News

  Smart cameras and baby monitors can be watched by criminals over the internet by default, security chiefs warn. The National Cyber Security Centre (NCSC) is advising people to tweak the settings after buying them. Easy-to-guess default passwords might let a hacker secretly observe a home through connected devices, it said. Source: BBC

The UK Home Office has breached European data protection regulations at least 100 times in its handling of the EU Settlement Scheme (EUSS). IDs have been lost, documents misplaced, passports have gone missing, and applicant information has been disclosed to third parties without permission in some of the cases, according to a new report. Source: ZD Net

Tesco is issuing new cards to 600,000 Clubcard account holders after unearthing a security issue. The supermarket giant said it believed a database of stolen usernames and passwords from other platforms had been tried out on its websites, and may have worked in some cases. No financial data was accessed and its systems have not been hacked, it added. Source: BBC

Mobile and technology news website BGR India’s website was recently hacked and the data collected from the website has been leaked on the dark web. The data included email IDs, passwords and other information of the former employees of the company. Source: Inc 42

  Fraudsters have targeted UK taxpayers with a total of 1,524,449 phishing emails, calls and text messages purporting to be from Her Majesty's Revenue and Customs (HMRC) over the last two years, according to official figures. The data reveals the staggering number of suspected fake correspondence reported to HMRC’s official complaints email for phishing scams [email protected] - by members of the public in 2019 and 2018. Source: The Commentator

  A precision parts maker for space and defense contractors has confirmed a “cybersecurity incident,” which TechCrunch has learned was likely caused by ransomware. Visser Precision, a Denver, Colorado-based manufacturer, makes custom parts for a number of industries, including automotive and aeronautics. In a brief statement, the company confirmed it was “the recent target of a criminal cybersecurity incident, including access to or theft of data.” Source: Tech Crunch

  Railroad construction and maintenance firm Railworks Corp. has disclosed a ransomware attack that may have also resulted in the breach of personally identifiable information. The attack took place on Jan. 27 and email notifications were sent to those affected by the attack between Jan. 30 and Feb. 7. Data potentially stolen in the attack included names, addresses, driver license numbers, government-issued IDs, Social Security numbers, dates of birth and other employee information. Those affected...

WordPress is, by far, the most widely used website building technology on the internet. According to the most recent statistics, more than 35% of all internet websites run on versions of the WordPress CMS (content management system).Due to its huge number of active installations, WordPress is a massive attack surface. Attempts to hack into WordPress sites are like a constant hum in the background of all internet traffic, going on at any given time. Source:...

Unfortunately, ransomware is impacting businesses of all sizes across the globe. This means that critical systems and applications are encrypted by malicious actors and will only be decrypted if a ransom is paid. This will effect all but the most prepared enterprises, and as recent reports show, even prepared businesses can suffer. Offline backups of business critical information can be make or break when it comes to mitigating a ransomware attack. However unfortunately, some backups...

The UK's cybersecurity agency has updated its guidance on what to do after a ransomware attack, following a series of incidents where organisations were hit with ransomware, but also had their backups encrypted because they had left them connected to their networks. Keeping a backup copy of vital data is a good way of reducing the damage of a ransomware attack: it allows companies to get systems up and running again without having to pay...