Following Prime Minister Boris Johnson’s recommendation to work from home at the end of September, many people in the UK will have begun to do so in October, invoking feelings of embarkation on Lockdown 2.0. October is also European Cybersecurity Month and, as employees again move away from the office and the additional protection it brings, this is a crucial juncture for individuals and businesses alike to reflect on what we can learn from the first lockdown.
ISBuzz Team
As you may be aware, The United States has seized 92 domain names that were unlawfully used by Iran’s Islamic Revolutionary Guard Corps (IRGC) to engage in a global disinformation campaign, announced by the Department of Justice yesterday.
Cybersecurity researchers at Proofpoint have observed cybercriminals launching a wave of email attacks, actively using US President Trump’s recent COVID-19 illness as a lure to try and trick users into clicking on a malicious document and downloading infected software. These attacks follow recent attempts by another cybercriminal group, who last week sent tens of thousands of malicious email attacks asking recipients to volunteer for the Democratic Party ahead of the November U.S. election, as a lure to trick users into installing the Emotet malware.
On Friday, the wait is over and FIFA 21 becomes available to the general public, but with the game being so popular, potential cybersecurity threats lurk in the shadows.
HP recently published a security bulletin to address multiple vulnerabilities in HP Device Manager, software that’s used to manage HP Thin Clients remotely. A combination of the three vulnerabilities could allow an attacker to gain remote command execution on the system through the HP Device Manager.
There has been a 429% growth in the number of corporate credentials with plaintext passwords on the dark web so far this year, according to Arctic Wolf’s 2020 Security Operations Annual Report. This amounts to an average of 17 separate sets of credentials per a typical organization, leaving businesses particularly vulnerable to account takeover attacks (ATO). This is despite a year-on-year decline in publicly disclosed data breaches, which Arctic Wolf attributes to “alert fatigue”, in which overworked IT and security professionals increase alert thresholds, leading to less reporting of incidents.
In a new Public Service Announcement, the FBI has warned of the dangers of using Wi-Fi networks in hotels, listing the potential risks involved. Primarily, the announcement warns that the networks typically favor guest convenience over strong security practices, and could therefore leave users vulnerable to cyber-attacks. The wireless passwords used by hotels aren’t always kept secret, with small hotels often displaying the password on a sign at their service desk. These passwords are also changed infrequently, meaning that, in many cases, access can be easy to obtain by using a combination of a room number and a password. Guests themselves…
The malware known as Emotet has emerged as “one of the most prevalent ongoing threats”, as it increasingly targets state and local governments and infects them with other malware, according to the cybersecurity arm of the Department of Homeland Security. Emotet was first identified in 2014 as a relatively simple trojan for stealing banking account credentials. Within a year or two, it had reinvented itself as a formidable downloader or dropper that, after infecting a PC, installed other malware – such as the Trickbot banking trojan and the Ryuk ransomware. Over the past month, Emotet has successfully burrowed into Quebec’s Department of…
The National Audit Office has said taxpayers could lose up to £26 billion from fraud, organised crime or default.
University Hospital Limerick has launched an investigation into a major data breach in which a rogue non-HSE employee leaked personal details belonging to more than 600 patients, including 95 children, to the internet, the Limerick Leader reported exclusively this morning. This data belonging to 630 patients, including 95 children, was taken from an automated system that is used at the Dooradoyle emergency department to dispense medication safely.