December 2020 - Page 2 of 5 - Cyber Security Minute

Only 30% prepared to secure a complete shift to remote work

Issued by: Help Net Security

The biggest security concerns facing businesses are data leaking through endpoints (27%), loss of visibility of user activity (25%) and maintaining compliance with regulatory requirements (24%), DTEX Systems reveals. These concerns are followed by access from outside the perimeter (23%) and remote access to core business apps (18%) such as email and collaboration. Few companies…

Malware & Threats

Threat Actors Increasingly Using VBA Purging in Attacks

Issued by: Security Week

Initially detailed in February 2020, VBA purging involves the use of VBA source code only within Office documents, instead of the typically compiled code, and ensures better detection evasion. Malicious Office documents have VBA code stored within streams of Compound File Binary Format (CFBF) files, with Microsoft’s specifications on VBA macros (MS-OVBA) storing VBA data…

Vulnerabilities

6 board of directors security concerns every CISO should be prepared to address

Issued by: CSO

Data breaches, ransomware attacks and concerns over risks tied to the global pandemic have heightened interest in cybersecurity among corporate boards of directors. Security leaders say BoDs have become more engaged in security matters, have a keener understanding of cyber issues, and have begun asking more sophisticated question about risk exposure and ways to manage…

Network Security

CPRA explained: New California privacy law ramps up restrictions on data use

Issued by: CSO

In November, Californians approved a ballot measure, Proposition 24, a.k.a. the California Privacy Rights Act (CPRA), to create a new consumer data privacy agency. It puts California yet another step ahead of other states in terms of privacy productions for consumers—and data security requirements for enterprises. California already had a privacy law in place, the…

Vulnerabilities

Five ways COVID-19 will change cybersecurity

Issued by: Help Net Security

The main story of 2021 won’t be the disease, but the vaccine. With three effective, promising vaccines in development as of November, COVID-19 (and its treatment) will continue causing major shifts in nearly every facet of our lives. COVID cybersecurity That is particularly true for cybersecurity. Our sector transformed in 2020, and we have still…

Malware & Threats

Microsoft, Energy Department and Others Named as Victims of SolarWinds Attack

Issued by: Security Week

Microsoft has confirmed that it has detected the malicious SolarWinds binaries delivered by the threat actor on its own systems as well. The tech giant took steps to remove the malware and claimed it had found no evidence that the attackers used its own systems to target others. Microsoft said in a blog post on…

Malware & Threats

Ransomware Gangs Use ‘SystemBC’ Tor Backdoor in Attacks

Issued by: Security Week

Initially observed in 2019, SystemBC enables persistent access to the system, providing attackers with means to conceal communications and remotely control the infected devices. Designed with support for the execution of commands and to allow adversaries to download and execute scripts, executables, and DLLs, the backdoor is continuously evolving, with recent samples having switched from…

Network Security

What is typosquatting? A simple but effective attack technique

Issued by: CSO

Typosquatting definition A typosquatting attack, also known as a URL hijacking, a sting site, or a fake URL, is a type of social engineering where threat actors impersonate legitimate domains for malicious purposes such as fraud or malware spreading. They register domain names that are similar to legitimate domains of targeted, trusted entities in the…

Vulnerabilities

EU Unveils Revamp of Cybersecurity Rules Days After Hack

Issued by: Security Week

The EU last year recorded around 450 cyber incidents involving European infrastructure, notably in the financial and energy sectors, and the pandemic has highlighted Europe’s deep dependence on the internet and exposed security weaknesses. The EU’s current Network Information System regulations date from 2008, and the European Commission’s new proposals aim to bring them up…

Malware & Threats

Killswitch Found for Malware Used in SolarWinds Hack

Issued by: Security Week

FireEye, which disclosed the attack earlier this month after the threat actor managed to breach its systems and steal some Red Team tools, revealed that the attacker had compromised SolarWinds systems and used its access to deliver a piece of malware named SUNBURST. The malware, which is configured to remain dormant for a certain period…