December 2016 - Page 7 of 9 - Cyber Security Minute

Hiring the Right Cyber Threat Intelligence Analyst for Your Organization

Issued by: Security Week

With the coming new year comes new strategies to implement, new budgets to work with, and new threats to prevent from harming your business. I’ve personally seen a shift in the past year where more organizations are moving beyond the basic understanding of what threat intelligence is and moving into a planning and implementation process…

Vulnerabilities

Yahoo Pays Out $10,000 Bounty for Critical Mail Flaw

Issued by: Security Week

A researcher has earned $10,000 for finding a critical Yahoo! Mail vulnerability that could have been exploited simply by getting the targeted user to open a specially crafted email. Nearly one year ago, Jouko Pynnönen of Finland-based software company Klikki Oy discovered a stored cross-site scripting (XSS) vulnerability in the web version of the Yahoo!…

Network Security

CISOs must assess risks and identify the real security budget

Issued by: Help Net Security

Organizations spend an average of 5.6 percent of the overall IT budget on IT security and risk management, according to Gartner. However, IT security spending ranges from approximately 1 percent to 13 percent of the IT budget and is potentially a misleading indicator of program success, analysts said. “Clients want to know if what they…

Vulnerabilities

How to Find and Remediate Vulnerabilities in Real Time

Issued by: Security Intelligence

Every business, large or small, must be able to remediate vulnerabilities that can threaten to undermine all its hard work and success. The security analysts and IT operators at these organizations have surely heard of household-name vulnerabilities like Heartbleed and Shellshock. But do they have all the knowledge and tools they need to track and…

Malware & Threats

Locky Variant Osiris Distributed via Excel Documents

Issued by: Security Week

The infamous Locky ransomware has once again switched to a new extension to append to encrypted files, but reverted to malicious Office documents for distribution, security researchers have discovered. The latest Locky variant is appending the .osiris extension to encrypted files, marking a switch from the Norse mythology to Egyptian mythology. The change comes only…

Malware & Threats

Top 4 global security threats businesses will face in 2017

Issued by: Help Net Security

While the political, social and economic implications are not fully clear, gigabit connectivity represents a significant overnight leap forward. This will enable the IoT and a new class of applications to emerge that will “exploit the combination of big data, GPS location, weather, personal-health monitoring devices, industrial production and much more. Connectivity is now so…

Vulnerabilities

Dailymotion urges users to reset passwords in wake of possible breach

Issued by: Help Net Security

Breach notification service LeakedSource has added information about over 87 million Dailymotion users to its search index. The information includes 87+ million email addresses, user IDs, and over 18 million associated passwords. It was apparently stolen in a breach that happened around October 20, 2016.

Network Security

Real-Time Payments, Real-Time Fraud Risks?

Issued by: Security Intelligence

Real-time payments, near real-time payments, faster payments, immediate payments — those are just some names used to describe the increasing speed of the settlement transaction process. Slow clearing times for payments can have a negative effect on businesses and consumers, but a quicker process may introduce fraud risks. The National Automated Clearing House Association (NACHA)…

Malware & Threats

Obama’s cybersecurity plan faces uncertainty with Trump

Issued by: CIO Security

U.S. consumers could one day see cybersecurity ratings on technology products, much like today’s EnergyStar ratings, if the findings of a government-sponsored cybersecurity commission are heeded. Although like much in Washington right now, a lot depends on incoming U.S. President Donald Trump and his views on cybersecurity are far from clear. The report, published on…