Chinese and Russian hackers have turned their focus to edge devices — like VPN appliances, firewalls, routers and Internet of Things (IoT) tools — amid a startling increase in espionage attacks, according to Google security firm Mandiant. The company published the findings as part of its annual report on cyber investigations Mandiant was involved in […]
Most compliance leaders tend to focus on building an ethical culture in their organizations to improve employee behavior, but it has a limited impact on addressing uncertainty about how to be compliant, according to a survey by Gartner. Three primary situations that lead to noncompliance There are three primary situations that lead to noncompliance: Situations […]
The banking trojan known as Mispadu has expanded its focus beyond Latin America (LATAM) and Spanish-speaking individuals to target users in Italy, Poland, and Sweden. Targets of the ongoing campaign include entities spanning finance, services, motor vehicle manufacturing, law firms, and commercial facilities, according to Morphisec. “Despite the geographic expansion, Mexico remains the primary target,” […]
In today’s rapidly evolving SaaS environment, the focus is on human users. This is one of the most compromised areas in SaaS security management and requires strict governance of user roles and permissions, monitoring of privileged users, their level of activity (dormant, active, hyperactive), their type (internal/ external), whether they are joiners, movers, or leavers, […]
Geo Focus: The United Kingdom , Geo-Specific , Governance & Risk Management Voluntary Rules Will Set Baseline Security Requirement for Software Vendors, Users Akshaya Asokan (asokan_akshaya) • January 24, 2024 Image: Shutterstock The U.K. government is mulling the rollout of a voluntary set of rules urging software vendors to responsibly disclose vulnerabilities in […]
Fraud Management & Cybercrime , Geo Focus: The United Kingdom , Geo-Specific Parliamentary Committee Says UK Must Be More Aggressive Akshaya Asokan (asokan_akshaya) • December 12, 2023 The U.K. Joint Committee on the National Security Strategy recommended that the government elevate ransomware as an issue. (Image: Shutterstock) A U.K. parliamentary committee investigating ransomware […]
Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Geo Focus: Asia Andariel Group Rented Server to Steal 1.2TB of Data, Extort $357,000 in Ransoms Jayant Chakravarti (@JayJay_Tech) • December 5, 2023 A Seoul Metropolitan Police Agency police station (Image Shutterstock) Seoul police have accused the North Korean hacker group Andariel of […]
Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Geo Focus: Asia Nation-State Attacks on Defense Manufacturers Rising Since November 2022 Jayant Chakravarti (@JayJay_Tech) • October 4, 2023 A Daewoo shipyard in the city of Geoje in South Korea (Image: Shutterstock) South Korean national intelligence has sounded alarms about North Korean hackers […]
As organizations around the world prioritize digitization, the focus on cloud security is rapidly growing. Security flaws such as limited visibility, lack of threat detection and response capabilities, and the inability to detect unknown threats or misconfigurations within cloud environments, can all have devastating consequences. Misconfigured cloud resources can cause unintentional data leaks, and an […]