In response to findings from the UK Cyber Security Breaches Survey, IT security experts commented below. James Romer, Chief Security Architect for EMEA at SecureAuth: “The report highlights some key issues that businesses and charities in the UK are facing, yet there is very little focus given to protecting businesses at the identity level. The report has found that the most commonly reported breaches include cyber-fraud and impersonation of the organisation, with unauthorised use of devices or networks accounting for a high proportion of breaches last year too. These threats can all be effectively addressed through complete identity management platforms,…
ISBuzz Team
Following Uber’s massive breach revealed in 2017, another ride-hailing app has been compromised — Dubai-based Careem. The incident, affecting 14 million riders, involved access to Careem’s data storage system, compromising names, email addresses, phone numbers and trip data for anyone who signed up for the app before Jan. 14, 2018. There’s currently no evidence that the hackers accessed passwords/credit card info. Setu Kulkarni, VP of Corporate Strategy at leading application security provider WhiteHat Security, has analyzed the attack below. Setu Kulkarni, VP of Corporate Strategy at WhiteHat Security: “This incident reaffirms that we’re never out of danger from a data breach…
In response to the news that researchers from F-Secure have discovered a flaw in digital hotel keys which could be used to unlock any door in hotel rooms worldwide, Laurie Mercer, Solutions Engineer at HackerOne commented below. Laurie Mercer, Solutions Engineer at HackerOne: “Devices such as electronic locks and RFID readers are driven by software. It is easy to introduce vulnerabilities into software. It is much harder to fix bugs once the devices have been installed. We should accept that software security bugs are inevitable and ensure that methods to discover, remediate and deploy security patches are well defined and well-rehearsed.…
Healthcare cybersecurity experts from Cynerio and Rubicon Labs commented below on Orangeworm, a cyber crime group that is targeting the health sector and related industries in the US, Europe and Asia in a suspected corporate espionage campaign. Orangeworm has been observed deploying a custom backdoor known as Trojan.Kwampirs within large international organizations, researchers at Symantec have discovered. The targeted organizations include healthcare providers, pharmaceutical firms, IT service providers for healthcare, and equipment manufacturers that serve the healthcare industry. Leon Lerman, CEO at Cynerio: “We’re seeing the unfolding of one of the most dangerous scenarios for connected healthcare. A persistent and polymorphic worm…
Infographics designed to improve security effectiveness by raising awareness of specific malware strains and their capabilities Lastline, Inc., the leader in advanced network-based malware protection, announced today the launch of Maltoons™, malware cartoons designed to help media and security professionals visualize and raise awareness of malware, cybercrime tactics, and defense strategies. The program employs Lastline’s expertise in advanced malware behavior towards helping potential victims visualize and remain vigilant in protecting against various strains or families of malware. “The WannaCry and NotPetya attacks of 2017, among others, made security teams and computer users more aware of the damage that advanced malware can…
New Cognizant report finds 60% of senior IT executives claiming there are more cyber threats in their organisation than they can currently control 60% say this is due to inadequate resources 31% admit they only refresh their cybersecurity strategy on an annual basis A new report by Cognizant’s Center for the Future of Work, Securing the Digital Future, reveals that, in the pursuit of digital transformation, organisations have overlooked one critical factor that could put all their transformation efforts – and even share prices- into jeopardy: cybersecurity. The research, which surveyed over 1,000 senior IT executives in 18 countries, found…
A website blamed for launching more than four million cyber-attacks around the world, including attempts to crash banks in the UK, has been taken down in a major international investigation. IT security experts commented below. Marta Janus, Security Threat Researcher at Cylance: “On the surface, websites like WebStresser might appear to offer legit services for businesses and network administrators wanting to test their infrastructure against exceptionally high traffic and/or potential attacks. It’s only after registering an account and purchasing a subscription, that the real intent of the service becomes clear. A portal which would be committed to serve benign purposes only, would require…
A fifth of companies lack continuous encryption for personally identifiable information, and only half have the systems required to meet Articles 16 and 17 of the GDPR legislation With just one month until the new EU General Data Protection Regulation Legislation (GDPR) comes into force, data security company WinMagic, has today released the findings of research that suggests many companies will not be ready when it takes effect on May 25th, 2018. 62% of IT Decision Makers (ITDMs) surveyed describe themselves as ‘confident’ in the build-up, with 1 in 5 (18%) saying they are nervous. Only half (51%) of companies say they have…
As part of our security experts comments series Andrea commented below on the news that malicious actors have used ransomware to take the website of Ukraine’s energy ministry offline and encrypt its files. IT security experts commented below. Andrea Carcano, Co-Founder and Chief Product Officer at Nozomi Networks: “Due to the criticality of their services critical infrastructure systems have become a juicy target for cyber criminals interested in cyber espionage, cyber warfare, hacktivism and cyber ransom attacks. In addition, over the years CNI have become more dependent upon interconnected devices which has also opened them up to cyber risk. “In this type of…
Today marks exactly one month until the EU General Data Protection Regulation comes into force – making now the time to reflect on the changes both businesses and consumers should expect to see as a result of the legislation overhaul. As part of our security experts comments series, security experts from McAfee and Yoti commented below. Nigel Hawthorn, Data Privacy Expert at McAfee: “Data protection is not a responsibility for the IT department alone. It should be a coordinated task for departments such as legal, marketing and HR in partnership with IT. Becoming GDPR compliant requires a combination of knowledge, processes,…