Two Iranian hackers have been indicted for election interference, charged with stealing information from state voter rolls to personally target thousands of individual voters as well as members of Congress and campaign staffers.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
An SEC filing has revealed that GoDaddy suffered a data breach that impacts some 1.2 million of its current and former managed hosting customers. Wordpress users may have had their email addresses exposed.
As we approach the holiday shopping season, specifically large online retail events like Black Friday and Cyber Monday, consumers must be on high alert for cybercriminals who will also be looking to capitalize on such events. Here are some simple tips all shoppers should consider following and implementing.
A new report finds that security professionals are receptive to the idea of more regulation by the federal government in the interest of improving cyber defenses. 99% feel that federal agencies are not doing enough to protect their own data and systems.
A recent spate of crippling ransomware attacks against healthcare organizations signals that these assaults remain a major threat. Healthcare leaders should focus their efforts by moving beyond a prevention strategy and focusing on developing a proactive preparedness plan.
Recent survey of 2,000 international consumers suggests that companies unify and modernize identity authentication processes to avoid a mass exodus of customers.
Iranian APT groups targeted critical infrastructure entities by exploiting known Microsoft Exchange Server and Fortinet vulnerabilities using malicious and legitimate tools.
Organizations need a new security approach designed for the modern world that automatically validates security for continuous resilience instead of assuming Defense in Depth is accurate. Every Defense-in-Depth design requires Validation-in-Depth at its core.
A new report finds that cultural divides and conflicts between IT and OT teams is a significant contributor to failures to secure industrial controls systems (ICS) throughout the US.
Researchers warn about the return of Emotet malware through TrickBot's infrastructure and a new phishing campaign through infected email attachments after a year of inactivity.










