The recent WannaCry and NotPetya ransomware attacks have been all over media headlines for a large part of 2017 as cyber-crime has evolved from something which causes a headache for organisations, to an unstoppable force which can shut down healthcare facilities and even whole countries, in the case of Ukraine. Whilst the media focus is on causation and prevention, the fact of the matter is – these new kinds of ransomware are hugely intelligent and, sadly, someone will always be a victim. So, in the light that organisations affected by NotPetya are still not fully recovered, Richard Stiennon, Chief Strategy…
ISBuzz Team
Researchers have found that security cameras using an open-source code called gSOAP could be easily hacked and that attackers can send commands remotely. This allowed the researchers at Senrio, a security firm focused on the internet of things, to take over a video feed, pause the recording and turn the camera off. Leigh-Anne Galloway, Cyber security Resilience Lead at Positive Technologies commented below. Leigh-Anne Galloway, Cyber security Resilience Lead at Positive Technologies: “In last two years, we saw multiple reports of similar vulnerabilities in millions of other webcams and DVRs. Usually it’s about default settings (for example, Telnet logins with simple passwords used…
A new report out from Osterman Research and Cyphort -“The Complexities of SIEMs and Their Impact on IR Processes, shows IT security teams are not satisfied with the threat investigation and analysis capabilities available through their SIEMs. Mike Patterson, CEO at Plixer commented below. Mike Patterson, CEO at Plixer: “Once thought to be the Coup de grâce of all other threat detection systems, SIEMs are now being recognized as nothing more than a central repository where you can spend lots of time looking for problems. Their jack of all trades approach to ingesting logs, events and other forms of meta…
News is currently breaking that two major law enforcement operations, led by the Federal Bureau of Investigation (FBI), the US Drug Enforcement Agency (DEA) and the Dutch National Police, with the support of Europol, have shut down the infrastructure of an underground criminal economy responsible for the trading of over 350,000 illicit commodities including drugs, firearms and cybercrime malware. Kyle Wilhoit, Senior Cybersecurity Threat Researcher at DomainTools commented below. Kyle Wilhoit, Senior Cybersecurity Threat Researcher at DomainTools: “Hansa and AB were two of the most prolific underground marketplaces that distributed and sold drugs, credit card numbers, and malware. The shutdown of these underground marketplaces are becoming more commonplace. The shutdown…
Jay Floyd, Head of Fraud Strategy and Solutions EMEA, ACI Worldwide, a leading global provider of real-time electronic payment, banking and fraud prevention solutions comments on the future of facial voice recognition technology. Jay Floyd, Head of Fraud Strategy and Solutions EMEA at ACI Worldwide: “Biometric authentication has been a hot topic for a while and the race to offer customers new and innovative ways of logging into their bank accounts and making payments is definitely on. “Biometric authentication offers a number of benefits: It provides a more hassle-free way to pay and in many cases, it offers higher levels of security.…
Prospective Newcastle University students being scammed into handing over details and making payments for fake courses. Seeherefor the tweet from the university’s twitter handle. Seeherefor the fake website. IAzeem Aleem, Director – Advanced Cyber Defence Practice EMEA at RSA Security offering some advice to potential victims and companies that fall victim to such attacks. Azeem Aleem, Director – Advanced Cyber Defence Practice EMEA at RSA: “Make no mistake, this is an effective scam. They’ve put in the time and effort to create a remarkably realistic website. It is well designed, well executed, and it highlights the very real danger of…
A bee hive is an industrious place of team work, communication and productivity. Worker bees communicate and work together in an intricate and finely balanced system harvesting pollen and protecting their assets to produce the highest quality and volume of honey possible. Now imagine a vulnerability in one of the entrances to the hive, and a passing wasp taking its opportunity to force entry, steal, feed and wreak havoc. Your business is its own hive of information and opportunist hackers will seek out vulnerabilities to hack your systems or data. As a bare minimum, this impact will be significant disruption…
One in three (32%) security professionals lack effective intelligence to detect and action cyber threats, according to a new survey* from Anomali, the provider of market-leading threat intelligence platforms. The results also revealed that almost a quarter (24%) believe they are at least one year behind the average threat actor, with half of this sample admitting they are trailing by two to five years. This confirms that many organisations are not adequately mitigating cyber risks, despite detection and response being cited as the top security priority by a leading research organisation this year. The survey also signals that organisations struggle to…
The online game Final Fantasy 14 has been plagued by DDoS attacks for more than a month, since its release in June, with the developer saying that the DDoS attacks targeting its North American data centre have shown no signs of stopping and are increasingly difficult to contain. Stephanie Weagle, VP at Corero Network Security commented below. A DDoS mitigation company that protects a series of gaming customers, including Jagex, against DDoS attacks. Corero would also be happy to speak to you about why DDoS attacks are so prevalent in the gaming sector, and what can be done to defeat them.…
The figures were in a survey of 500 IT decision-makers in companies with more than 100 employees and £15 million turnover, examining how businesses are preparing for the new regulation. Only 31% of respondents said they had governance sponsorship for GDPR at board level, while just 9% said their compliance departments were giving them full support. This lack of interest at the top level comes despite more than six out of ten (62%) respondents agreeing that the new regulation would affect the profitability of their business, including 19% who said the impact would be negative. “It is worrying to see…