New studies from FireEye Mandiant Threat Intelligence and Google’s Project Zero found that 2021 was a record year for zero-day vulnerabilities, more than doubling the amount seen in 2020.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
UIDAI's handling of Aadhaar is likely to be facing substantial reforms, not just due to the findings of this data management report but also due to ongoing controversy over constitutionality.
Escalation of cyber-warfare can lead to attacks on operational technology (OT), compromising critical infrastructure and disrupting our way of life. Learn the three-part OT security framework to ensure these assets remain safe and accessible at all times.
U.S. and European law enforcement agencies seized RaidForums and detained its founder and two accomplices after a year-long operation. Hacking site had at least 10 billion stolen records for sale and has more than 500,000 registered users.
Tornado Cash said that the OFAC sanctioned address that was being used to process the $625 million stolen from NFT game Axie Infinity's Ronin bridge had already been blocked.
Log4j usage is widespread, with billions of Java-enabled systems out there and is trivially easy to exploit. Here are key strategies to better protect your organization in both the short and long term.
There is more to pandemic burnout than just wanting the world to go back to the way that it used to be. Pandemic burnout is directly contributing to a variety of cybersecurity problems.
Proposed new features and app concepts are reportedly being nixed solely because of fears they will violate Apple’s privacy rules. Examples include scrapped plan to allow voice purchases via Siri.
As the war in Ukraine intensifies and the risk of cyber-attacks from Russia grows, protecting intellectual property is both a national security issue, and also an economic one.
Lapsus$ hackers repeatedly accessed T-Mobile's internal systems, including Atlas account management system capable of SIM swapping, and downloaded thousands of source code repositories.










