In the first quarter of 2023, the Trellix Advanced Research Center (ARC) has unveiled a comprehensive CyberThreat Report, delivering crucial insights into the evolving global threat landscape. The st...

As we are about to charge into 2022, it’s time to ask: so what will happen next year with cybersecurity? We reached out to industry leaders and experts with diverse backgrounds to find out what is...

Conference Title: Key Cyber Security Challenges and Solutions in 2021 Date: April 08, 2021 With over 100,000+ readers, Information Security Buzz (aka ISBuzz) is a premier independent resource t...

As we are about to charge into 2021, it’s time to ask: so what will happen next year with cybersecurity? We reached out to industry leaders and experts with diverse backgrounds to find out what is...

A hacker has breached Mathway, a popular math solving application, from where they have stolen more than 25 million emails and passwords. The hack is the latest in a long line of security breaches car...

In his first UK broadcast interview in five years, Mark Zuckerberg told the BBC that Facebook had, and would, remove any content likely to result in "immediate and imminent harm" to users. This has...

A hacker has put up for sale today the details of 40 million users registered on Wishbone, a popular mobile app that lets users compare two items in a simple voting poll. The Wishbone user database h...

Japan has launched an investigation into the potential exposure of confidential missile data in the wake of a cyberattack on Mitsubishi Electric Corp. According to the Associated Press, the leak of in...

Cofence has discovered an attack that bypasses MFA to nab Microsoft 365 credentials. Researchers at Cofense Phishing Defense Center discovered the tactic, which leverages the OAuth2 framework and Ope...

Academic researchers have uncovered security vulnerabilities in Bluetooth Classic that allows attackers to spoof paired devices: They found that the bugs allow an attacker to insert a rogue device int...

BlockFi, a popular cryptocurrency lending platform, informed its customers on Tuesday that it had a “temporary” data breach, according to Finance Magnates. The breach happened on May 14 and lasted...

Today, it is announced that an 8 million user records have been sold by a hacker on a dark web marketplace after breaching data from the US-based meal kit and food delivery service known as the Home C...

A new study from LearnBonds indicates that 68% of major organisations (public and private) plan to increase their cybersecurity spending as a response to the COVID-19 pandemic, given the intersec...

As per Bleeping Computer report, the new Node.js based remote access trojan and password-stealing malware spreads via malicious emails. It pretends to be coming from the U.S. Department of the Treasur...

Caller ID spoofing represents a growing problem for organizations and individuals, with more than 13,000 people having been confirmed as victims of government impersonation attempts during 2019 alone....

easyJet confirmed that it has been a victim of data breach, where the hacker gained access to nine million customers' email addresses and travel details. Additionally, 2,208 credit-card details were...

Wide-ranging security flaws have been discovered in the coronavirus contact-tracing app being piloted in the Isle of Wight. The security researchers involved have warned the problems pose risks to u...

A group of children’s privacy advocates alleged in a recent FTC complaint that TikTok violated an agreement to protect children’s private data. The popular video-sharing app TikTok has landed in h...

A data breach for the Illinois' new system to process unemployment claims for contractors and gig workers exposed personal information for potentially thousands of people, but state officials said th...

In a recent blog post, Microsoft has announced that it will share its knowledge of coronavirus-related cyberthreats in a bid to help security teams identify and address new threats. Processing trilli...

A security researcher discovered a misconfiguration in a Git web portal belonging to Daimler AG, the German automotive company behind the Mercedes-Benz brand. The researcher was able to access, downlo...

Verizon has today published its yearly report on business data breach investigations. Key stats included: 86 percent of data breaches for financial gain - up from 71 percent in 2019 Cloud-base...

Elexon, an organisation that is central to the balancing and settlement of the UK electricity market, has been hit by a cyber-attack. Following security experts provide their insight below: https:/...

Researchers at Cequence Security today published new information about a recent surge in API attacks, a major source of vulnerability that Cequence believes businesses aren’t sufficiently protectin...

Multiple supercomputers across Europe have been infected with cryptocurrency mining malware and have shut down to investigate the intrusions, according to ZDNet. Security incidents have been reporte...

According to the Guardian members of the public have been alerted to a scam in which fraudsters use a bogus version of the UK contact-tracing app being trialed on the Isle of Wight. The Chartered Tra...

Following reports from Bleeping Computer, a 300, 000 active installation of dangerous bug has been found in Google's official WordPress plugin. Attributed to the disclosure of the proxySetupURL within...

In response to new research from ESET on the discovery of the Ramsay malware toolkit targeting air-gapped networks, Cybersecurity experts commented below....

Shadowy online marketplace, MagBo,is selling access to more than 43,000 hacked servers, some of which belong to local and state government, hospitals, and financial organizations. MagBo is a porta...

It has been reported that the UK “urgently needs” a transport cybersecurity program if it hopes to safely introduce connected and autonomous vehicles (CAVs) to the roads, according to the leader...

Following the news regarding the City Index data breach, the cybersecurity expert reacted below....

The New South Wales government has confirmed it was the target of a malicious phishing attack, after reports that a staff member from Service NSW clicked on a suspicious link from an email. According...

It has been reported that US cybersecurity agencies have outlined the top 10 most exploited software vulnerabilities across the past 4 years. The report, authored by the Department of Homeland Se...

Wired reported that sensitive documents about the UK’s Coronavirus-tracing app have been carelessly leaked via a publicly accessible Google Drive link. According to the report, the leaked roadmap o...

Outsourcing group Interserve is recovering from a cyberattack which took place over the weekend that may have seen the details of up to 100,000 people stolen. Hackers broke into a human resources dat...

Mozilla announced last week that all developers of Firefox add-ons must enable a two-factor authentication (2FA) solution for their account. https://twitter.com/Authy/status/1205549212110327809...

A large-scale and prolonged DDoS attack which caused outages in Europe and internationally for Wikipedia on Friday 6 evening into Saturday 7th September. The Wikimedia Foundation running Wikipedia sit...

Apple let the public know that it has introduced a new way to stop third-party sites and services from getting your information when you sign up for an app. According to Apple software engineering chi...

Following news that an Australian university has been hacked, affecting sensitive data going back 19 years, please find below comment from SailPoint, the identity governance experts. The comment cove...

Following the news that the Public Accounts Committee has advised that the UK government should introduce a kitemark system for electronic devices, please find comment below from Jim Phillipoff, Head...

On June 4, 2019, the CERT Coordination Centre (CERT/CC) Carnegie Mellon’s Computer Emergency Response Team released an advisory regarding discovered behaviour in the Microsoft Windows Remote Deskto...

Cybercriminals are leveraging Internet Message Access Protocol (IMAP) for password-spray attacks to compromise cloud-based accounts according to Proofpoint. Justin Jett, Director of Audit and Complia...

Professor John Walker Given it is again that time of the year when we may be giving, and/or receiving gifts, we will be mentally tuned to anticipation of a gift arriving in the post, and as such o...

According to the US-CERT, tools and techniques for exploiting networks and the data they hold are by no means the preserve of nation states or criminals on the dark web. Today, malicious tools with...

It is being reported that Facebook said an attack on its computer network led to the exposure of information from nearly 50 million of its users. The company discovered the breach earlier this wee...

With every day that goes by more IoT (Internet of Things) devices are becoming a part of our normal everyday life both at home and on the job. In recent years it has become evident that IoT devices po...

This is second video of Tulin's CyberSec Talk series. In this video, Tulin discusses the seven foundation principles of Privacy by Design. These principles are: Principle 1: Proactive and not rea...

The GDPR (General Data Protection Regulation) is designed to protect the privacy of all EU citizens and this will change the way the organizations store and use EU citizens’ data. Failure to meet th...

Microsoft has been working to issue patches in light of the large scale ransomware attack that affected some 99 countries yesterday.  Blog here: https://blogs.technet.microsoft.com/msrc/2017/05/12/c...

5G technology is the next step in the development of mobile communication. 5G will not only provide voice and data communication but also provide capabilities for new technologies such as Internet of...

According to Statista, the online dating sector in the US amounts to $1,389M in 2017. With more and more love being found online, it is important to remember that it’s not all fun and games. The exc...

A serious vulnerability is discovered in Whatsapp’s end-to-end encryption that allows allow Facebook and others to intercept and read encrypted messages. The reason for the flaw is improper encrypti...

