Featured

BlackBerry's inaugural Quarterly Threat Intelligence Report highlights the volume and model of treats across a range of organisations and regions, including industry-specific attacks targeting the automotive and manufacturing, healthcare and financial sectors. In the 90 day period between September 1 and November 30 2022, BlackBerry says it stopped 1,757,248 malware-based cyberattacks. This includes 62 unique samples per hour, or one sample each minute. The most common cyber-weapons used in  attacks include the resurgence of the...

Salt Security, the leading API security company, today announced that it has joined the Google Cloud Partner Advantage Program as a Build Partner. With the partnership, users can now access the Salt Security API Protection Platform directly from the Google Cloud Marketplace. This gives Google Cloud customers the ability to quickly and easily leverage the Salt Security API Protection Platform, gaining deep context for API discovery, attack detection and prevention, and shift-left capabilities.  As a...

Armis, the asset visibility and security company, has divulged findings from the Armis State of Cyberwarfare and Trends Report: 2022-2023, which measured global IT and security professionals’ perceptions of cyberwarfare. It found that while 84% of UK organisations claimed they had programmes and practices in place to respond to cyberwarfare threat, only one-third (32%) said their plans are validated by best practice frameworks, which is less than the global average of nearly 40%. In addition,...

Roughly 37 million T-Mobile customers have had their information stolen in a data breach, according to a statement published by the company late last night. Fortunately, T-Mobile has said that while hackers accessed names, addresses, and dates of birth, they were not able to access more sensitive information such as Social Security or credit card numbers.  But according to Sam Curry, Chief Security Officer at Cybereason, “what is or isn't sensitive is an important question...

A security notification released to PayPal customers this morning has revealed that up to 35,000 customers have fallen victim to a credential stuffing attack. Credential stuffing attacks involve bad actors systematically trying username and password combinations in order to break into an account. This means that PayPal itself was not hacked - only the accounts of affected customers.  Credential stuffing attacks such as this are a key driver of the security industry’s insistence on good...

KnowBe4 has announced the results of its 2022 and Q4 2022 top-clicked phishing report. The results include the top email subjects clicked in phishing tests, top attack vector types, holiday phishing email subjects and more insightful information that reveal the most popular phishing email tactics. Phishing emails continue to be one of the most common and effective methods to maliciously impact a variety of organisations around the world – everyone is a potential victim. Cybercriminals...

Researchers at Chainanalysis have released the ransomware section of their 2023 Crypto Crime report, revealing that ransomware payments fell from $766m in 2021 to $457m in 2022 Chainanalysis was quick to point out that this does not mean attacks are down, or at least not as much as the drastic dropoff in payments would suggest. Much of the decline is due to victim organisations increasingly refusing to pay ransomware attackers.  One major factor in victim...

Keeper Security, the provider of zero-trust and zero-knowledge cybersecurity software protecting passwords, secrets and connections, has provided an update to its Keeper Connection Manager (KCM), which gives DevOps and IT teams instant access to RDP, SSH, database and Kubernetes endpoints through a web browser- with no VPN required. New in version 2.11.0, KCM is now able to interact directly with Microsoft SQL Server and PostgreSQL databases. This functionality allows organisations to grant administrators access to...

Research from business insurer Hiscox shows that the cost of dealing with cyber events for businesses has more than tripled since 2018. The study, which collated data from the organisation's previous five annual Cyber Readiness reports, has revealed that: Since 2018 the median IT budgets for cyber security more than tripled Between 2020 and 2022 cyber-attacks increased by over a quarter Businesses are increasing their cyber security budgets year-on-year In the Hiscox 2022 Cyber Readiness...

The Outpost24 research team have released the results of attack data gathered from a network of honeypots deployed to gather actionable threat intelligence. In total, 42 million attacks were registered between January 1st and September 30th 2022, with 20 honeypots evenly distributed around the world. Honeypots are, in essence, a trap. They are a decoy system (computer, network, or software) imitating a genuine system to attract malicious users and collect information about how they operate....