As enterprises work to weather the COVID-19 crisis, they are applying the lessons learned to strengthen their cyber resilience, and to embed data security, privacy and compliance into their IT infrastructure.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Hackers intercepted cryptocurrency payments by attaching relay servers on the Tor network and redirected payments to their wallets by replacing Bitcoin addresses.
A new FBI security alert indicates that a group of Iranian hackers are on a spree of compromising the BIG-IP products manufactured by F5 Networks.
Alexa bug allows hackers to access users' voice history, personal, and banking information. The vulnerability also allows hackers to install or uninstall Alexa skills on compromised accounts.
Over a billion Android phones can be turned into perfect spying tools by security flaws, a new study reveals. Hackers could exfiltrate data and silently run malware on the devices.
Dark web marketplaces have a constant tension between maintaining customer service while simultaneously trying to get away with manipulative or even outright customer-hostile measures.
Customers of one of the biggest names in the field of enterprise VPN services suffered a significant breach when a list of leaked passwords in plaintext was published on an underground forum.
Three US government agencies issue a joint alert over Taidoor malware attack in Chinese cyber espionage campaigns targeting governments and organizations.
A data breach exposed 20GB of Intel's intellectual property affecting the chipmaker's flagship CPUs and SpaceX's components. Intel says a user with an NDA shared the code.
Canon services suffered an outage caused by Maze ransomware attack affecting internal applications, email servers, Microsoft Teams, and the U.S. website for six days.










