News

TechUK announced the publication of its UK tech plan on the 6th of June 2023. Alongside a thousand members of SMEs, global businesses etc., the plan lays out ideas for the next incoming government on “digital regulation, economic reform and public service reform” to leverage technology for a “better Britain”. The plan determines 18 areas that it calls ‘summary of opportunities’. This includes making the UK one of the most trusted, safe and secure places...

This week, it was discovered that cybercriminals had exploited an ongoing vulnerability in Progress Software’s MOVEit file transfer app to infiltrate the systems of payroll company, Zellis. According to its website, 42% of the FTSE 100 are Zellis customers and over £28bn is paid each year through its Managed Services. This eventually led to a widespread ransomware attack impacting at least eight customers including the BBC, British Airways, Aer Lingus and Boots; all of whom...

With data from its SecurityCoach product, KnowBe4 has revealed the top 10 risky behaviours that employees have engaged in on their work devices. SecurityCoach helps IT/security professionals to develop a strong security culture by enabling real-time security coaching of their users in response to risky security behaviour. Leveraging an organisation’s existing security stack, IT/security professionals can configure their real-time coaching campaigns to immediately deliver a SecurityTip to their users related to a detected event. The...

Cybersecurity has become an indispensable aspect of business operations in today’s interconnected digital landscape. While large corporations often dominate the headlines regarding cyber threats, small businesses are not immune to such risks. In fact, they are increasingly becoming attractive targets for cybercriminals, so small businesses need to get serious about cybersecurity sooner rather than later. What Is Cybersecurity? Cybersecurity refers to the practice of protecting computer systems, networks, and digital data from unauthorised access, damage,...

KnowBe4 has launched its new and complementary QR Code Phishing Security Test (QR Code PST) tool. The no-charge tool assists organisations in identifying users that are most susceptible to scanning malicious QR codes. Many organisations are aware of the typical social engineering techniques used by bad actors such as phishing, spear phishing and impersonation, to manipulate employees and infiltrate systems. However, bad actors are now taking advantage of the rise in popularity of QR codes and are using them to launch...

Over one in ten data breaches originate from a malicious insider, and they cost companies $4.18 million dollars per incident. And that’s only the malicious ones.   According to the 2023 Insider Threat Report by Cybersecurity Insiders, nearly three-fourths (74%) of organizations are at least moderately vulnerable to insider threats. It’s worth a company’s time to recognize the five main types of these kinds of attacks and know how to prevent them.  Recognizing Risk  Privileged Insiders...

New Specops Software research has unearthed the length of time it takes modern attackers to brute force user passwords. Plain text password storage is rare in these modern times, requiring attackers to adopt password cracking methods to make use of the majority of (hashed) password leaks. However, with the help of newer password-cracking hardware and software, the time to crack passwords is now considerably short. Darren James, Senior Product Manager at Specops Software, states “the...

Registration for this year’s International Cyber Expo (ICE) on the 26th and 27th of September 2023 at London Olympia is now open. The award-winning security event will once again showcase an impressive line-up of talks, demonstrations, and senior-level roundtable discussions led by reputable experts in the field; not least, Chair of the event’s Advisory Council, Ciaran Martin CB, Professor at Oxford University. To register for FREE, visit: https://ice-2023.reg.buzz/eskenzi-press-release-launch Off the back of the inaugural event...

Popular social media platform Discord has notified users it has suffered a data breach after a support agent’s account at a third party became compromised. A malicious individual then gained unauthorised access to the agent’s support queue, exposing user email addresses, Discord support messages and attachments sent via the ticket system. Discord - which has a user base of over 150 million monthly active users - has deactivated the compromised account and undertaken security checks...

While there is no specific intelligence about an attacked planned for the weekend, experts from the UK's National Cyber Security Centre have been drafted to help minimise the risk of sabotage. Broadcasters' main worry suffering an attack from pro-Russian hackers looking to disrupt the public vote on Saturday. Fortunately, there are "so many contingency plans" in place in the event of incident. Kate Phillips, the BBC's director of unscripted programmes said: “I don’t want to say...