IT Security Guru

EU sanctions for WannaCry, NotPetya, OPCW & Cloud Hopper attackers

Individuals and entities from North Korea, China and Russia, responsible for or involved in 'WannaCry', 'NotPetya', 'Operation Cloud Hopper' and the OPCW (Organisation for the Prohibition of Chemical Weapons) cyber attacks have been identified and received travel bans and an asset freeze in the first ever imposition of restrictive sanctions by the EU Council. People and entities in the EU are also forbidden from making funds available to those listed. In a public statement the EU says: “In order to...

Edgescan finds Critical WordPress Plugin Vulnerabilities – Here’s All You Need To Know

by Sabina

July 22, 2020

Edgescan's Senior Security Consultant Guram Javakhishvili has discovered several vulnerabilities across a number of popular applications. Some of these are not yet publicly available. As soon as the vendor implements the fixes, those issues will also be added to this list and article will be updated accordingly. CMS Made Simple 2.2.13 CMS Made Simple is a Content Management System that was first released in July 2004 as an open source General Public License (GPL) package....

Police ‘Team Cyber UK’ implementing regional CRC network

by Tony Morbin

July 17, 2020

IT Security Guru interviewed Nick Bell, detective superintendent and national policing director for Cyber Resilience Centres with the NPCC National Cybercrime Programme. Q1: This is the first role of its kind within policing - why was it important to establish the role? Ans: “Policing needs to reach out across partnerships and the Cyber Resilience Centre (CRC) network brings together so much knowledge and experience across business, academia and the police to combat cybercrime and protect...

Huawei banning – NCSC’s advice was more nuanced

by Tony Morbin

July 15, 2020

It will become illegal for UK telecos to buy new Huawei equipment from the end of this year once a new bill takes effect. Culture secretary Oliver Dowden told the house of commons yesterday that the legislation would also require the complete removal of all Huawei kit from 5G networks by 2027. The decision followed advice from the NCSC which recommend that Huawei’s post-FDPRA (US sanctions) equipment is not used in the UK at all, as continuing to supply...

Announcement: Tony Morbin joins IT Security Guru as Editor in Chief

by Joel

July 13, 2020

Today Tony Morbin joined IT Security Guru as editor in chief, signalling a drive to further develop this vital news and information source for the cyber security industry. Last week Tony left SC Media UK, the world’s longest established cyber security title, where he oversaw the transition from print to digital, as well as more recently engaging in the move from live to digital events during the coronavirus pandemic. Tony has also been publisher at Ten...

Major spike in cyber threats during Covid-19 pandemic – insights from the Telco Security Alliance

by Beth Smith

July 9, 2020

Major spike in cyber threats during Covid-19 pandemic – insights from the Telco Security Alliance

The COVID-19 Threat Intelligence Insight report was provided by AT&T Cybersecurity and the Telco Security Alliance (TSA), which observed cyberthreat activity between January and June 2020. The TSA consists of a group including Singtel (Trustwave), and Telefónica (ElevenPaths), and aims to offer enterprises comprehensive cybersecurity insights to help them address the threat of cyberattacks and the evolving threat landscape. The findings include threat intelligence examined and provided by AT&T Alien Labs Open Threat Exchange,...

Chinese-state-sponsored hackers spying on ethnic minorities worldwide

by Joel

July 7, 2020

Chinese-state sponsored hackers have been using Android spyware tools to target ethnic minority groups particularly Uighurs, Tibetans, and Muslims, across 15 countries which include Malaysia, Turkey, Indonesia and Kazakhstan. First discovered by mobile cybersecurity providers Lookout, the primary aim of these apps is to track, gather and exfiltrate personal user data to attacker-operated command-and-control servers, with the surveillance attributed to the Chinese government’s national security and counter-terrorism efforts. Threat researchers state the spyware exploits the victim’s...

One Identity PAM Portfolio Given Overall Leader Status by KuppingerCole for Second Year Running

by Beth Smith

July 2, 2020

One Identity, provider of identity-centered security, today announced the company’s 2nd second consecutive year being named an Overall Leader for its Privileged Access Management solutions in KuppingerCole’s 2020 Leadership Compass for Privileged Access Management (PAM) report. 1 This recognition follows One Identity’s recent placement as an Overall Leader in KuppingerCole’s Leadership Compass for Identity Governance and Administration (IGA) report. 2 When creating the 2020 Leadership Compass PAM report, KuppingerCole Analysts evaluated the strengths and...

Calling all Cybersecurity Heroes for Unsung Heroes Awards!

by Beth Smith

July 1, 2020

Calling all Cybersecurity Heroes for Unsung Heroes Awards!

Eskenzi PR has today announced that the fifth annual Security Serious Unsung Heroes Awards are open for nominations. The 2020 awards are a chance to celebrate the people, not products, on the front lines of battling cyber threats – whether that be in the classroom, in law enforcement or within corporate organisations. A new category has been added this year for those helping to keep UK businesses safe through the COVID-19 pandemic. Nominations are open until the 31st of August 2020 and the Unsung Heroes Awards will take place...

Securing the mobile channel amidst FBI cautions

by Beth Smith

June 29, 2020

‘AirDoS’ Bug fixed by Apple which crippled Nearby iPhones, iPads

Entersekt, a global specialist in digital security solutions, today released its updated guidance for financial institutions, Securing the Mobile Banking Channel, a white paper. This follows the FBI warning that an increase in attacks on banking applications by cybercriminals and fraudsters is likely, as consumers stuck at home during the COVID-19 pandemic rely more heavily on these platforms. And with recent research pointing to a marked distrust in banking communications among banking customers in the...

Featured

The latest collection of expert opinions, news analysis and featured contributions from the IT security community

EU sanctions for WannaCry, NotPetya, OPCW & Cloud Hopper attackers

Edgescan finds Critical WordPress Plugin Vulnerabilities – Here’s All You Need To Know

Police ‘Team Cyber UK’ implementing regional CRC network

Huawei banning – NCSC’s advice was more nuanced

Announcement: Tony Morbin joins IT Security Guru as Editor in Chief

Major spike in cyber threats during Covid-19 pandemic – insights from the Telco Security Alliance

Chinese-state-sponsored hackers spying on ethnic minorities worldwide

One Identity PAM Portfolio Given Overall Leader Status by KuppingerCole for Second Year Running

Calling all Cybersecurity Heroes for Unsung Heroes Awards!

Securing the mobile channel amidst FBI cautions