Some of the changes COVID-19 engendered will outlast the pandemic itself. The primary source of cybersecurity risks have shifted as remote work arrangements means the weak link is the individual employee who may not have adopted all the urgently needed new security measures.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
FlexBooker, a commonly used appointment scheduling and calendar service, is apologizing to its customers after 3.7 million records appeared on a dark web hacker forum following a DDoS attack.
Cyber insurance premiums have jumped 73% in the U.S alone. Greater specificity over what is (and what is not) covered has become a feature of many updated policies, as has the expectation that companies need to have greater cybersecurity hygiene in place in order to qualify for insurance.
Thousands of companies using popular NPM libraries have just learned that the hidden price of free software is that the open source developer may withdraw their consent at any time.
Lapsus$ cybercrime gang claimed responsibility for the Impresa group ransomware attack by defacing the media company’s website and tweeting from its verified Twitter account.
As our vehicles become increasingly smarter and an extension of our mobile phones, users' security and privacy is being threatened by car hacking. Luckily, there are relatively simple measures you can take to protect your vehicle data, safety and security.
CISA stresses that "significant" Log4j breaches have not yet been found in the networks of federal agencies or critical infrastructure, but that it is not yet possible to assess whether the vulnerability is present across all of these disparate systems.
Threat group commits financial theft by hiding inside the victims’ networks for months while studying their financial systems and injecting fraudulent transactions into regular activity.
It’s beyond time to ask an uncomfortable question: are your employees your biggest defense or greatest vulnerability against insider threats? How well you defend your data depends on getting this question right.
Law enforcement agencies have identified at least 150 investment fraud websites operated by fake broker-dealers who stole a minimum of $50 million from at least 70 victims.