In the presidential election, cyber security was a major issue as hacked emails reveal a host of political embarrassments and add fuel to the unprecedented political discourse in this country. One per...

Following the recent news surrounding the Yahoo! security breach, IT security experts from Kaspersky Lab and Gigya commented below. David Emm, Principal Security Researcher at Kaspersky Lab: "Yahoo!...

Cyber attacks on the U.S. will increase during President Trump’s administration The incoming U.S. administration has already stated it will take a more aggressive posture on cybersecurity. As a r...

We live in an age where mobile devices are better designed to meet the needs of an increasingly mobile workforce and the cloud provides unlimited opportunities to boost productivity and positively imp...

When asked a poorly bounded question such as “What is the biggest threat to Internet security?”, the majority of quick-fire answers can likely be represented by the flags of a handful of nation st...

Kaspersky Lab welcomes the announcement by the Indian Police (Cyber Crime Investigation Cell, CID, West Bengal) of significant progress in its investigation into a phone scam operation that is estimat...

Following the news of yet another Yahoo hack, which, this time, has leaked around one billion user accounts,  cybersecurity experts from ESET, NSFOCUS, Comparitech.com, AlienVault, Veracode, Barrac...

Following the news that Amazon has successfully completed its first Prime Air drone delivery, Colin Bull, Principal Consultant Manufacturing and Product Development at SQS commented below.  Coli...

Only a few short years ago ‘drones’ were thought to be a phenomenon dreamt up in the latest sci-fi film or the latest military surveillance tech. Who would have thought drones would soon be fillin...

The same hackers who turned out the lights at Ukrainian utilities last December have been running attacks against the same country’s banks over recent months according to ESET. Tim Erlin, Sr. Direc...

The world is still reverberating from the stunning victory of Republican candidate Donald Trump in the US Presidential election. Having started off as a joke figure and throughout the campaign been de...

Following the news that Yahoo! announced that one billion of its user accounts were hacked in 2013, IT security experts from SailPoint, VASCO Data Security, Prevalent, Inc., STEALTHbits Technologie...

Book Offers Tools and Techniques to Prevent Social Engineering-based Email Attacks SAN MATEO, Calif.  Agari, a leading cybersecurity company, today announced the release of a new book by Agari Chief...

During the presidential campaign, Donald Trump emphasised how crucial cybersecurity would be to his administration. With only weeks until Trump is inaugurated, it is time for him to deliver on his pro...

A new strain of ransomware, dubbed "Popcorn Time", is being reported with those infected being given the option to pay with a twist. Instead of paying to have their files decrypted, they are given the...

“Password Papers” Report from Wandera Uncovers Severe Data Leaks from Mobile Sites SAN FRANCISCO, CA.  Wandera, the leader in enterprise mobile security and data usage management, today announced...

Financial Losses and Human Lives through IoT attacks -  While there is a lot of talk about IoT-level attacks, 2017 will bring the seriousness of these attacks to the forefront. Not only IoT will...

It’s that time of year again. The festive season is upon us and with it, online shopping will no doubt take another bite out of traditional bricks-and-mortar sales. With a colourful new president ta...

Kentucky Fried Chicken has announced that its website has been hacked, exposing multiple accounts. The hackers who broke into the coup were not after the finger licking good chicken, but rather the r...

READING, UK. Intermedia, a leading cloud business applications provider, today released the results of its inaugural IT Confidence Index, pinpointing the biggest challenges across IT functions. Reve...

Datto, a trusted provider of total data protection solutions for businesses around the world, works with its partners to protect SMEs from ransomware attacks. As research shows that over half of UK bu...

Threat research for November 2016 reveals both Locky and Cryptowall attacks increased by 10% over the past month  UK. Check Point has revealed that the number of ransomware attacks using Locky a...

Datto, a trusted provider of total data protection solutions for businesses around the world, works with its partners to protect SMEs from ransomware attacks. As research shows that over half of UK bu...

Nearly a third never check their bill to verify correct charges and detect suspicious activity  WAKEFIELD, Mass. Research commissioned by Xura, Inc., a leading provider of secure, digital communica...

Lieberman Software Licenses its Privileged Identity Management Technology to Core Security to Build Value Added Integrations LOS ANGELES. Lieberman Software Corporation today announced a new strategi...

Cyber intelligence firm BrandProtect came up with a list of the top 5 threats to watch out for in 2017. As we move closer and closer to the new year, companies are seeing the same threats hurt thei...

Following the news that ThyssenKrupp has suffered a cyber-attack, Andrea Carcano, Founder and Chief Product Officer at Nozomi Networks commented below. Andrea Carcano, Founder and Chief Product Of...

New research reveals UK organisations overwhelmingly using unsupported IT systems ars  UK organisations are paralysed by the choice of security technologies available to them, but are failing to mai...

KFC has warned its 1.2 million Colonel's Club loyalty scheme members that their data may have been breached after its website was hacked. The fast food giant emailed customers advising them to change...

Every country’s government has its secrets. Whether it’s information on strategic military positions, to data on its citizens, there has long been a need for cyber-intelligence defences and the pr...

Cybercriminals are now offering free decryption to Popcorn Time ransomware if you infect two of your friends. Criminals are tricking people by claiming the money will go for food and shelter for those...

A Turkish hacking crew is running a DDoS-for-Points platform where participants can earn points if they carry out DDoS attacks against a list of predetermined targets, points they can exchange later o...

With the growing number of benefits the cloud can provide – greater scalability, reduced costs, easier access to applications – it’s unsurprising that more and more businesses move to the cloud...

Following the news that patients are being put at risk because most NHS trusts are still using old Windows XP systems which could enable hackers to steal patient data or take control of hospital infra...

From a number of recent surveys, it’s clear that more and more organisations are happy to accept that they will suffer a network security breach at some point and it is simply a matter of time.  Cl...

Have you changed the WiFi key on your home router? Do you even know how to? You’d be surprised how complicated this can be. Routers have their own IP address and a default password or key but how yo...

The world’s increasing interconnectivity has given rise to greater efficiency and the easier exchange of data. However, as networks become borderless and institutions freely exchange data with partn...

Following the news about the football-sized drone which has been flown 20m from a Heathrow-bound plane, Dik Vos, CEO at SQS commented below how drones pose a very real security threat to society and...

London, UK. Tripwire, Inc., a leading global provider of security and compliance solutions for enterprises and industrial organizations, today announced the results of an extensive Tripwire study con...

The Department of Homeland Security (DHS) recently issued an alert warning government agencies, network infrastructure managers and networking vendors about the more advanced techniques of cybercrimin...

Recent Mirai botnet foreshadows DDoS threats growing in size, scale and complexity in the coming year; businesses and governments to take heed due to increasing vulnerabilities in IoT Infrastructure...

Imperva Hacker Intelligence Initiative report reveals Phishing-as-a-Service campaigns cost less to execute and are twice as profitable as traditional campaigns Imperva, Inc. (NYSE:IMPV), committed to...

Three-Year Growth Rate of 138% Earns Deloitte Honor LONDON.  Varonis Systems, Inc. (NASDAQ:VRNS), a leading provider of software solutions that protect data from insider threats and cyberattacks, t...

Google last week announced a new service aimed at continuously testing open-source software projects for security vulnerabilities. Called OSS-Fuzz, it is currently available in beta for a select numb...

Facebook, Microsoft, Twitter and YouTube have teamed up to share their expertise spotting terrorism-related content, in order to crimp its spread. IT security experts from Lieberman Software, AlienVau...

During this election cycle CyberSecurity took center stage. While so much attention was focused on the “400-lb hacker” and external threats from Russia and China--the reality is that according to...

A former Expedia IT professional has admitted to illegally trading on secrets he discovered by hacking his own company's senior executives. Jonathan Ly stole passwords and infiltrated devices belo...

While we have all been enjoying a life online, an awkward truth threatens to wreck everything. It is this: a password is the same irrespective of who enters it. This means that when an organisation as...

Details of more than 85 million users of video sharing site Dailymotion have been hacked, according to Leakedsource. The breach detection company said 85.2 million usernames and email addresses and 18...

Following the news that a former Expedia IT support employee has plead guilty to using his position to access confidential data and facilitate insider trading, Rui Melo Biscaia, Director of Product Ma...

