ISBuzz Team

Following the news regarding vulnerabilities found in the uTorrent BitTorrent client, Bob Rudis, Chief Data Scientist at Rapid7 commented below. Bob Rudis, Chief Data Scientist at Rapid7: “Over the past few months, researchers from Google’s Project Zero have been working with BitTorrent, Inc. to fix vulnerabilities in their uTorrent BitTorrent client. BitTorrent is a communication protocol for peer-to-peer file sharing which is used to distribute data and electronic files over the Internet, and the uTorrent client — a BitTorrent product — enables users to share and download files using this protocol. There are millions of active uTorrent users online every day. The…

Following the news that security researchers posted “friendly warnings” to users of Amazon’s cloud data storage service whose private content has been made public due to a misconfiguration, James Houghton, CTO at Think Marble commented below.   James Houghton, CTO at ThinkMarble: “The misconfiguration of systems is commonplace when there is the lack of requisite knowledge or time and resources allocated for proper cyber security considerations.  We often see these types of vulnerabilities which makes it crucial businesses start taking cyber and information security seriously and either recruit or buy in the requisite expertise.  Services such as AWS make it very easy…

Breaking news has revealed that Tesla’s Amazon Web Services account was hacked to mine cryptocurrency. The hack, which was brought to Tesla’s attention by the cybersecurity startup RedLock, also reportedly exposed some of Tesla’s proprietary data related to mapping, telemetry, and vehicle servicing. IT security experts commented below.  Ken Spinner, VP of Field Engineering at Varonis: “Whenever a compromise or data breach takes place, there’s a tendency to point fingers, but the reality isn’t as clear cut: Security doesn’t have an on/off switch – and it’s important to layer multiple and different security measures to protect underlying data and resources. AWS provides a…

In response to the news this morning that a Cyber Aware survey has found that ‘young Brits’ lack cyber security awareness, Anthony Chadd, EMEA Senior Director at Neustar commented below. Anthony Chadd, Senior Director, EMEA at Neustar: “As the cyber threat landscape is constantly shifting, hackers are continuously finding new, inventive ways to launch attacks and extract sensitive information. Just last year, our global DDoS report found that four in five organisations were hit by a DDoS attack – and of those hit – there was a sharp rise in such attacks leading to the theft of customer data. “It has therefore never been more…

Study sponsored by FireMon finds that 40% of organizations do almost nothing to establish baseline security policies A recent research report from Enterprise Management Associates (EMA) entitled Data Driven Security Tools: The Value of Security Policy Orchestration and Automation to Improve Change Management and SecOps, has revealed that organizations who use Network Security Policy Management (NSPM) tools reduce their attack surface, experience fewer change related outages and improve business continuity, particularly when it comes to the cloud. The report also revealed that a shocking 40% of organizations said they have done almost nothing to establish baseline policy standards for security. “This is…

North Korea has been expanding its cyber warfare capabilities and is now poised to launch large scale cyber attacks against other nations states. This comes on the same day that a Freedom of Information request has revealed that 25% of UK councils have suffered a data breach in the last five years. North Korea poised to launch large-scale cyberattacks, says new report – Washington Post Councils ‘unprepared’ for cyber-attacks, report says – BBC Fraser Kyne, EMEA CTO at Bromium below, explaining how this leaves the UK vulnerable to nation state attacks, and how to reduce the threat. Fraser Kyne, EMEA CTO at Bromium: “When…

Defence Ministry Resolved 35 Vulnerabilities in Three Weeks, Thanks to Hackers The Singapore Ministry of Defence (MINDEF) today announced the results of the first MINDEF Bug Bounty Challenge, which was facilitated by HackerOne, the leading hacker-powered security platform. The three-week program invited 300 ethical hackers to penetrate its systems, including the Ministry’s public website, NS Portal, and Defence Mail. The MINDEF Bug Bounty Challenge was the Ministry’s first crowd-sourced security initiative and the first program of its kind by a government agency in Asia. Hackers were invited to look for vulnerabilities from January 15, 2018 to February 4, 2018 to supplement the…

Following the news that smart meters could leave British homes vulnerable to cyber-attacks, David Emm, Principal Security Researcher at Kaspersky Lab commented below.   David Emm, Principal Security Researcher at Kaspersky Lab: “Today’s homes include more smart devices than ever before, including smart meters. The main benefit of such connected domestic devices is convenience as they are able to send data automatically; in the case of smart meters, data on energy consumption. But if smart meters are open to attack from cybercriminals, this should concern us all.  Even if there are no personal financial details at stake, a criminal could falsify…

It has been revealed that Snapchat has suffered a cyber attack resulting in over 55,000 users being exposed. The phishing attack tricked users into handing over their credentials including passwords, which eventually made their way onto a public website. IT security experts commented below. Javvad Malik, Security Advocate at AlienVault: “Attacking the human through phishing or other techniques has remained a constant attack vector over the years. While Snapchat is predominantly a consumer tool, if users have reused credentials, it is possible they can be used to attack corporate accounts. Therefore, user awareness is essential to protect attacks against both business…

As technology plays a growing role in how today’s businesses are run, it’s clear the Internet of Things (IoT) will continue to improve efficiency and productivity through the delivery of more timely operations and unique insights through business data. Ericsson forecasts 50 billion connected “things” by 2020 and while it’s clearly an exciting time for the B2B tech industry, reaching these lofty projections will require a fundamental shift in the way designers and manufacturers create products. Pete Wood from RS Components discusses 5 ways businesses can keep pace with the IoT revolution. Use what you know  Demand for quality and…