Rapidly evolving botnet Dark Nexus is threatening IoT security as the dependency on connected devices grows with remote working during COVID-19 pandemic.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Misconfigured AWS account exposed data from niche dating apps affecting millions of users, leaking over 20 million files amounting to 845 GB of sensitive information including personal details, images and private conversations.
With the doubling of security vulnerabilities found in popular open source projects between 2018 and 2019, many are concerned on the record being broken again in 2020.
As stay-at-home restrictions start to loosen with COVID-19 cases declining, the office reopening is going to bring an increase in cybersecurity risks that companies should be prepared for.
Security awareness trainings and regular cyber attack simulations can help build a solid cyber security culture that stretches to every corner of the company.
Market for hack-for-hire services could be expanding significantly with recent unmasking of a Dark Basin group that has been operating in the shadows for years.
Spyware campaign stole sensitive user information through 111 fake Google Chrome extensions which gathered over 32 million downloads on the Chrome Web Store.
Reported security risks in U.S. online voting system OmniBallot have added to the mounting concern over vote manipulation during 2020 US presidential election.
Focusing on PCI compliance is a good way to improve risk management, find out what your company can do to reduce incidents, stop cyber threats and prevent regulatory fines.
5G networks provide lots of benefits and also unknown security risks. Organizations need to change their threat models to increase visibility, security awareness and control of the endpoints.