Following the news that Charter Savings Bank notified customers of potential data theft by a burglary targeting office computers, Dr Bernard Parsons, Co-founder and CEO at Becrypt commented below....

In a new blog post Dima Bekerman, security researcher at Imperva, explains how easily his Amazon account was broken into, likely as a result of him using similar passwords in different accounts—an a...

Following the recent report from IBM’s security intelligence group about the rise of cyber-attacks on VoIP Session Initiation Protocol, Angela German, Director of Marketing at VoipSec, commented...

Are you tired of your sluggish PC? The new release of AVG TuneUp now comes with a complete reboot of its patented ‘Programs-On-Demand’ technology. It puts unused programs into a smart sleep mode t...

Yasmin Mahmood, CEO of the Malaysian Digital Economic Corporation (MDEC), and Barry Roche, CEO of Protection Group International (PGI), today signed an agreement to collaborate to strengthen and deve...

One of the main challenges that I’ve heard voiced in discussions among CIOs recently involves the perceived lack of visibility into application security in the Cloud. The shift to software-defined i...

Following the news about Scottish Football Association data breach, Dr Jamie Graves, CEO at ZoneFox commented below. Dr Jamie Graves, CEO at ZoneFox:  "The Scottish Football Association (SFA...

Following the news about DDOS Attacks Against Digital Broadcasters to Worsen in 2017, Jonathan Smith, Managing Director EMEA, Limelight Networks commented below. Jonathan Smith, Managing Director EME...

Second annual international survey of information security professionals finds global confidence in ability to accurately assess cyber risk dropped 12 percentage points over 2016 COLUMBIA, Md.  Tena...

Following the news about surrounding the Snooper’s Charter, David Emm, Principal Security Researcher at Kaspersky Lab commented below. David Emm, Principal Security Researcher at Kaspersky Lab:...

Kaspersky Lab has complemented its solution to protect children against digital threats with new features for iOS and Android platforms. Now, children can remotely ask parents for access to a restrict...

In 2017, attackers will continue to exploit humans to install malware, transfer funds, and steal information, with significant changes in techniques and behavior across the three main vectors that tar...

IFINSEC Financial Sector IT Security Conference and Exhibition  will be held on 14-15 November 2017 in Istanbul, Turkey. IFINSEC is a global, niche and dedicated conference focusing on IT Security te...

Avalanche's botnet infrastructure has been used to distribute plenty of computer viruses, from online banking Trojans to infamous Crypt0L0cker ransomware virus. As a part of international investigatio...

BBC broke the news that thousands of TalkTalk and Post Office customers had their internet access cut by an attack on certain routers.IT security experts from NSFOCUS, Synopsys, Tenable Network Secu...

Researchers have found that hackers have revived an old banking scam known as Operation Elemental and have now added a new twist that allows hackers to lock and reset phone passwords. It also offers a...

In a Dutch programme set to screened, it has been revealed that 700-pages of secret intelligence documents were stored and viewable on a hard drive that was linked to the web.  The disk was able to b...

In many ways, fighting cybercrime is a lot like playing “Whack-A-Mole,” the ever popular arcade game. For every threat that is discovered and dealt with, a new one — or several new threats �...

Following the breaking news that 65 million passwords and emails have been advertised for sale online since the major security breach at Tumblr, three years ago. Paul Trulove, VP of product managemen...

Explosion in ransomware drives all-time high in malicious domain creation Infoblox Inc. (NYSE:BLOX), the network control company, today released the Infoblox DNS Threat Index for the first quarter of...

The Internet of Things (IoT) industry must establish a common set of security standards of which to adhere, according to Oscar Arean, technical operations manager at disaster recovery provider Dat...

Biometric technologies that use a person’s fingerprints, voice, heartbeat or even gait (the way we walk) as methods of authentication have attracted a lot of attention here in the UK for some ti...

Today’s threat landscape is in many ways very different from ten years ago. The growth of smartphones combined with pervasive internet, Bring Your Own Device (BYOD) and Application (BYOA) initia...

As anxiety-inducing as it may sound, you need to run your business under the assumption that a horrifying disaster could strike at any moment. In a perfect world, there would be no reason to fear a da...

Smartphones can be compromised when charged using a standard USB connection connected to a computer, Kaspersky Lab experts have discovered in a proof-of-concept experiment. The researchers are now...

ESET finds Ireland among the top countries affected by new Danger.Script malware. ESET LiveGrid® telemetry shows a spike in detections of the JS/Danger.ScriptAttachment malware in several European...

FACC, an Austrian-based manufacturer of airplane parts, has fired its CEO, Walter Stephan, after he fell victim to an email scam that defrauded the company of €52.8 million ($56.79 million). Ryan Ka...

Research into the proliferation of fraudulent domains affecting the cybersecurity industry by web security experts High-Tech Bridge has uncovered some startling results, with a string of household nam...

Are you contemplating ISO 27001 implementation but concerned about the time and management resources that will be needed? Many modern businesses operate in a lean and agile way and this is ofte...

When Europe’s highest court declared the Safe Harbor agreement invalid in October 2015, you could almost hear the collective gasp from U.S. companies conducting business in the European Union. U...

Necessity is the mother of invention, and with new breaches reported on a near-daily basis, the evolutionary arms race between hackers and cyber-defenders has led to the rapid disruption of the tr...

Should be “Shot at sunrise” is the opinion of U.S. politician Michael C.Burgess, the representative for Texas, when talking about the cybercriminals who distribute ransomware that victimizes consu...

As the workforce becomes more mobile and more critical enterprise applications are hosted in the cloud, identity and access management (IAM) grows increasingly important to help assure secure remo...

On 8-9 September, OASIS will host Borderless Cyber Europe 2016 at the European Commission Headquarters in Brussels, Belgium. The excitement for this year's event has been growing since OASIS fi...

Without commenting on the geopolitical aspects of this, this is another demonstration of the need for international cooperation against cybercriminals and attacks like this. The financial community kn...

Following the huge debacle related to the LinkedIn data breach that came to light last week, Microsoft's Identity Protection team has decided to ban the usage of common or simple passwordsthat may be...

With cyber security expected to top $101 billion by 2018, the tendency for data centre managers to focus on updating cyber security practices is understandable, especially as technology and threats ar...

News has surfaced that the US nuclear weapons force in the Pentagon is still relying on 1970s technology, including floppy disks and an IBM Series-1 computer. A spokesperson from the Pentagon said th...

ESET LiveGrid® telemetry shows a spike in detections of the JS/Danger.ScriptAttachment malware in several European countries. The most notable detection ratios are seen in Luxembourg (67%), Czech Rep...

China will soon launch the world’s first quantum communication satellite in space, when the rocket takes off in July. The satellite is specifically developed to help securely send and receive data b...

In light of the revelation that the US military uses 8-inch floppy disks to coordinate nuclear force operations, Cris Thomas, Strategist at Tenable Network Security commented below. Cris Thomas,...

Banks could block customers from claiming money back if they are a victim of fraud and it is found they had substandard online security. Following this news, IT security experts from Lieberman Softwa...

Running behind trendy APTs we tend to forget about common-sense approach and holistic risk assessment. Almost 3 terabytes of data stolen in the Panama Gate scandal will shortly become searcha...

University of Exeter experts will collect large amounts of propaganda put on the internet by Islamic State terrorists in real time to understand how it radicalises people. The group is well-known f...

Security Breaches, Poor Password Habits and Frustrating Customer Experiences Drive Businesses to Prepare for the Death of the Password Gigya, the leader in Customer Identity Management, today valid...

NHS bosses have been told to overhaul their computer technology, staff training and corporate governance before two reports on data security are published. The NHS has a poor record on data security....

The FBI has warned private industry partners of highly stealthy keystroke loggers that find passwords and other input typed into wireless keyboards. Lane Thames, Software Development Engineer and Se...

The Guardian is reporting:  Members of an international crime syndicate are suspected of stealing more than 1.4bn yen (US$12.7m) from cash machines in Japan in the space of less than three hours,...

Following reports that Instagram holes have left accounts open to hijack, Tod Beardsley, Security Research Manager at Rapid7 commented below. Tod Beardsley, Security Research Manager at Rapid7:...

Introduction One of the Oracle Database Listener features for protecting your Oracle databases from malicious attacks from unauthorized locations is by implementing the Valid Node Checking (VNC) feat...

