A security flaw at the U.K.’s business registry, Companies House, exposed the personal information of business executives and allowed unauthorized alteration.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Quora suffered a massive data leak, exposing their password database with 100 million passwords. But the passwords were securely stored and are next-to-useless to criminals.
The CSRB found that the security breach was preventable, and that a "a corporate culture that deprioritized enterprise security investments and rigorous risk management" ended up leaving open doors for the Chinese hackers.
While cryptocurrencies have gone from red hot to full on meltdown in recent months, threat actors don’t show any signs of shying away from finding new and innovative ways to pursue this lucrative and relatively new financial category with increasingly complex and stealthy crypto-stealers.
Universal Healthcare Services switched to a manual system and diverting patients after a Ryuk ransomware attack crippled its systems. Four patients allegedly died during the attack.
A disgruntled Black Basta ransomware gang member has leaked extensive chat logs containing various details, including phishing templates and cryptocurrency addresses.
Based on a report by Microsoft, the Trump campaign is claiming that foreign state-backed hackers are behind the attack that involved a leak of a vice presidential vetting dossier and other materials to US media outlets.
Most businesses are concerned about cloud security. However, only a few adopted specialized online cloud security capabilities, while the majority were using inappropriate tools.
A recent study conducted by Chubb in major Asia-Pacific markets reveals that SMEs tend to be both overconfident and underprepared when it comes to cyber awareness.
A recently discovered trojan, PDFReader, exploits Facebook Ads Manager by using a legitimate-looking digital security certificate to access and grab cookies from victim’s Facebook session.










