October 2020 - Page 3 of 5 - Cyber Security Minute

Global adoption of data and privacy programs still maturing

Issued by: Help Net Security

The importance of privacy and data protection is a critical issue for organizations as it transcends beyond legal departments to the forefront of an organization’s strategic priorities. A FairWarning research, based on survey results from more than 550 global privacy and data protection, IT, and compliance professionals outlines the characteristics and behaviors of advanced privacy…

Malware & Threats

Iran-Linked ‘Silent Librarian’ Back at Phishing Universities

Issued by: Security Week

Also tracked as TA407 and COBALT DICKENS, the adversary was previously observed launching similar attacks for two years in a row. In 2018, the group set up fake login pages for 76 universities. In 2019, Silent Librarian targeted more than 60 universities in Australia, Canada, Hong Kong, Switzerland, the United States, and the United Kingdom….

Network Security

Twitter Hack: 24 Hours From Phishing Employees to Hijacking Accounts

Issued by: Security Week

The attack started on July 14 and was over the next day, when it became apparent that numerous high-profile accounts, including those of Bill Gates, Elon Musk, Barack Obama, and Jeff Bezos, were hijacked and leveraged to promote a cryptocurrency scam. The hackers, which were identified shortly after the incident, leveraged internal Twitter systems to…

Software Security

Foxit Patches Code Execution Vulnerabilities in PDF Software

Issued by: Security Week

The Chinese software company’s tools allow users to create and edit PDF files, as well as secure them when necessary. Foxit also offers products under a freemium licensing model. Last week, the company released security updates for both Foxit PhantomPDF Mac and Foxit Reader Mac, to address a vulnerability that could result in code injection…

Cloud Security

Modernizing Your Security Operations Center for the Cloud

Issued by: Security Intelligence

Several factors are converging to exert pressure on how security operations centers (SOCs) traditionally function. Evolving information technology (IT) infrastructure, such as cloud migration, serverless services and endpoints being off-network, are straining existing SOC methodologies and tooling. The attack surface is expanding as a result of the distributed workforce and adoption of cloud-based infrastructure and…

Malware & Threats

Law Firm Seyfarth Shaw Hit by Damaging Ransomware Attack

Issued by: Security Week

Founded in 1945 in Chicago, Illinois, Seyfarth has over 900 lawyers across 17 offices, providing clients all around the world with advisory, litigation, and transactional legal services. The Am Law 100 firm serves more than 300 of the Fortune 500 companies. Over the weekend, the company fell victim to a ransomware attack that spread aggressively…

Vulnerabilities

CPRA: More opportunity than threat for employers

Issued by: Help Net Security

Increasingly demanded by consumers, data privacy laws can create onerous burdens on even the most well-meaning businesses. California presents plenty of evidence to back up this statement, as more than half of organizations that do business in California still aren’t compliant with the California Consumer Privacy Act (CCPA), which went into effect earlier this year….

Malware & Threats

Enterprise Solutions Provider ‘Software AG’ Hit by Clop Ransomware

Issued by: Security Week

Software AG operates across more than 70 countries around the world and it has over 5,000 employees. It claims that its solutions are used by more than 10,000 of the world’s biggest brands. The company disclosed the incident on October 5, when it reported being hit by a malware attack on October 3. Software AG…

Cloud Security

SaaS adoption prompting concerns over operational complexity and risk

Issued by: Help Net Security

A rise in SaaS adoption is prompting concerns over operational complexity and risk, a BetterCloud report reveals. Since 2015, the number of IT-sanctioned SaaS apps has increased tenfold, and it’s expected that by 2025, 85 percent of business apps will be SaaS-based. With SaaS on the rise, 49 percent of respondents are confident in their…

Malware & Threats

Elusive hacker-for-hire group Bahamut linked to historical attack campaigns

Issued by: CSO

Attack attribution is one of the most difficult aspects of malware research and it’s not uncommon for different security companies to attribute attack campaigns to different threat actors only to later discover that they were the work of the same group. However, a new paper by researchers at Blackberry stands out by exposing an elusive…