Cyber Security Minute

Announcement Center

Increased dark web activity putting merchants and consumers at risk

October 26, 2018 7:57 am

Advertisement Cybercriminals are increasingly targeting retailers and their customers through digital and social channels as retailers leverage new channels for increased revenue opportunities. In a joint report, IntSights scoured the Clear and Dark Web to assess retail data and goods being sold illegally, new cyber scam tactics and how cybercriminals impersonate brands online to trick...

You should prepare for the next mega data breach

September 27, 2018 7:30 am

Advertisement As of September 2018, it’s been one year since the historical Equifax mega data breach that impacted nearly half of all consumers in the U.S. Since this monumental invasion of personal data, fraudsters have shown little to no notion of slowing down as evident by the continued emergence of additional data breaches. In fact,...

Less than a third of companies have dedicated cybersecurity insurance

September 4, 2018 7:06 am

Advertisement Only one third of senior executives in UK organisations admit their company insurance currently covers them for a security breach and for the financial impact of data loss, despite the fact that 81 percent agree that it is ‘vital’ their organisation is insured against information security breaches. This is according to the Risk:Value report...

Global information security spending to exceed $124 billion in 2019

August 23, 2018 8:41 am

Advertisement Worldwide spending on information security products and services will reach more than $114 billion in 2018, an increase of 12.4 percent from last year, according to the latest forecast from Gartner. In 2019, the market is forecast to grow 8.7 percent to $124 billion. “Security leaders are striving to help their organizations securely use...

What is phishing? How this cyber attack works and how to prevent it

August 10, 2018 9:45 am

Advertisement Phishing is a cyber attack that uses disguised email as a weapon. The goal is to trick the email recipient into believing that the message is something they want or need — a request from their bank, for instance, or a note from someone in their company — and to click a link or...

State of Email Security: What Can Stop Email Threats?

July 30, 2018 3:00 pm

Advertisement A survey of 295 professionals — mostly but not entirely IT professionals — has found that 85% of respondents see email threats bypass email security controls and make it into the inbox; 40% see weekly threats; and 20% have to take significant remediation action on a weekly basis. Email security firm GreatHorn wanted to...

New insider attack steals passwords by reading thermal energy from keyboards

July 6, 2018 8:50 am

Advertisement After entering a password, your regular computer keyboard might appear to look the same as always, but a new approach harvesting thermal energy can illuminate the recently pressed keys, revealing that keyboard-based password entry is even less secure than previously thought. Computer Science Ph.D. students Tyler Kaczmarek and Ercan Ozturk from UC Irvine’s Donald...

Don’t start the blockchain revolution without making security a top priority

June 14, 2018 8:51 am

Advertisement McAfee released a report detailing the numerous cybersecurity risks associated with blockchain-based cryptocurrencies, and asserts the necessity of making cybersecurity a top priority as industry builds out the foundations for the widespread implementation of blockchain technologies. Demand for blockchain technology continues to grow among some of the most established industries worldwide, including the government,...

Where Are You Placing Your Endpoint Security Bets?

May 22, 2018 7:35 pm

Advertisement Defense-in-depth is a common security strategy that often includes a combination of endpoint security products, including next generation anti-virus (NGAV), traditional anti-virus (AV) and/or endpoint detection and response (EDR). But as attacks and breaches continue to surge, I can’t help but wonder: are these technologies missing the point? The CyberArk Endpoint Privilege Manager and...

Largest inhibitor of cyber insurance market growth? Silent cyber risk

April 24, 2018 6:32 pm

Advertisement A new study of the UK cyber risk insurance and broker community reveals startling findings. First and foremost, the insurance industry needs to address non-affirmative cyber in a meaningful way. Second, measurement of cyber risk in financial terms is highly deficient among insurance customers and the insurance industry itself. More than three-quarters (77 percent) of UK...

Reported breaches in the first 9 months of 2018 exposed 3.6 billion records

Issued by: Help Net Security

There have been 3,676 publicly disclosed data compromise events through September 30. Breach activity continues at a consistent pace for 2018, which although significant in level, will likely not reach the numbers we saw in 2017, according to the 2018 Q3 Data Breach QuickView report...

Consumers would stop engaging with a brand online following a breach

Issued by: Help Net Security

Ping Identity surveyed more than 3,000 people across the United States, United Kingdom, France and Germany to find out what they expect from brands when it comes to the safekeeping of personal information. The survey reveals many consumers are making drastic changes to the ways...

How email fraud tactics continue to find new life

Issued by: Help Net Security

Almost as soon as email became widely used, crooks and scammers began using it as a means to defraud people. In today’s world, malicious fake emails continue to be a huge problem for individuals and businesses. Businesses make lucrative targets Losses due to BEC scams...

Data revolution backlash: Consumers prepared to take decisive action if organizations mishandle data

Issued by: Help Net Security

US consumers believe technological advancements pose a risk to their data privacy; believe it is the responsibility of organisations to make the purpose of data use clear and say organisations that fail to protect people’s data should face immediate penalties from regulators, according to a...

Google Removes Vulnerable Library from Android

Issued by: Security Week

The addressed issues include remote code execution bugs, elevation of privilege flaws, and information disclosure vulnerabilities, along with a denial of service. Impacted components include Framework, Media framework, System, and Qualcomm components. “The most severe vulnerability in this section could enable a proximate attacker using...

Cyber Security Minute

How task management and easy collaboration can help your security team

Websites Attack Attempts Rose in Q2

APIs: The Trojan horses of security

7 Serious IoT Vulnerabilities

Unified Security Data: A Simple Idea to Combat Persistent, Complex Cyberattacks

Announcement Center