Latest

Cyber Security

Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.

So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.

It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.

Computer chip showing security flaw exposing encryption keys on Intel chips

Cyber Security News

High Severity Security Flaw in Intel CPUs Allows Attackers to Access Encryption Keys and Bypass TPM, BitLocker, and DRM

December 3, 2021

Security flaw exposes the firmware encryption key allowing attackers to run arbitrary code on Intel Management Engine and access TPM, BitLocker, and EPID encryption keys.

Sterile bottles and ampoules on the dispensing line showing Tardigrade malware targeting biomanufacturing

Cyber Security News

BIO-ISAC Warns About Tardigrade Malware Actively Targeting Biomanufacturing Facilities

December 2, 2021

Tardigrade malware could shut down biomanufacturing facilities, exfiltrate data, deliver ransomware, and act as a backdoor for hackers to perform custom operations.

IKEA furniture retail store sign showing phishing attacks

Cyber Security News

IKEA Suffers Ongoing Phishing Attacks From Compromised Internal and Vendor Accounts

December 2, 2021

Internal emails reveal that leading furniture retailer IKEA is battling an ongoing campaign of phishing attacks, fueled by internal and vendor accounts that have already been compromised.

Smartphone chain with lock on wooden table showing mobile app security

Cyber Security Insights

Debunking and Addressing Myths About Consumers and Mobile App Security

December 2, 2021

If an app were breached or hacked, 74% of all consumers would stop using it, and 46% of all consumers would tell their friends to stop doing so. In this article, we’ll examine the challenges of implementing mobile app security and how development teams can overcome them.

Woman typing on keyboard and talking on phone showing Zelle fraud

Cyber Security News

Zelle Fraud Scam Uses Fake Alerts to Drain Bank Accounts

December 1, 2021

Zelle fraud has become rampant, and attacks frequently begin with a fake notification of a suspicious transaction that appears to be coming from the bank itself.

Man typing on laptop with virtual lock showing passwordless

Cyber Security Insights

Beyond the Buzzword: Passwordless* Versus Password-Free

December 1, 2021

In this article, we move beyond the buzzword to understand the high costs of passwords, the distinction between passwordless and password-free, what a world without passwords would look like and how we can finally get there.

Closeup shot of one bitcoin over graphic video card showing account security for cryptocurrency

Cyber Security Insights

What US$10M in Losses Each Day Tells Us About Cryptocurrency Account Security

November 30, 2021

Cryptocurrency exchanges need to empower users to fully secure their accounts to protect themselves from phishing attacks and account takeovers. Account security using modern authentication standards can achieve this without sacrificing user convenience and privacy.

GitHub website on laptop screen showing leak of login cookies

Cyber Security News

Thousands of GitHub Users Unknowingly Committed Their Firefox Login Cookies, Risking Account Takeovers and Supply Chain Attacks

November 29, 2021

GitHub users leaked their login cookies by committing cookies.sqlite database to their public projects from their Linux home directory, exposing their accounts to potential compromise.

Woman wearing glasses working on the laptop showing Proxyshell vulnerability and cyber risk

Cyber Security News

Minimizing Cyber Risk: Lessons Learned From Proxyshell

November 29, 2021

The best way to deal with a vulnerability is doing what you can to prevent them from happening in the first place. Oftentimes, cyber risk can be managed even through simple and basic security hygiene practices.

Black keyboard with skull and crossbones showing Emotet malware

Cyber Security News

Emotet Malware Returns by Leveraging Trickbot’s Infrastructure and Resumes Phishing Campaigns

November 26, 2021

Researchers warn about the return of Emotet malware through TrickBot's infrastructure and a new phishing campaign through infected email attachments after a year of inactivity.

1 2 3 … 130

Cyber Security

High Severity Security Flaw in Intel CPUs Allows Attackers to Access Encryption Keys and Bypass TPM, BitLocker, and DRM

BIO-ISAC Warns About Tardigrade Malware Actively Targeting Biomanufacturing Facilities

IKEA Suffers Ongoing Phishing Attacks From Compromised Internal and Vendor Accounts

Debunking and Addressing Myths About Consumers and Mobile App Security

Zelle Fraud Scam Uses Fake Alerts to Drain Bank Accounts

Beyond the Buzzword: Passwordless* Versus Password-Free

What US$10M in Losses Each Day Tells Us About Cryptocurrency Account Security

Minimizing Cyber Risk: Lessons Learned From Proxyshell

Emotet Malware Returns by Leveraging Trickbot’s Infrastructure and Resumes Phishing Campaigns

High Severity Security Flaw in Intel CPUs Allows Attackers to Access Encryption Keys and Bypass TPM, BitLocker, and DRM

Clearview AI Facing £17 Million Fine From UK ICO Over Violation of Data Protection Laws

Consumer Privacy Rests on Encryption Lawsuit: WhatsApp’s Legal Battle in India

BIO-ISAC Warns About Tardigrade Malware Actively Targeting Biomanufacturing Facilities