevin Beaumont suggests Security Enhanced Linux (SELinux) would have saved Equifax from the disastrous breach it disclosed earlier this month. If you’re going to have Apache Struts facing the internet, SELinux is the way […]


Network security, Security

Infosec weakest links: Negligent employees and poor password policies

September 19, 2017

Via: Help Net Security

54% of respondents to a Ponemon Institute study that involved more than 1,000 IT professionals said negligent employees were the root cause of a data breach. The study found that strong passwords and biometrics continue to be an essential part […]


Application security, Threats & Malware

Google Chrome most resilient against attacks, researchers find

September 19, 2017

Via: Help Net Security

Researchers have analyzed Google Chrome, Microsoft Edge, and Internet Explorer, and found Chrome to be the most resilient against attacks. “Modern web browsers such as Chrome or Edge improved security in recent years. Exploitation of vulnerabilities is certainly more complex […]


Security, Tech

AI will change the face of security, but is it still the stuff of sci-fi?

September 18, 2017

Via: Help Net Security

The technology industry has always had a big problem with hype, with marketing teams, analysts and the media alike tending to fixate on the next big thing that will revolutionise our lives. Artificial intelligence is the latest technology to be […]


Security, Threats & Malware

20 Questions to Help Achieve Security Program Goals

September 13, 2017

Via: Dark Reading

There are always projects, maturity improvements, and risk mitigation endeavors on the horizon. Here’s how to keep them from drifting into the sunset. Recently, I was at the beach and found myself gazing out toward the horizon. Of course, as […]


Threats & Malware, Vulnerabilities

China to Create Data Repository to Log Cyber Attacks

September 13, 2017

Via: Dark Reading

Telcos, government agencies, Internet companies, and domain-name organizations to file cybersecurity information. China’s Ministry of Industry and Information Technology (MIIT) on Wednesday unveiled a directive that calls on organizations and government agencies to report cyber-attack information into a nationwide data […]


Cyber-crime, Tech

U.S. Energy Department Invests $20 Million in Cybersecurity

September 13, 2017

Via: Security Week

The United States Department of Energy announced on Tuesday its intention to invest up to $50 million in the research and development of tools and technologies that would make the country’s energy infrastructure more resilient and secure. Over $20 million […]


Network security, Threats & Malware

From Suspicious Activity to Suspended Account in Less Than a Minute: Stopping Insider Threats With Automation

September 13, 2017

Via: Security Intelligence

You read the headlines and understand industry trends. There are plenty of horror stories to reference. Organizations have had their reputations destroyed and entire corporations have gone out of business due to insider attacks. How can you avoid being the […]


Cyber-crime, Data loss

What is the biggest threat from the Equifax breach? Account takeovers

September 12, 2017

Via: CSO Online

Yes, there will be some tax and banking fraud as a result of the gargantuan data breach at Equifax. The biggest impact, however, will be felt by enterprises that rely on credit reporting bureaus to verify the identity of people […]


Security, Tech

AI, ML – is it all just BS?

September 12, 2017

Via: CSO Online

Read a security related press release or been to an event recently? You’ve no doubt been wondering how you managed to do your job all this time without Artificial Intelligence (AI) or Machine Learning (ML).Do these technologies really live up […]


Security, Threats & Malware

Cyber resiliency – a key to corporate survival (and sleep)

September 11, 2017

Via: CSO Online

For those of us in the healthcare industry, and I suspect many others, the  WannaCry ransomware attack is now referred to as the weekend without sleep. In my organization, a cross-section of folks from all areas spent most of their […]


Hacker, Threats & Malware

Insurers increasingly concerned about silent cyber exposure

September 11, 2017

Via: Help Net Security

Around half of industry practitioners see the risk of silent cyber exposure – potential cyber-related losses due to silent coverage from insurance policies not specifically designed to cover cyber risk – as growing over the coming year, according to Willis […]


Security, Threats & Malware

Insider threats and ransomware are most feared, followed by DDoS attacks

September 8, 2017

Via: Help Net Security

A new SANS survey found that ransomware, insider threats and denial of service are considered the top three threats organizations face when it comes to securing sensitive data. According to the study, 78 percent of respondents report encountering two or […]


Cyber-crime, Malware

13% of SMBs have experienced an IoT-based attack

September 8, 2017

Via: Help Net Security

One in four companies have already experienced a ransomware attack and one in eight have dealt with an IoT-based attack, according to Arctic Wolf Networks. As mid-market companies continue to embrace IoT without implementing the necessary security tools, these attacks […]


Malware, Security

CodeFork hackers fooled many security solutions. How about yours?

September 7, 2017

Via: Radware Blog

As a result of Radware’s recent acquisition of Seculert, the startup that developed machine-learning algorithms that are capable of detecting and blocking zero-day malwares in cloud environments, Radware has expanded its research capabilities to include malware intelligence. For the past […]


Cyber-crime, Hacker

Dragonfly hackers gained operational access to European, US power companies

September 7, 2017

Via: Help Net Security

The Dragonfly hacking group is back – or should we say it probably never went away – and is still interested in penetrating the networks of European and US companies in the energy sector. Even worse, their efforts have been […]