Botnet discovered by Chinese researchers introduced a backdoor and a web shell on compromised AT&T VoIP servers, mostly in the US, for DDoS attacks and data exfiltration.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
In 2021 alone, over 40% of businesses have had data breaches. As we approach a new year, we have another chance to resolve to improve our health – our cyber health.
Colorado Energy Company, Delta-Montrose Electric Association (DMEA), suffered a malicious cyber attack that shut down 90% of its internal controls and wiped 25 years of historical data.
Security assessments for third party vendors can be a long and tedious process, take time and resources, lengthen the sales cycle and complicate business growth. There are now solutions available that put the power in vendors’ hands.
A new survey reveals deepening frustration with legacy IT vendors such as Microsoft, as supply chain attacks and ransomware attacks fed by vulnerabilities in their software become the "new normal.”
Defense agencies must take a proactive approach to file security, and one of the most effective ways to do this is by utilizing Content Disarm and Reconstruction (CDR) technology that instantly cleans and rebuilds files to match its known good manufacturer’s spec – automatically removing potential threats.
DNA testing firm said the data breach exposed personal and financial data of 2.1 million people, and hackers removed some files from the national genetic testing organization system database.
The SolarWinds hackers (thought to be backed by Russian intelligence) are up to their old tricks with new cloud providers, and have reportedly already breached a number of companies.
FCA issued remote work guidance in October outlining its expectations for compliance with its regulatory framework and effectively signaling the end of any reprieve for dispersed workforces.
Lloyd’s of London has issued a bulletin indicating that its cyber insurance products will no longer cover the fallout of cyber attacks exchanged between nation-states. This definition extends to operations that have "major detrimental impact on the functioning of a state."