Mobile Application Security still has a long way to go, especially when you look at the Hewlett Packard Enterprise (HPE) study, saying that when 36,000 apps passed through 10 privacy checks, 96% of th...

Internet security expert McAfee has unveiled a new security hub - the “Ultimate Guide to Security Threats” - as part of a campaign to educate the general public about the increasing danger to...

An increasingly diverse range of connected objects has joined the Internet of Things (IoT) in recent years. Whilst the IoT was once primarily the province of consumer gadgets and wearables, it now...

According to a recent survey, 65 percent of respondents indicated that they believed their organization would experience a security breach at some point in the future. While this percentage may, or ma...

Following the news of an Anonymous hacker gaining access to Turksih citizens’ hospital information, David Emm, Principal Security Researcher at Kaspersky Lab commented on this news below. Dav...

Following the news that hackers are targeting the US presidential campaigns, IT security experts from Tripwire provide insight into the motivations of the attacks and what we can expect in the run up...

With the submission period for faster payment solution proposals having recently come to a close, the Federal Reserve’s Faster Payments Task Force will soon face the onerous task of reviewing th...

With the news of the Pavlok wristband which conditions wearers into good behaviour by using shock therapy, Liviu Itoafa, security researcher at Kaspersky Lab responded below. Liviu Itoafa, se...

The news headlines are increasingly filled with news of cyber attacks hitting organisations, as they become more prevalent and sophisticated.  It is therefore of no surprise to hear that the UK Gover...

Merging worlds The merging of the organic and digital worlds is undoubtedly gathering pace. As humans, we ourselves are now huge consumers of technology, which has led to patience being a virtue fo...

Interact IoT, the first ever Internet of Things bank platform, launched today by Intelligent Environments Smart devices such as Nest Thermostat and the Pavlok wearable device can now be connect...

The reports of further LinkedIn user’s passwords being sold online, following a hack four years ago, demonstrates the need for businesses to consider security procedures before a data breach forces...

Researchers at Forcepoint have discovered an email campaign distributing double zipped files with Windows Script Files (WSFs) inside which, when executed, download the Cerber crypto-ransomware. Ce...

Anonymous have launched a cyber attack against government portals in North Carolina to protest the “bathroom bill”. In response to this news, security experts from Tripwire and Imperva commented...

Security expert Ben Johnson from Carbon Black commented below on the reports about Furtim - a new strain of ‘paranoid’ malware that is taking extreme pains to avoid detection – least of which be...

Recently, the Defending Law Firms from Cyber Attack Conference saw experts from the fields of government, law and cybersecurity present their views on the rising threats in cybersecurity and offer v...

Cybersecurity experts from Network Box USA, Proficio and Securonix commented on news that a 2012 breach of LinkedIn member information was much larger than originally reported, and that the data is av...

Ever imagined on owning a car that can drive by itself; that not just determines the fastest route for you through its navigation system, but also finds the most fuel efficient one; that automatic...

Step-by-step guide for smaller and mid-size companies Introducing an incredible new book and the only resource you’ll ever need to implement an ISMS: Secure & Simple: A Small...

How will this speed up or increase detection of cybercrime? Although the details are scarce in the original press release, IBM applies Watson to other areas of science as a kind of knowledge base....

A new list of the biggest business disasters of the last 12 months contains plenty of the unexpected, as well as some surprise entries that demonstrate that serious business disruptions can come from...

For many moms and dads, getting used to online security this isn’t easy. One of the trickiest aspects is figuring out what to do with online safety as the years go by – what’s appropriate for to...

A Russian-speaking Skimer group forces ATMs to assist them in stealing users money. Discovered in 2009, Skimer was the first malicious program to target ATMs. Seven years later, cybercriminals ar...

70% of UK businesses faced a data breach in the past year; 11% dealt with more than 10 attacks Over half say human error is a major contributor to security risks CompTIA to launch CyberSecur...

Study Shows Legacy Decisions, Technology and Perceptions Are Impacting Innovation and Business Performance Brocade (NASDAQ: BRCD) launched the results of its latest global study ‘Unlocking the Powe...

Each year in Monterey, California, the Pebble Beach Concours d’Elegance, the most prestigious classic car show in the world takes place. While most are beautiful and desirable as well as valuabl...

New course and certification bundle to accelerate opportunities for advanced Linux learning among career technologists The Linux Foundation, the nonprofit advancing professional open source manage...

Of all information security threats, the ‘insider’ security threat usually isn’t the image that people’s minds go to first. Angry young men in darkened bedrooms, perhaps. Or offices full of re...

Researchers have found some serious flaws in 7-Zip, an open source compression tool which is used in many products including antiviruses and security appliances. 7-Zip is known for its high compressio...

The 6th annual "Ponemon Institute Benchmark Study on Privacy & Security of Healthcare Data" reflects the sector's escalating security issues as a primary target for malicious actors.  The study f...

A paradigm shift In recent years there has been a significant shift in an employee’s technology preferences at work, in part shaped by how they are using technology in their personal lives an...

Industry leader evaluates confidence in seven key security controls required to detect cyber attacks on endpoints Tripwire, Inc., a leading global provider of endpoint detection and response, securit...

Following the discovery of a critical zero-day vulnerability in Adobe's Flash Player which is being actively exploited in real-world attacks to infect unsuspecting internet users with malware, exper...

Dear Editor, It is not surprising to hear that another business has suffered the fate of a data breach, and unfortunately, at the point when a business discovers it has been compromised, the damage...

Malvertising campaign has hit the popular celebrity gossip website, PerezHilton.com, potentially affecting millions of users. Here to comment on this news is Dr Malcolm Murphy, systems engineering ma...

All of the top 10 apps fail to use secure data storage to protect Personally Identifiable Information All of the top apps contain at least 5 weaknesses of the 28 in total tested All of the a...

ManageEngine Releases Results of Global Active Directory and Windows Server Security - Trends and Practices Survey, 2016 IT admins report heightened interest in visibility: configurations, settin...

Today, Wendy’s announced that malicious software affected POS devices in around 300 of the company’s 5,500 franchised stores, about 5% of all company restaurants. Tod Beardsley, Security Research...

Following a security breach like the recent ‘Kiddicare.com’ hack, the security impact of such exposure isn’t limited to an individual’s personal details; it can also have serious financial and...

Government research into cyber breaches has found that two thirds of large UK businesses were hit by a cyber breach or attack in the past year. The Cyber Security Breaches Survey (2016) urges Brit...

The world is not ready for cyber-attacks on critical infrastructure.  Governments are not ready, law enforcement isn’t ready, the facilities themselves are not ready, and the people who design,...

Following the government’s new Cybersecurity Breaches Survey revealing how unprepared most UK businesses are for cyber attacks, cyber security expert Jens Puhle commented on this news below....

Our increasing dependence on technology and web-based communication has opened the door for cyber security threats. Cyber criminals are on the increase, and energy and utility companies are high v...

In light of the news today that Google has suffered a data breach via a third party benefits provider, Barry Scott, CTO, EMEA Centrify commented below. Barry Scott, CTO, EMEA Centrify: "Whilst t...

Organisations are acutely aware that the risks to their online services and data today are greater than ever – and growing fast. According to the 2015 Information Security Breaches Survey, 90% of la...

Phishing attacks have cost US companies somewhere between £508m and £1.43bn over the past two years, as clear a signal as any that email scams are to be taken seriously. While perhaps the most famil...

British retailer Kiddicare has suffered a data breach in which the personal details of nearly 800,000 customers have been stolen. The company said that the data had been taken from a version of its we...

Many of history’s online security breaches can be traced back to human error. All it takes is one wrong click before you realize that email contained a well of trouble, and the repercussions are jus...

White hat hackers have managed to break into the infamous Locky ransomware and replace the malware payload with a plain-text message that reads ‘Stupid Locky’. Richard Beck, Head of Cyber Secu...

A proof of concept worm demonstrated at BlackHat Asia shows that the programmable logic controller (PLC) worm could be a disaster for power plants and other utilities. David Meltzer, Chief Research O...

The issue of government access to private encrypted data has been in the public eye since the San Bernardino shootings in December, 2015. When an iPhone was found the FBI requested that Apple write co...

One of the biggest cyber attacks ever has left millions of email users at risk from being hacked. 272 million email accounts have been compromised, with Russian hackers obtaining user names and passw...

