October 2019 - Cyber Security Minute

Integrating security into IoT projects is not easy, but it’s increasingly urgent

Issued by: Help Net Security

With an installed base of 44 billion connected devices projected for 2023, the amount of data and information generated and shared will reach zettabytes of data, according to ABI Research. “Much of that data will be sensitive, whether about an individual’s privacy or confidential business information. As such, it presents a lucrative opportunity for threat…

Cloud Security, Vulnerabilities

IaaS cloud vulnerabilities expected to increase 50% over 2018 figures

Issued by: Help Net Security

Although the total number of IaaS cloud vulnerabilities is still small and the technology relatively young, volumes are increasing year-over-year at a steady rate, an expected to hit 50-percent growth by the end of 2019, Skybox reveals. Key findings of the report include: Vulnerabilities affecting cloud IaaS solutions likely to increase 50% over 2018 figures…

Malware & Threats, Mobile Security

Mobile Users Targeted With Malware, Tracked by Advertisers

Issued by: Dark Reading

The ubiquity of mobile devices continues to attract attackers as malicious apps have surged 20% across third-party app stores, advertisers and tracking firms account for nine of 10 API calls for top mobile applications, and nation-state actors increasingly target mobile devices, according to a trio of reports released this week. In one measure of the…

Application Security

Blacklisted apps increase 20%, attackers focus on tax-branded key terms

Issued by: Help Net Security

In 2018, global app spending hit $101 billion and is expected to surpass that this year. Mobile is a significant portion of the overall corporate attack surface where security teams often suffer from a lack of visibility. For the second consecutive quarter, blacklisted apps increased with a 20% spike, accounting for over 2% of all…

Network Security

5G Myth Busting: Unpacking the Cybersecurity Risks and Realities

Issued by: Security Week

When 5G was formally announced in 2018, it came with promises of changing the face of wireless connectivity – those promises are finally being realized. Around the world, wireless carriers are switching on functionality and, in both the U.S. and the UK, all major vendors have enabled it. But for now, 5G is only available…

Network Security

Phishing attacks are a complex problem that requires layered solutions

Issued by: Help Net Security

Most cyber attacks start with a social engineering attempt and, most often that not, it takes the form of a phishing email. It’s easy to understand the popularity of this attack vector: phishing campaigns are relatively inexpensive (money- and time-wise), yet successful. Attackers don’t need to create/buy technical exploits that might or might not work…

Application Security, Vulnerabilities

About 50% of Apps Are Accruing Unaddressed Vulnerabilities

Issued by: Dark Reading

The latest edition of Veracode’s annual “State of Software Security” study released this week shows that many enterprise organizations are at increased breach risk because of aging, unaddressed application security flaws. Veracode recently analyzed data from application security tests on more than 85,000 applications and found that, on average, companies fix just 56% of all…

Network Security

How to Secure Wi-Fi and Improve Personal and Enterprise Security From Home

Issued by: Security Intelligence

Technology enables employees to work from the office, from home, during their daily commute and pretty much everywhere in between. Companies, however, have little control over security between the home and the office. Employees may choose to work from unsecured Wi-Fi networks in public places or when working remotely, for example, when we all know…

Application Security, Cloud Security

Researchers Turn Alexa and Google Home Into Credential Thieves

Issued by: Dark Reading

“Alexa, steal my passwords.” It’s not a phrase a user is likely to utter, but security researchers in Germany have shown that it’s possible for malicious apps — Alexa “skills” and Google Home “actions” — to launch phishing attacks on users, forward the compromised credentials to criminals, and do it all in apps approved for…

Network Security

Perceptions on the impact of data breaches and identity protection

Issued by: Help Net Security

4iQ recently completed research focusing on Americans’ attitudes about cybersecurity breaches and the efforts that organizations make to mitigate breaches’ effects on identity theft. Where’s the data? The findings indicate that a large proportion of Americans (44%) believe their personally identifiable information (PII) has been stolen as a result of a data breach. A strong…