Editor's News

More than 50 million people per month could be at risk of a mass-scale ‘malvertising’ cyber-attack that turns computers into Zombies, according to researchers at Raytheon|Websense. The attack routes through advertising platforms to target popular websites, with researchers noting breaches on Bejewelled Blitz on Facebook, CNN Indonesia, the official websites of Prague Airport and RTL Television Croatia, as well as Detik and AASTOCKS. The Websense Labs team discovered the attack utilises open advertising platform OpenX,...

Attack techniques come and go as technology and user behaviours change and defences adapt to new threats – and sometimes take their eye off old ones – and the return of malicious macros offers an opportunity to examine and understand the drivers behind these adaptations, an exercise that is equal parts business case and technical analysis. By combining technical analysis of malware samples with investigation on cybercriminal forums, this report exposes the economic and technical drivers behind the...

RSA, The Security Division of EMC, has today released its inaugural Cybersecurity Poverty Index that compiled survey results from more than 400 security professionals across 61 countries. The survey allowed participants to self-assess the maturity of their cybersecurity programs, leveraging the NIST Cybersecurity Framework (CSF) as the measuring stick. The research provides valuable global insight into how organisations rate their overall cybersecurity maturity and practices across a variety of organizational sizes, industries and geographies. While larger organisations...

Leading provider of cyber security solutions, Imperva, Inc. (NYSE: IMPV), today released its Q2 2015 Global DDoS Trends Report. The report findings, based on over 3,000 mitigated DDoS attacks and 60 million blocked bot sessions across all sites which were protected using Imperva Incapsula, show a high frequency and long duration of DDoS attacks against organisations during the period from March 1 through May 7, 2015. The report also details DDoS attacks that are beginning to resemble advanced...

Infosecurity Europe was top of the agenda for the IT security industry last week, with many taking to Twitter to express their views on the top trends and issues. Now that the 2015 show is over, identity security specialist Ping Identity has given IT Security Guru some interesting social media statistics and analysis of this year’s event. Looking at trends mentioning the ‘#infosec15’ hashtag with an in-house analytics tool, Ping Identity revealed the top seven trends being talked...

A new study from ESET UK has revealed that 80 percent of IT professionals believe social media is an easy way for hackers to gain access to corporate networks because it is often neglected in terms of security, and furthermore 36 percent even admit that their company could be breached by a hacker through one of their employees’ social media access at work. The study, which looked at the attitudes of 200 IT professionals, was...

The doors have now closed on another Infosecurity Europe, held at London’s Olympia London but the knowledge gleaned, and the relationships established, over the three days will live on. Here at IT Security Guru, we’re keen to learn what you’ve taken away from this year’s show. But we’re not talking business cards, threat advice or even blisters - we’re talking swag! To get you started, here are a few of our favourite swipes: A blue...

Breaches of the Data Protection Act reported to the Information Commissioner’s Office are only a tiny fraction of the true number of such incidents happening across the UK, according to a series of Freedom of Information requests from security and communications specialist ViaSat UK. While 1,089 breaches were reported to the ICO between March 2014 and March 2015 (1), police forces across the UK reported at least 13,000 thefts (2) of devices that could hold...

The Internet connects computers around the world, and these devices have transformed over the years.  From giant systems that fill an entire room, to the Internet of Things, the Internet also connects us with cyber criminals; unfortunately, you will be a target of their activities, frequently without being aware.   Now that practically every device we use – from printers to thermostats to medical equipment – is connected to the Internet, the security of ‘things’...

A new study by Pierre Audoin Consultants (PAC) has uncovered a notable gap in Incident Response (IR) preparedness among EU companies. The majority of respondents – 86 percent – feel they’re prepared to face a cyber attack, yet nearly 40 percent have no IR plan in place. Additionally, only 30 percent of those with IR plans test and update them regularly (more than once a month).   The study was co-sponsored by Resilient Systems, FireEye, HP...