Ransomware has overtaken news about APT attacks to become the main topic of the quarter. According to Kaspersky Lab’s Q1 malware report, the company’s experts detected 2,900 new malware modificati...

In light of Google being given access to NHS data, David Emm, principal security researcher at Kaspersky Lab commented below. David Emm, principal security researcher at Kaspersky Lab: The n...

Forcepoint Security Labs Special Investigations team has discovered and documented a global botnet affecting thousands of victims - we call this investigation "JAKU". What is JAKU? JAKU is the...

Another day, another hospital shut down by ransomware. And while going back to pen and paper and avoiding anything connected to the web may start to sound like a valid option, it’s not a realistic o...

Recently, the Check Point research team had the opportunity to analyze a mobile banker malware attack from end-to-end. Our team managed to lay hands on the infiltration vector, the malware itself, and...

A report from a University of Michigan & Microsoft research team demonstrates how Samsung's SmartThings platform may be especially vulnerable to hackers. Security experts from Rapid7, prpl Foundat...

Young bounty hunter discovered a security vulnerability in Instagram, which allowed him to delete account information, Paul Farrington, Senior Solution Architect at Veracode explore the value of boun...

Researchers at the University of Michigan have discovered several security flaws in Samsung’s SmartThings Internet of Things consumer platform, allowing them to hack into the platform's automation s...

The way Dido Harding has been held to account in the wake of the TalkTalk data breach – which is reported to have cost the company up to £80 million and 100,000 customers -  has shown just...

Maisto, a miniature car maker has had its website infected by malware and it is believed hackers injected it directly to the homepage through an outdated Joomla content management system. The website...

In a development to the news of a huge data breach at Qatar National Bank, which leaked 1.4GB of internal documents, Reuters reports that several known Qatari figures in the government and media whose...

Following the news that a water and electricity authority in the US State of Michigan has needed a week to recover from a ransomware attack, Itsik Mantin, director of security research at Imperva and...

Brocade today published new research conducted with independent research house Vanson Bourne looking into why and how smart organizations are maximising application performance in 2016. The full repor...

“Keep Calm and Carry On” seems a fitting theme for the finally-published General Data Protection Regulation (GDPR) - a new European wide legislation which is designed to give individuals gre...

Outbound Attack Simulator Uncovers80 Percent of Web Gateway Solutions Miss 80 Percent of Malicious Outbound Communication Seculert, the leader in attack detection and analytics, today announced new f...

Violation of our ‘personal space’ while online is a huge concern. However, the Waze exploit is only a small issue part of a much wider concern – being tracked online. According to the ‘Are y...

In response to research by Kaspersky which states that ATMs can easily be hacked by cyber criminals, Mark James, Security Specialist at ESET commented below: Why are many banks still using old mode...

You surely don’t need us to tell you that business email compromise (BEC) attacks are on the rise. But are you aware of how dramatic the increase has been? The FBI released an alert on April 4�...

As companies introduce more advanced back-up measures, employees appear to be becoming increasingly casual about saving documents, confident they can call on IT to help them retrieve missing data....

A new Android malware family is infecting smartphones through SMS phishing. To infect the potential victims, the malicious actors send them SMS texts containing links. 300 samples of the malware have...

A flaw has been discovered in the Google maps app Waze, which allowed hackers to track a reporter for days. Paul Farrington, senior solution architect, Veracode commented on this news below. Pa...

Game of Thrones fans may have been infected by ransomware while watching the season six premier last weekend. Malvertisers served the dangerous malware through Magnitude exploit kit after they bought...

In response to the Tumbler and Myspace breach news, security experts from InfoArmor, Lastline and Balabit commented below. Andrew Komarov, Chief Intelligence Officer, InfoArmor: We have access t...

Ed Rowley, engineer, Proofpoint: “The Verizon report echoes similar findings to those just released in Proofpoint’s Human Factor report – everybody clicks, and attackers know this. This is...

Following the news that Swift, the global financial network, has warned its customers it is aware of “a number of recent cyber incidents” where attackers had sent fraudulent messages over its sy...

Organisations are acutely aware that the risks to their online services and data today are greater than ever – and growing fast. According to the 2015 Information Security Breaches Survey, 90% o...

Spotify has denied it has been hacked, after the credentials of hundreds of users of the streaming service, including emails, usernames and passwords, are understood to have been posted to Pastebin. M...

Dating website BeautifulPeople.com has allegedly been hacked, and the names, addresses, phone numbers and even private messages of 1.1 million members have been leaked online. Here to comment on this...

Private Microsoft® Windows® users patching their operating systems more diligently – but the same cannot be said of Apple® QuickTime® and Oracle® Java® users. Flexera Software, the le...

University of California - Santa Barbara researchers discovered a vulnerability in Waze, the popular directions app, that allows hackers to track drivers. The research raises interesting themes aroun...

Cybercriminals are continuing to exploit human nature as they rely on familiar attack patterns such as phishing, and increase their reliance on ransomware, finds the Verizon 2016 Data Breach Investiga...

Over ten thousand banks and financial institutions are being urged to remain vigilant after the secure Swift (Society for Worldwide Interbank Financial Telecommunication) system – used to send messa...

SWIFT - the global financial network through which banks transfer billions of dollars every day - is warning approx. 11,000 financial institutions of ‘a number of recent cyber incidents’ where att...

IBTimes are reporting that 1.4GB of internal documents, files and sensitive financial data from the Qatar National Bank (QNB) has been leaked online. This contains hundreds of thousands of records inc...

Security researchers discovered seven security vulnerabilities with Facebook’s corporate tools, including a file transfer service, which gave them access to hundreds of the social network’s emplo...

Smart cities are vulnerable to hacking according to field tests by researchers from Kaspersky Lab on the streets of Moscow. Here to comment on this news is Richard Kirk, SVP at AlienVault. Richard Ki...

As the line between the virtual and real criminal world grows ever murkier, it’s not surprising online bank robbers are using the anonymity afforded by cyberspace to infiltrate the real world an...

The new Android Security Report shows that 29% of Active Devices are not up to date and therefore are vulnerable to malware. IT security experts from Proofpoint, ESET, MWR Infosecurity and Tripwire p...

Criminal group FIN6, which targets Point of Sale systems has managed to steal data on over 20 million credit cards in one singular attack, which, when sold through its card shops, pocketed the group o...

Consumers are connecting more devices to the Internet than ever before.  Experts forecast that up to 200 billion “smart” devices may be connected globally by 2020.  With such growth in the Inter...

A database reportedly containing roughly 93.4 million Mexican voter registration records was discovered on an Amazon cloud server without any password protection and includes everything from home addr...

For those already familiar with the function of a proxy server, there’s a good chance that the mere mention of them brings up images ranging from, that of your friendly network engineer to those of...

EY launched its 2016 Global Fraud Study and the findings reveal that boards could do significantly more to protect their companies from fraud and corruption. Surveying nearly 3,000 senior business...

Check Point threat research for March 2016 shows mobile malware attacks moving up the index of most prevalent families attacking corporate networks and devices  Check Point announced the most preval...

2016 Trustwave Global Security Report Details Methods Cybercrime Organizations Use to Maximize Profits from Malicious Attacks Trustwave® today released the 2016 Trustwave Global Security Report wh...

As IT systems become entrenched in almost every aspect of every business (yes, I know you have a friend of a friend who does fine carpentry and takes orders on paper… but I’ll bet even he relies o...

Distributed-denial-of-service (DDoS) attacks are more frequent today than they’ve ever been, according to the latest report by Verisign.  In the final quarter of 2015, DDoS attacks globally ros...

EMV (Europay, MasterCard and Visa) credit and debit cards have finally seen widespread adoption in the USA, at least on the consumer side, with 70% of people now owning one. America is still in the tr...

Protecting a business from natural disasters and unwanted trespassers will probably come as second nature. But in the age of a digital revolution, protecting data from cyber intrusion, human error...

In an attempt to explore security issues in smart city transport infrastructure and give recommendations on how to address them, a Kaspersky Lab Global Research & Analysis Team (GReAT) expert has...

Only a week after hitting the headlines, the ‘Panama Papers’ scandal has already been established as the biggest data leak in history. In terms of scale, the 2.6 terabytes of stolen data eclip...

