News

By Chris Sedgwick, director of security operations at Talion Cryptocurrencies are a topic that touches many areas; not only finance and investing but technology and even political arenas. Although apolitical in itself, it is the structure behind these cryptocurrencies that make them a much talked about subject amongst political purists from across the political spectrum. This structure can be boiled down to the following; think of cryptocurrencies as a ‘big spreadsheet’, and when you ‘mine’...

At the LORCA Live online event, Rob Meyerson, founder and CEO at Delalune Space claimed that the commercial space industry needs support from the cybersecurity sector in order to build trust and resilience. Former employee of NASA and Blue Origin, Meyerson is now focused on investing in new businesses that aim to operate in the space sector. This more recently includes cybersecurity. As a society, we are already reliant on the space industry to run...

Already, DDoS attacks have set a new record and taken the extortion trend that started in August 2020 to the next level. Akamai, an internet security company has already reported the largest known DDoS (RDDoS) attack. The company has said the attack was more complex than previously seen incidents of DDoS attacks. In February of 2021, Akamai dealt with "three of the six biggest volumetric DDoS attacks" that have ever been recorded. The most recent...

Ubiquiti suffered a data breach, which they disclosed in January 2021. Recent information, however, claims that the data breach report was potentially a cover-up of a larger incident that put customer data and devices deployed on corporate and home networks at risk. Ubiquiti originally reported that an attacker had accessed some of its IT systems, which were hosted by a third party cloud provider and that there was no evidence of unauthorised activity. The company...

American journalist and investigative reporter Brian Krebs reported this week that a whistleblower has alleged that Ubiquiti, a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders and security cameras, has  massively downplayed a “catastrophic” incident to minimize the hit to its stock price.  and that the third-party cloud provider claim was a fabrication. Back in January, Ubiquity disclosed that a breach involving a third-party cloud provider had exposed...

A North Korean Hacking group, know to previously have targeted security researchers has recently created a fake offensive security firm. The threat actors were first documented in January 2021, per Google's Threat Analysis Group (TAG). The TAG specialists have said that the North Korean hackers had developed a web of fake profiles on various social media platforms. Among these are Twitter, Keybase and LinkedIn. The group would reach out to its victims asking for a...

Cloud computing and visualisation software and services provider VMware has patched a serious vulnerability that could have led an attacker to steal admin credentials in vRealize Operations. In an advisory published on Tuesday, the company stated that "multiple vulnerabilities in VMware vRealize Operations were privately reported to VMware." In the same announcement, VMware said that patches and workarounds are now available to address these vulnerabilities in impacted products and warned customers that the issues were...

The Cyber Security Alliance-led Formation Project has created an umbrella body that will grow to champion cyber security education, training and skills. Today it was announced that the Formation Project to create the Council has completed, allowing the Government-mandated Council to officially become an independent entity, fully and only accountable to its Trustees. The Council will champion the cyber security profession across the UK, providing broad representation for the industry, accelerating awareness and promoting excellence...

Microsoft is offering up a $30,000 reward to security researchers who can find vulnerabilities within the Microsoft Teams application. Over the last year, the remote working and collaboration platform has seen a massive increase in users as a result of the coronavirus pandemic. This new bug bounty programme potentially highlights the importance of the application's role in Microsoft's future plans, as most companies only offer this type of programme for their most important services. The...

The email accounts belonging to the Trump administration's head of homeland security (DHS) along with those of members of cybersecurity staff have been hacked by suspected Russian hackers. The hackers specifically targeted the members of cybersecurity staff whose job it is to hunt threats from foreign countries. The accounts were breached in the SolarWinds intrusion, which caused dispute around how the US government can protect individuals, companies and institutions, if it is unable to protect...