News

Cybersecurity continues to be a challenge for businesses of all sizes, especially as workers are shifting to a remote workforce globally. According to recent research by Promon, the Oslo-based mobile security company which last year revealed flaws in the Home Office’s Brexit app, two-thirds of remote workers in the UK have not been given any cybersecurity training from employers in the past 12 months, while 77% say they aren’t worried about their cybersecurity while working remotely....

Banner Health Inc.'s $8.9 million deal to end claims tied to a 2016 data breach gained final approval from a federal judge in Arizona. The settlement, approved by Judge Susan Bolton of the U.S. District Court for the District of Arizona April 21, will pay up to $500 to each class member and up to $2.9 million to plaintiffs’ attorneys. The breach exposed personal information of the hospital operator’s 2.9 million patients and beneficiaries, including...

Cyber security professionals working for the World Health Organisation (WHO) have "never been busier", according to its CIO, as top officials are being targeted by constant phishing campaigns. The organisation has had to increase its security resources while it deals with the outbreak of COVID-19, the WHO's chief information officer (CIO), Bernardo Mariano, told Bloomberg. This is because cyber attacks on the organisation have significantly increased since mid-March when the coronavirus moved up to pandemic...

More than 80 coronavirus-related phishing and scam websites have been taken down just one day after the UK's National Cyber Security Centre asked for the public to report suspicious emails. On Tuesday, the NCSC, in collaboration with the government and the City of London Police launched the 'Suspicious Email Reporting Service' urging people to alert the authorities about potential cyberattacks and scams – whether they're related to coronavirus or something else. Now, just 24 hours...

  Millions of records belonging to users of a fitness technology app were exposed online for almost a month due to a misconfigured database, including a swathe of personal details. Approximately 40GB worth of information belonging to users of Kinomap, a service that creates immersive workout videos for people on rowing and cycling machines as well as treadmills, was discovered by security researchers in March. Source: IT Pro

Hackers are turning their attention to streaming services in an ongoing bid to capitalize on the current COVID-19 pandemic and increase their own profits, according to Mimecast. The email security vendor revealed that it had detected the registration of over 700 suspicious domains designed to impersonate the Netflix brand in under a week. The recently launched Disney+ service is also coming under increasing scrutiny from black hats, it claimed. The reason is simple: COVID-19-related government...

  Four serious security vulnerabilities in the IBM Data Risk Manager (IDRM) have been discovered that can lead to unauthenticated remote code execution (RCE) as root, according to analysis – and a proof-of-concept exploit is available for version 2.0.3. However, IBM has not yet patched the problem. IDRM is a software platform that aggregates threat data from disparate security systems, in order to perform enterprise security risk analysis. According to security researcher Pedro Ribeiro from...

The scam, which was discovered by the Lanop Accountancy Group, involves phishing emails to companies about the scheme that purport to be from the first permanent secretary and chief executive of HMRC, Jim Harra. Sent via the email address [email protected], official HMRC branding was used by the culprits, and the message asks for the bank details of the recipient. Approximately 50 company owners reported the scam to Lanop upon noticing the false address alongside the...

The National Cyber Security Centre today launched a new scam reporting service to allow citizens to report fake, fraudulent and suspicious emails, including those that offer coronavirus-related services. The NCSC today announced a cross-governmental ‘Cyber Aware’ campaign which includes advice for people to protect passwords, accounts, and devices and also includes specific precautionary guidelines for personal and professional use of video conferencing services such as how to set up accounts, arrange chats, and protect the...

Ransomware attacks on the United States have diminished significantly and are "now at a level not seen in several years," according to cybersecurity company Emsisoft. In new research published today, Emsisoft found a marked drop in ransomware attacks on US entities coinciding with the onset of the COVID-19 health crisis. In 2019, ransomware impacted 966 government agencies, educational establishments, and healthcare providers in the US. Emsisoft experts who anticipated an even higher number of attacks...