IBM has discovered a new piece of malware that has stolen $4 million from more than 24 American and Canadian banks in just a few days. The hackers combined code from two malware types, known as Nymaim...

E-commerce revenue is constantly increasing, but the number of fraud cases, as well as the percentage of fraud in online transactions, is increasing faster still. But what types of fraud exist and—m...

According to an article in the New York Times, the FBI asked a judge to help break encryption software all the way back in 2003 – over a decade before the latest case involving Apple and the FBI....

A Chinese hacker who goes by Daishen claims he can hack the Volkswagen Toureg, Audi A6, Audi A7 and more, without an internet connection through the car’s GPS and stereo systems exploiting the flaws...

In the world of computers, viruses are not an uncommon thing to hear. Viruses are to computers what infections are to humans. Infections can make you sick and often impair you from taking part in your...

Police and prosecutors in the UK are losing sensitive evidence because it is still being shared on computer discs. The HM Crown Prosecution Service Inspectorate and HM Inspectorate of Constabulary sai...

Badlock was discovered by the Open Source Samba community and apparently underpins both Samba and Windows Server Message Block (SMB). The malware is significant, because it potentially allows privile...

ESET researchers analysed a scam campaign on Facebook that spreads a malicious browser plugin via social engineering techniques. The attack starts by luring a Facebook user into playing a video, mo...

Following the announcement that the GDPR has been ratified by the European Parliament, security experts from Micro Focus Thales and Netskope commented below. David Mount, Director Security Solut...

What could be better than sitting in your favorite café, sipping latte and browsing whatever the drama of the day is on Reddit? I’ll tell you – doing it securely! Although public Wi-Fi networks a...

Carbon Black®, a leader in Next-Generation Endpoint Security (NGES), today announced the results from its first Unified Threat Research report, which details how PowerShell, a scripting language inhe...

Every company in the UK that processes and stores customer payment information is ultimately responsible for its own compliance with regulations such as PCI-DSS (Payment Card Industry Data Security St...

New dynamic classification ensures organizations worldwide are quickly protected from socially-engineered impostor emails, also known as business email compromise (BEC) or CEO fraud Proofpoint, Inc.,...

The free online service will enable anyone to test a web server and its configuration for security and reliability based on cybersecurity industry best-practices. High-Tech Bridge, an award-winning...

Business and government leaders grapple daily with innovation’s double-edged sword: as new technologies introduce unprecedented levels of efficiency, speed, and capability to the world, a new wave o...

Following the news that an SQL injection has been discovered on one of the corporate systems of the Panamanian lawyers who leaked the Panama papers, Paul Farrington, senior solution architect at Ver...

An unidentified programmer with twitter handle leostone produce a tool that can generate the password used to decrypt a Petya encrypted computer. This is good news for Petya ransomware victims who ca...

Internet browser, Mozilla FireFox, has 2,000 or more security holes that can lead to your Windows PC or Mac being infected with malware. Worse, the malware lets hackers take over your PC or Mac. Tim E...

Philippines suffering its worst government data breach barely a month before its general election, here to comment on this news is security expert Jason Andrew, GM & VP at BMC Software . Jaso...

Unlike physical biometrics, behaviour biometrics is the field of study to uniquely identify the individual based on his or her behavioural trait. Example of behavioural biometrics are speech patterns,...

Instant messaging service Whatsapp has now announced that it will use end-to-end encryption to scramble all users' communications and ensure they can only be decrypted by the recipient's device. This...

Today, Rapid7 is disclosing a vulnerability discovered by James “egyp7" Lee of Rapid7 that affects ExaGrid storage devices running firmware prior to version 4.8 P26. James discovered that an atta...

The AP has reported that a laptop and portable hard drives stolen from the US Office of Child Support Enforcement may contain millions of kids' names and social security numbers. The agency oversees...

Security expert, Paul Farrington commented here on the news that the National Childbirth Trust (NCT) has been hit by a data breach, Paul Farrington, Senior Solution Architect at Veracode: "...

Code-sharing site GitHub has suffered a major service outage, but the cause is still unknown. Security expert Travis Smith commented below. Travis Smith, Senior Security Research Engineer at Tripwi...

Malware continues to become a growing and increasingly costly risk to mobile users today, with one in every 30 mobile browsing transactions, and one in every seven mobile app sessions proving to be po...

According to a Service Max survey, 75 per cent of people typically call out a field service technician because the product has broken, not for maintenance purposes. What this means for field service p...

The Register reported that Mattel had been hit by a ‘well-crafted' phishing scam that almost cost the company $3m. Here to comment on this news is Richard Beck, Head of Cyber Security at QA, which...

To work on the Incapsula team at Imperva is to be exposed to DDoS attacks all of the time. From watching 100 Gbps assaults making waves on computer screens around the office, to having our inboxes bom...

In advance of the introduction of the General Data Protection Regulation (GDPR), bringing stricter EU data protection rules, now’s the perfect time to familiarise yourself with how to ensure that yo...

The Panama Papers, a collection of 11.5 million files leaked from Panama-based law firm Mossack Fonseca, have gone live online. The documents show in blistering detail just how exactly the world’s...

Security researchers and hackers are caught up in an endless game of cat and mouse, with threats constantly evolving to thwart even the most stalwart of defences.  Traditional methods of combatting n...

Dear Editor, The Panama Papers leak may have been the work of an insider or an external hacker; news reported suggests it could have been an external hacker. But in either case, this massive leak r...

Yesterday, the AP broke a disturbing story about a hacktivist who made public the personal data of almost 50 million Turkish citizens, lifting the information from a government database. The hacker al...

Never before has Mac OS X been as heavily targeted by cybercriminals as now. Whereas infections like browser hijackers and ad-serving malware aren’t newcomers on the Mac arena, crypto ransomware app...

Lieberman Software Survey Reveals Privileged Credential Security Threats Are Prevalent   Results revealed today from a survey carried out by cyber security vendor Lieberman Software Corporation foun...

The threat landscape in 2016 is almost completely unrecognisable from that of ten years ago. Today’s landscape is populated by actors who are well resourced, highly determined and increasingly sophi...

Late yesterday (4th April), banking industry sources reported to KrebsOnSecurity that the Trump Hotel Collection appears to be dealing with another breach of its credit card systems. According...

The US Department of Homeland Security and the Canadian Cyber Incident Response Centre have just issued (late Thursday) a joint alert following a surge in ransomware extortion attacks, including hosp...

AceDeciever is a new malware discovered by researchers that is able to embark on Fairplay Man-in the middle attacks when users purchase an application from the iTunes stores. Here to comment in this n...

Researchers have turned up more than 1,400 vulnerabilities in a widespread medical product dispensing cabinet system from CareFusion, because old units are still running Windows XP. IT Security Exp...

In the last couple of days, some reports surfaced which linked some ransomware infections with TeamViewer.  We strongly condemn any criminal activity, however, we can emphasize two aspects: (1) Up...

That the CMS Wordpress is a common choice in blog platforms everybody knows, but what we see is that this use most of the time is implemented with no security countermeasures (according to the OWASP T...

Global law firm Mossack Fonseca has suffered a data breach of more than 11.5 million sensitive emails and documents. The company said that it has opened a full investigation and has confirmed that t...

 The rapid development of drone technology and growing awareness of their potential threat has lead to a burgeoning drone detection market. Technology providers offer reliable detection mechanisms, b...

Kaspersky Lab today announces a new application for iOS called AdCleaner – a free extension for Safari that automatically blocks advertising banners, links and popup windows in web pages opened by t...

SportPursuit being hit by hackers over the Easter weekend and potentially losing customers' bank card details. Here to comment on this news is security expert Jason Andrew, GM & VP at BMC Softwa...

Linux/Remaiten combines capabilities of two previous versions of bots and adds a unique spreading mechanism able to infect embedded devices. ESET researchers have spotted a new and improved version o...

FBI has found a way to unlock the iPhone of the San Bernardino gunman without Apple’s help.  As this development confirms there is a vulnerability “in the wild” that Apple does not know about,...

Over two-thirds of companies prefer to bank with a provider who has a solid security reputation, according to a Kaspersky Lab survey. Those banks that make security a priority and take every effort to...

De La Rue, the company that prints the British passports and banknotes, has announced it is hoping to create new digital passports that can be used at immigration, reports the Daily Mail. IT securi...

