New security-by-design and security-by-default guidelines from a collection of federal agencies provide the first guidance of its type issued to urge manufacturers to ship devices with adequate security for the modern threat landscape.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
SaaS solutions are widely used and are mission-critical for their users. As such, they should be treated with the utmost importance, just like their mission-critical non-SaaS business applications. Solutions are now available for vendor-agnostic SaaS backup.
European law enforcement agencies arrested five suspects linked to an online investment fraud scheme that defrauded over 33,000 victims of at least $98 million.
Cyber attack that targeted irrigation systems in Israel is thought to be part of an annual "OpIsrael," hacktivist campaign that takes place every April, and this year's attempt at least managed to cause a nuisance for some farms in the Jordan Valley.
The Aloha POS system and NCR's Back Office app, a tool used for managing restaurant staffing and inventory, are impacted by the ransomware attack, though the full extent of damage is still being investigated.
Secure Service Edge (SSE) may be the architecture of the future by delivering connectivity and security tools from the cloud to reduce complexity, risk, and cost.
In what is described as the first known supply chain attack caused by another supply chain attack, the recent breach of 3CX was caused by an employee downloading a compromised piece of trading software.
US intelligence leak indicates that China is putting an emphasis on targeting enemy satellites in future conflicts. The country is bending its cyber capabilities toward disrupting and taking over communications and surveillance during whatever clashes might come.
Companies that are downsizing, or still planning to, must have an insider threat program in place or run the risk of falling victim to a massive cyberattack that could cripple the business for months to come, ultimately making the cost reductions a worthless exercise.
Vice Society ransomware group has published a treasure trove of sensitive internal documents and employee data stolen during the CommScope ransomware attack. CommScope's customers include hospitals, schools and U.S. federal agencies.










