Kubernetes is fast becoming a cornerstone technology for organisational agility, development speed, and business growth. While it was quickly adopted by major technology companies like Spotify and IBM, its deployment is now widespread across a diverse range of organisations including Goldman Sachs, Nokia, Adidas, and the UK’s Home Office. As companies continue the drive to digital transformation and cloud adoption, Kubernetes will undoubtedly become increasingly popular as the default system for automating deployment, scaling, and management of containerized applications. However, as with many rapidly adopted technologies, there is a point at which businesses will need to find a way to ensure…
ISBuzz Team
In a world where everything and everyone is connected to the internet, in one way or another, it’s hard to imagine a network that is truly secure. Data, large amounts of it, are at the centre of it all. With industries from healthcare to the education sector to the government using the internet to provide easy access to data, it is no wonder that cybersecurity teams are always working around the clock to try and come up with better ways of defending these networks and the data they store. Insider Threats – Need for Security to Evolve from “Castle and…
The Le Figaro, a French daily newspaper, exposed roughly 7.4 billion records containing personally identifiable information (PII) of reporters and employees, as well as of at least 42,000 users. The data exposed by this misconfigure could be used by fraudsters for identity theft and fraud, for credential phishing attacks. Due to the fact that there were no passwords on the server, the data was available to anyone who wanted to access it. https://twitter.com/timsandle/status/1256685391878422535
Tomorrow, it will be exactly 20 years since the ILOVEYOU virus infected computers across the world. It was one of the first examples of how social-engineering could play a vital role in cybercrime. It was not the first mass-mailing worm in the late 90’s, but the virus was undoubtedly the one which affected most computers globally. While “ILOVEYOU” was not intended to generate money for the developers, the social engineering method, is one of the most important legacies of “ILOVEYOU.
Over the weekend The Times reported that hackers have put more than 500,000 Zoom logins up for sale on the dark web at a penny each. The National Cyber Security Centre has issued a warning advising that meetings should always be protected by passwords and links to them should not be shared publicly, only the person hosting the call should be able to share their screen with everyone joining.
The research team at Cybereason are investigating a new type of Android malware called EventBot, according to their blog. This malware disguises itself as a legitimate Android app, abusing Android’s in-built accessibility features to obtain deep access to the device’s operating system. Once installed, the EventBot-infected fake app siphons off passwords for more than 200 banking and cryptocurrency apps, such as PayPal and HSBC, and intercepts two-factor authentication text message codes.
In response to the new report Hiding in plain sight: PhantomLance walks into a market on a campaign that’s believed to have been underway for years, pushing spyware onto Android devices from the Google Play Store and other Android stores, an expert offers comments.
Study recommends NHS in charge of app, with priority access to testing for those alerted and/or with symptoms It is possible to implement a privacy-respecting contact tracing app that can achieve widespread adoption in the UK, but only if the NHS, rather than the government, run it, researchers at Cass Business School have found. The researchers found that adoption rates increase further if the app is linked to priority testing for Covid-19 for those who get infection alerts. They also found that the public want an ‘expiry date’ by which any data collected by the app will be destroyed. The study comes as central…
The leak of nearly 25,000 email addresses and passwords for employees of public health organizations may be down to a US-based conspiracy theorist, it has been found. This information was dumped online and spread via Twitter, according to a report published by The Washington Post on Wednesday. After the leak was reported, the WHO said it had seen a spike in attempted hacks on its employees – but asserted that the information involved only affected one older system at the organisation. The leaked passwords appear to form part of a larger data set, first posted on the internet in 2016. SITE Intelligence…