In a new twist to the FBI vs. Apple story, Apple has announced they will be handing over encryption key management to its users, making it more difficult for Government agencies to access iCloud data....

Notes from the Battlefield: Cybercriminals vs. Business Travelers and How to Keep Your Data Safe It used to be that a business trip was just a business trip, complete with pay-per-view TV in bed,...

The kerfuffle over naming of vulnerabilities like Badlock and ShellShock misses the mark on why this is a good thing for the industry. Given the sheer volume and scale of the application security prob...

Businesses are facing substantial risks to their finances and data as cyber criminals use information from social media and company websites to target employees in sensitive roles, according to new re...

Major web browsers are to consider blocking the cryptographic hash function Secure Hash Algorithm (SHA)-1 from as early as June this year as it becomes increasingly vulnerable to forgery attacks. In l...

MedStar Health, the largest healthcare provider in Maryland and Washington, D.C., was forced to disable its network after an alleged ransomware attack infected several systems. Here to comment on this...

Hackers were able to infiltrate an ICS/SCADA system at a water treatment plant and altered crucial settings that controlled the amount of chemicals used to treat tap water according to Verizon’s 201...

USB Thief, a new threat to data, is capable of stealthy attacks against air-gapped systems and also well protected against detection and reverse-engineering. ESET researchers have discovered a new d...

Following the news that Google has published a list of certificate authorities that it doesn’t trust, Brian Spector, CEO at MIRACL, comments: “The fact that Google needs to keep a log of all th...

A new ransomware program written in Windows PowerShell is being used in attacks against enterprises, including health care organizations, Network World is reporting today. The new ransomware program,...

In an episode of the TV show “Sherlock,” a pair of bad guys die in a crash after a hacker takes complete control of their car. In an episode of “Homeland,” the vice president is assassinated w...

The world has been talking about “mobile payments” for years, but the phrase means different things to different people. So what exactly are mobile payments? And how much more mobile than cash or...

Following the news that an ex-Ofcom employee has stolen and shared confidential company data with his new employer, here to comment on this news is Christine Andrews, Managing Director of DQM GRC, wh...

I clearly remember the first time I saw a computer. Someone was playing a video game called Demo Rush 3 at a church. I remember staring at him, not understanding what he was doing. I couldn't help but...

Tripwire, Inc., a leading global provider of endpoint protection and response, security and compliance and IT operations solutions, today announced the results of an extensive study conducted by Dimen...

Robert Hannigan, head of UK’s GCHQ, is reported to be seeking practical cooperation from the technology industry on how to balance the strong encryption that protects individuals’ privacy, with...

According to a report cited by Bank Info Security publisher ISMG and in comments made directly to the WSJ,the FBI is reporting that ransomware is surging.  Here to comment on this news is security...

It doesn’t matter what industry you are in: passwords are going to be a major player in daily lives no matter where you are.  Despite the famous 2004 prediction that the password is dead, it’s st...

Data breaches are expensive. Gross costs stemming from Target’s infamous 2013 breach totaled $252 million. And the Ponemon Institute’s annual Cost of a Data Breach survey saw the cost for each com...

Microsoft has updated their Certificate Trust List (CTL) after the private key for xboxlive.com was leaked to the Web. The company didn't explain how the leak happened, but the exposed certificates w...

You’d be forgiven for wondering where to start when it comes to IT security in this brave new world of the cloud, mobility and the internet of things. Sadly neither barbed wire nor your very own...

Microsoft has warned a U.S. appeals court that if it is forced to hand over emails stored on a server in Ireland, Internet user privacy worldwide would be demolished in a “global free-for-all.”...

LockerPIN sets or changes the device’s PIN lock, unbeknownst to the user as it locks the screen and demands a $500 ransom. Researchers from ESET, a global leader in IT security for more than two...

2015 has seen some of the most crippling data breaches in history. In February, health insurance provider Anthem revealed a data breach thatcompromised 80 million records of both patients and employee...

There has been a great deal of growth in the identity and access management (IAM) industry recently, and the trend is predicted to remain steady for the foreseeable future. This has led many news outl...

Dear IT security specialists, We present you with a unique opportunity to take part in an international survey on cybersecurity. The best experts in the field are invited to share their expertise...

Today, Information Security Buzz launches its specialized job board (www.isbuzz.jobs) for information security industry. You can access the site here. ISbuzz.jobs is a site that connects employe...

The strength of passwords as an authentication control is more important than ever before. Cyber-criminals are increasingly using automated password cracking tools to identify passwords in a matter of...

Your smartphone contains information about everything in your personal and professional life. This means that protecting the information that may be on your phone is paramount, especially in this day...

Netwrix investigates three recent security breaches to help the IT community avoid pitfalls in protecting customer financial data The unprecedented number of data breaches over the last year has in...

In the spirit of The Washington Post’s regular column, “5 Myths,” here is “a challenge to everything you think you know” about Threat Intelligence. You may already know that cyber threat...

Proficio Inc. introduced ProSOC Express, providing mid-sized businesses 24x7 enterprise-class security monitoring and alerting services.The cloud-based security services leader is including the same a...

Security industry experts are beginning to react to today’s news of the massive data breach at the U.S. Office of Personnel Management. Here are some initial comments - Mark Bower, Global Directo...

At InfoSecurity (2-4 June) ManageEngine director of product management Rajesh Ganesan is discussing India’s meteoric rise as a global technology hub and explaining how his firm has gained an intern...

Our Global Encryption and Key Management Trends report is now in its tenth year, providing an annual ‘pulse check’ on enterprise approach to and deployment of encryption techniques. The picture ac...

Last week, I attended keynotes and sessions at the RSA conference hosted at the Moscone Center in San Francisco, taking notes as furiously as possible and sprinting back and forth between rooms - leav...

The proliferation of Bring Your Own Device (BYOD) within the modern business environment was as much a matter of timing as anything else. The growth in employee owned devices dovetailed with the globa...

Centrify Privilege Service Addresses Today’s Hybrid IT Environments of On-Premises and Cloud-based Systems as the Most Comprehensive Privileged Identity Solution on the Market  Centrify Corporatio...

Recently, Obama issued an executive order that places economic sanctions on individuals or group cyber attackers that aim to threaten US national security or economic activity. The order comes on the...

Márton Illé, security evangelist for BalaBit IT Security, reviewed the new 2015 Verizon Data Breach Investigations Report and made the following observations. Márton Illé, security evang...

CIO’s today are faced with a dilemma. On one hand more and more data is moving to the cloud. Increasing numbers of corporate users are demanding better ways to access, store, manage and share their...

European organisations have an average of 511 cloud apps; an average which rises to 730 at a global level Compromised credentials continue to haunt cloud app usage: 13.6 percent of enterprise user...

Tech Data to Offer the NCP Secure Entry VPN Clients to its SMB Market Segment MOUNTAIN VIEW, Calif. (April 15, 2015) —NCP engineering, security technology market leader, and Tech Data, one of the w...

The Roer Group is now accepting students for its Security Culture Summer Camp 2015! Kai Roer leads this summer program. Roer has been in the information security community since 1994. He has based...

The Trojan Dyre (also known as Dyreza) has been around for quite awhile now, terrorizing the banking industry, stealing passwords and enabling malicious hackers to make off with money stolen directly...

Netwrix strengthens internal security and eliminates privilege abuse with reporting on who has access to what 1 April 2015: Netwrix has announced the release of its Netwrix Effective Permissions Re...

Today, Tuesday, 31st March  is World Backup Day, and a great time to duplicate any files and folders that may have been forgotten to a dependable place. For businesses, it’s even more important th...

Enter the cloud, and exit your data. Since the introduction of BYOD and ‘the cloud’, your data has been on the move – whether you realize it or not. Emails are read on iPhones, proposals ar...

It’s tax time and the IRS is ready to receive your small business’ information from the past year. Can you guess who else is waiting for you to file, probably even more eagerly than the federal an...

Retail security experts from Lieberman Software and HP Security Voltage commented late today on the news of Target agreeing to pay $10 million to settle the class action lawsuit from their 2013 data b...

These days we all use 'password' to conceal our personal data but how do know if our passwords are strong. Watch this animation and create the perfect password....

Mobile apps that take on the work of online banks need also take on the responsibility of security. This could be seen in the recent Slate article detailing the hack of a web developer’s account wit...

