Cyber Crime

A new survey from Arctic Wolf has asked over 1,400 IT decision makers' about their attitudes on a wide array of cybersecurity and business issues. After a year of high-profile cyberattacks, it appears executives lack faith in the government's ability to protect them from cyberattacks, with 60% of respondents saying they are spending on new security tools as they believe it is the most effective way to secure their organisations. Nation State sponsored attacks remain...

Despite the increased use of mobile device management (MDM), mobile phishing among financial services was at an all-time high last year. A report conducted by endpoint security expert, Lookout, revealed a 125% increase in exposure to considerable risk in both financial services and insurance organisations. The financial report also uncovered that the risk exposure to malware and risky applications increased by over 400%, leaving employees and customers in this industry vulnerable to a breach. Phishing...

The University of Hertfordshire has been hit by a critical cyberattack resulting in online classes being shut down. The university released a statement on Wednesday evening (14th April) that an attack by cybercriminals had resulted in all its online services and systems being taken offline. “Shortly before 22:00 last night, the university experienced a cyber-attack which has impacted all of our systems, including those in the Cloud such as Canvas, MS Teams and Zoom,” the...

A new report released by the FBI has revealed that Americans had over $4 billion stolen due to cybercrime in 2020. Also found in the 2020 Internet Crime Report was the fact that the Internet Crime Complaint Center (IC3) saw an increase of 69% compared to what was reported 2019. Further research has shown that the top three crimes reported by victims in 2020 were phishing scams, non-payment/non-delivery scams, and extortion. It was highlighted that...

Can it be done? And if so, how? We give our thoughts regarding online pokers ongoing arms race Before the days of online poker, cheating at the table meant smuggling in sophisticated devices – the earliest forms of these would simply allow you to keep an extra ace or two up your sleeve, but that was a risky proposition – what happens when two identical cards are spotted on the table at the same time?...

Growing up was not easy for entrepreneur, Iron Man and author, Christian Espinosa. “I played football, but I was also smart, but I also liked heavy metal, so I felt out of place from each particular clique” Espinosa revealed reminiscing on his formative years. As a response to various socio-economic difficulties beyond control, Espinosa’s mindset changed dramatically as he threw himself at every challenge and character development opportunity, trying to be the best he could...

An undisclosed Cross-Site Scripting (XSS) vulnerability in Apache Velocity Tools can be exploited by unauthenticated attackers to target government sites, including NASA, BleepingComputer reported today. Although 90 days have elapsed since the vulnerability was reported and patched, BleepingComputer is not aware of a formal disclosure made by the project.Security researcher Jackson Henry of the Sakura Samurai ethical hacking group had first discovered and reported the vulnerability to Apache in early October, 2020. Although the project had acknowledged Henry's report and issued...

To lean on the cliché, these unprecedented times have brought about significant challenges for everyone. Practically every organisation, person and industry has been forced to make unexpected changes and significant sacrifices in a variety of different forms. The rush to equip organisations and employees with the tools needed to work from home has greatly exacerbated the already underlying condition of poor cybersecurity hygiene. While businesses and individuals were focused on staying safe and operational, cybercriminals...

Research has revealed that the likes of Costco, Walmart and The Home Depot are more at risk to web-based cyberattacks then compared to their EU counterparts, according to findings from Outpost24. In a year that saw a global pandemic leading to a 30% surge in online shopping and exponential growth in cybersecurity threats for enterprises, Outpost24 analysed the web application attack surface for 20 of the biggest retailers in Europe and the US to evaluate...

The Cybersecurity and Infrastructure Security Agency (CISA) has released Emergency Directive (ED) 20-04 addressing a critical vulnerability— CVE-2020-1472—affecting Microsoft Windows Netlogon Remote Protocol. An unauthenticated attacker with network access to a domain controller could exploit this vulnerability to compromise all Active Directory identity services. Earlier this month, exploit code for this vulnerability was publicly released. Given the nature of the exploit and documented adversary behaviour, CISA assumes active exploitation of this vulnerability is occurring in the wild. ED...