OFAC's recent advisory stating that those who pay the ransom of a ransomware attack may be subject to fines can be detrimental to all involved in this growing cybersecurity problem.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Browser extensions are creeping their way into being a favorite of malicious actors. Why are dangerous extensions still a challenge, even though Google is actively combating the problem?
New report from Allianz finds that cyber crime causes the most expensive insurance losses, but that internal failures are the most frequent overall reasons for cyber claims.
The new normal has highlighted the need for new solutions - one of which is device-as-a-service (DaaS) which can boost overall risk mitigation in companies.
Hackers compromised more than 300,000 Spotify accounts in a credential stuffing attack exploiting a third-party database containing 380 million credentials stolen from other breaches.
Use of Shadow IT by employees for communications can harm an organization’s security and its culture. It also signals to employers that something is not working.
Hackers published a list of 50,000 Fortinet VPN credentials stolen from vulnerable devices. A second data leak dumped sslvpn_websession files for every IP initially compromised.
The Information Society Forum (ISF) believes that human-centered security is the way forward. Security awareness thus must stay in tune with expected patterns of behavior and psychological realities.
IoT players that don’t make security part of their brand will lose customers to competitors who do. This means re-addressing the entire product life cycle with an emphasis on security.
The world's biggest domain registrar, GoDaddy, has suffered another blow to its reputation for security after losing control of the addresses of several well-known cryptocurrency services.










