News

Passwords essentially are the gateways to our digital lives. From business accounts, social media, shopping, banking – you name it – if they’re compromised, it can have big implications. To mark the day, we’ve compiled the advice of some of the world’s leading experts in cybersecurity to help keep individuals and, ultimately, businesses safer on their way to solving password creation and management.   Curtis Simpson, CISO, Armis: Most importantly, protect your credentials through the...

On Tuesday the internet service provider Belnet fell victim to a cyberattack. The attack took place at 11:00am CEST when the company experienced a distributed denial of service (DDoS) attack. This resulted in Belnet's servers being overloaded and preventing any availability of their online services. The attack affected any website with .be domains. As a number of Belgium's government agencies are customers of Belnet, they too were affected by the attack. The incident affected Belgium's...

Researchers from Qualys released a study that found 21 unique vulnerabilities in the Exim mail server. Some of these can be linked together to obtain full remote unauthenticated code execution and gain root privileges. In a blog post, the Qualys Research Team said that the vulnerabilities potentially affect numerous organisations due to an estimated 60% of internet servers that run on Exim. Researchers also executed a Shodan search to find that nearly 4 million Exim...

Just last week, Apple notified customers about a serious security vulnerability that was patched in macOS 11.3. And just a week later, it's now warning over another bug fix in a macOS 11.3.1 release that corrects two separate issues which, if exploited, would allow for arbitrary code execution. It's possible that these new vulns are actively being exploited - allowing hackers to run commands of their choosing. Bottom line: if you're a mac user -...

Synopsys has today announced it will showcase the Software Integrity Group’s new Intelligent Orchestration solution at RSA Conference on May 17th - 20th. Intelligent Orchestration is a dedicated application security automation pipeline, optimized for speed and efficiency, that ensures the right security tests are performed at the right time. Intelligent Orchestration, which runs in parallel to build and release pipelines, utilizes innovative technology to automatically determine and initiate the most appropriate security tests, including static (SAST),...

ITV reports on how Dorset police are investigating a "serious data breach" involving pupils from two schools in Christchurch. This is after information about an alleged race hate crime was sent by mistake to a man from Wimborne who had initially emailed the police about a separate incident. Dorset police insist it was human error that led to the information about the school incident being leaked to a third party.

The 25 security flaws are known collectively as BadAlloc and affect Internet of Things (IoT) devices and Operational Technology (OT) industrial systems. The flaws are caused by memory allocation Integer Overflow or Wraparound bugs. Threat actors can exploit the vulnerabilities to trigger system crashes and execute malicious code remotely on susceptible IoT and OT systems.

Technology giants Microsoft and Amazon, as well as the FBI and the UK's National Crime Agency have joined the Ransomware Task Force (RTF) to give governments nearly 50 recommendations on how to take action against ransomware, according to a BBC report. The task force is critical now more than ever as ransomware gangs are now routinely targeting schools and hospitals, using malicious software to scramble and steal an organisations' computer data. The RTF has now...

Lloyds Bank customers are under attack by cybercriminals again. This time, text messages are being used to bait people into thinking there is a security issue with their bank accounts. An example message reads: “LLOYDS-SECURITY: You have successfully scheduled a payment of £69.99 to payee MR ADAMS 28/04. If this was NOT you, visit: https://payee-confirmationcentre.com.” The link leads victims to a scam website which can easily harvest the personal information of unsuspecting individuals or a...

A report from cybersecurity firm Webroot shows that almost all (92%) illegal football streaming websites contain some form of malicious content, from malware and phishing lures to social engineering scams. This puts fans at considerable risk In fact, Webroot says in its report that anyone who used an illegal website to watch last weekend’s Carabao Cup Final or games from Europe’s top domestic leagues will have potentially been exposed to a sophisticated cryptocurrency scam orchestrated...