‘It’s elementary!  You are looking in the wrong direction!’ Were Sherlock Holmes engaged to look into the epidemic of data breaches, his first admonition might be reprised from The Hound of...

Security experts from Lancope, Tripwire and SecureChannels commented this afternoon on news of the CIA’s new Directorate of Digital Innovation unit. TK Keanini, CTO, Lancope (www.lancope.com):...

Hybrid Cloud Adoption is Preferred; Control and Security of Data is Top Concern Many financial firms are slowly putting more stock in the cloud. That’s a key finding from a new Cloud Security Al...

What are the main benefits & risks associated with ‘Internet of Things (IoT)’ ? There are several benefits for business related to the "Internet of thing (Internet of Everything)". The firs...

Lack of information governance for digital channels increases the risk of a data breach and reputational damage Despite the fact that the use of digital communications and collaboration platforms i...

A new report from the Institution of Engineering and Technology (IET) and the Knowledge Transfer Network (KTN) calls for greater industry collaboration and transparency in developing connected and dri...

In IT Security we always hear about the importance of time. How frequently can we update our virus database, how quickly can we patch our system, how long does it take to investigate an alert and so o...

Date: Wednesday, March 11, 2015 Time: 10 am PST / 1 pm EST Your users expect 24x7 access to their apps and data no matter where they are located. The productivity and cost benefits of anytime acce...

Our phones are our lives. Although most of us don't want to admit it, for almost all of us it's true. We depend on our phones for almost everything and keep personal information inside, including text...

Board engagement and the audit plan are keys to addressing cyber risks effectively According to From Cybersecurity to Collaboration: Assessing the Top Priorities for Internal Audit Functions, a ne...

Almost half of the UK population would not sell their online data[1] for less than £1m, according to a landmark new privacy study, even though many people are failing to take even the most basic ste...

AVG Technologies N.V. (NYSE: AVG), the online security company for 197 million active users, announced the immediate availability of AVG Business Secure Sign-On (SSO). Underpinned by technology from i...

As the undisputed global leader in technological innovation, it has always been shocking to me that Silicon Valley doesn’t lead the nation in cyber security best practices. I mean, if not us, then...

FireMon, the industry leader in proactive security intelligence solutions, announced a new report that reinforces the firewall’s role as a foundational element of network security infrastructure, bo...

Arxan Technologies, the leading provider of application protection solutions, announced that its mobile game security support is now available across all major mobile platforms (Android®, iOS®, Wind...

The global shipping industry is the enabler of globalization itself. Without it, it would not have been possible for you to read this post (the smartphone or tablet you are reading this on was likely...

Websense® Security Labs™ researchers observed that ransomware was a plague in 2014 and this threat type shows no sign of relief in 2015.  In this blog we profile the user experience for a Torrentl...

Integrated solution combines BMC BladeLogic and Qualys Vulnerability Management to quickly identify and remediate threats and boost collaboration between Security and IT Operations teams. As organi...

As we work more frequently on the road, our mobile devices are fast becoming the first tool we turn to. Not just to check email, but to access files, make document changes or share important content w...

Reports are emerging that cyber criminals are attacking and stealing in-house trading algorithms/code. According to the Financial Times, security company Kroll has observed three recent cases, said Er...

“There are only two kinds of companies. Those that were hacked and those that don’t yet know they were hacked.” – John Chambers, CEO, Cisco With recent high-profile breaches at JP Morgan, S...

Do you think that your favourite website spying on you? Every time we browse the web we leave behind a digital trail of choices, likes and locations. Tracking this footprint has become a pervasive, lu...

As we kick off 2015, I predict that this will go down in history as the year of the Threat Intelligence Platform (TIP). We say goodbye to the year of the advanced persistent threat (APT) in 2014, just...

Many companies feel overwhelmed with the burden of covering all aspects of IT security, since growing network structures and factors -- such as device proliferation and an increasingly mobile workforc...

10x increase of secure browser activations and 9x increase of secure instant messaging activations in 2014 highlight shift to secure apps in the enterprise. In its tenth quarterly Mobility Index Rep...

There's no question that the Box IPO has validated the market demand for simple ways to share and collaborate on content. Business users are adopting file share and sync platforms such as Box, Dropbox...

Many of the most popular games out today are those that include, and heavily rely on, a multiplayer aspect. But this isn't the only way players and developers interact with one another after the g...

When CryptoWall locks down an organisation, it can take days to recover. It takes just one employee to click on the wrong link and inadvertently download the CryptoWall Trojan. Once set free, the malw...

Centrify Corporation, the leader in unified identity management across cloud, mobile and data centre, today announced the industry’s first privileged identity management solution for Apache Hadoop...

According to the BBC PC maker Lenovo has been forced to remove hidden adware that it was shipping on its laptops and PCs after users expressed anger. Here to comment on this news are information secu...

As reported by a number of different sources, Google’s primary web property in Vietnam (www.google.com.vn) had its DNS abused by an individual (or individuals) claiming affiliation with Lizard Squa...

A new report from Intel Security and endorsed by the European Cybercrime Centre at Europol reveals the latest persuasion techniques leveraged by cybercriminals to manipulate employees to do things the...

A global study of almost 2,100 contracts covering deals worth £7.8 billion suggests that Cloud-based services are failing to capture the popular imagination of UK businesses. It also suggests that or...

Following the news that RBS is to use fingerprint recognition technology in its mobile application. Here to comment on this news is information security expert Geoff Webb, Senior Director, solution s...

Recent independent research[1] commissioned by Ping Identity®, the Identity Security Company™, has revealed the disconnect between perception and reality when it comes to password and identity saf...

16- to 24-year-old consumers in the UK have the greatest appetite for biometric security measures and the greatest need to use them in place of traditional authentication such as passwords. But resear...

A report by the Intercept claims that American and British spies jointly hacked into Gemalto to get hold of encryption keys in order to monitor mobile phones around the world. Here to comment on this...

It’s important to protect ourselves, our identity and also our files. So what can we do with sensitive data once we are done with it? The recycle bin will delete the links you have to your data, but...

Experts from STEALTHbits Technologies, Lancope and Tripwire commented this morning on Kaspersky’s newly announced research on the Equation cyberespionage group’s advanced form of malware that is i...

When we take a look at the security breaches of the past few months, (Anthem and Sony are the latest of note.) one of the key takeaways is that “perimeter protection”- the feeling that your data i...

Cyber resiliency fuels company growth; new Ponemon Institute study will help define and measure cyber resilience in collaboration with leading organisations worldwide. Free eBook: Modern Retail Sec...

Kaspersky Lab’s Global Research and Analysis Team has discovered Desert Falcons – a cyber espionage group targeting multiple high profile organisations and individuals from Middle East countries....

London, UK – Cybersecurity expert Intercede today announced the launch of MyTAM, a service that enables organisations such as app developers, service providers, banks and media streaming companies t...

Kaspersky Lab, INTERPOL, Europol and authorities from different countries have combined efforts to uncover the criminal plot behind an unprecedented cyber robbery. Up to one billion American dollars w...

As just reported, a sophisticated ring of hackers has stolen up to $1Bil from more than 100 banks in 30 countries. The Carbanak Ring operated for at least a year, lurking to detect line-of-business p...

In order for the G-Cloud framework to remain successful it is imperative that it does not lose sight of its core messaging when it comes to driving good cloud policies and practices. This is according...

Most companies of scale have cyber security measures in place – software solutions, policies and protocols, and regular assessments conducted by IT staff members around compliance and efficacy. With...

Many companies are introducing Bring Your Own Device (BYOD) schemes to their working practices. Despite the numerous benefits this offers, many businesses are still not equipped with the necessary pro...

The country’s second largest health insurer, Anthem Inc., has confirmed that it is the latest to join a growing list of major corporations to have suffered a serious data breach.  Unlike many recen...

ATLANTA – February 12, 2015 – Damballa, the experts in advanced threat protection and containment, today released its Q4 2014 State of Infections Report, highlighting the limitations of a preventi...

The e-Learning industry was worth $56.2 billion dollars in 2014 and is poised to double by 2015 according to elearningindustry.com. Someone interested in pursuing coding and website design could spend...

When employees first began bringing personal devices to the workplace to use on the job, IT professionals had to make significant strategy adjustments to address the new reality. Accustomed to...