News

PhishMe has teamed up with the University of Cambridge and London School of Economics to compile its 2015 Enterprise Phishing Susceptibility Report, a document analysing employee behaviour pertaining to highly effective phishing scenarios. Looking at over 8 million emails in their research, PhishMe were able to identify which type of attack emails have the highest penetration rates and provide guidance on how to reduce the risk posed. Phishing is the most common cyberattack vector in...

Gavin Millard, EMEA technical director, Tenable Network Security shares 2016 predictions with IT Security Guru The Internet was never designed to support the needs of the modern enterprise. It is too insecure, and was always intended to be so. Sir Tim Berners-Lee, inventor of the World Wide Web, designed the Internet to make computers talk to each other and share information. Sir Tim has said that, at the point he invented the World Wide Web...

Join Ondrej Krehel of LIFARS LLC as we examine in detail the process of data breach response from the perspective of an elite IR team member. It will cover the steps taken to properly respond to a breach caused by a sophisticated hacker and go over some real-world case studies. This webinar was hosted as part of Security Serious Week 2015 - find out more at www.securityserious.com. https://www.brighttalk.com/webcast/11399/175825

In this video from BAE Systems, Chief Product Officer Neal Watkins highlights five things companies and senior executives should be looking for in a strong defence against cyber attack, providing a straightforward, easy to digest check list for non-technical managers who are looking to understand the threats that face their business. Flight check your company’s cyber security Today our personal lives, society’s essential services and just about every business is online, and that means cyber threats are...

As we prepare to close the book on 2015, no will argue that it’s not been eventful, particularly for IT practitioners. For a number of years, experts have been talking about how ‘smart’ technology will impact the way we live with the promise of spectacular functionality in the technology we utilise. With that in mind, experts at MWR InfoSecurity have offered the following insights to what 2016 may have in store for us. The devices...

Boards of Directors have an inescapable legal responsibility to protect their organisation’s assets and shareholder value against risks. Where does cybersecurity fit in the agenda? Many boards lack the knowledge, awareness and confidence to connect security to the business. In this webcast, moderator Paul Edon, Director of Customer Services at Tripwire, will provide a variety of perspectives from experienced professionals in the industry — including Amar Singh UK CISO for Elsevier, Ray Stanton EVP Professional...

By Eric Rand, consultant at Brown Hat Security and guest blogger at AlienVault.   Every few days on 'Infosec Twitter', I come across another example of a site that breaks password manager functionality by disabling the ability to paste into the password field. Generally, customer service representatives for those sites will vaguely explain that this is being done for "security reasons" - despite the fact that current best practices recommend the very password managers that this is...

Ultrasound is supposed to be our friend. However, the security world was made aware last week of a technology being used by an outfit named "SilverPush" that is utilizing a new and unusual method for tracking mobile phone users with ultrasound signals. The basic story is that the company is embedding a tracking beacon in advertisement audio using ultrasound frequencies that are outside of the range of human hearing. The microphone on a cell phone...

The use of third parties is unavoidable in today’s global economy. The growing use of third party suppliers and business partners, whilst bringing significant business advantages, also exposes organisations to substantial risk, such as financial loss, reputational damage, regulatory prosecution and fines from major breaches of security. In the last few years we’ve witnessed many of these risks being realised; examples have included major breaches of security and costs to recover escalating into millions of...

Duo Labs recently purchased 14 Dell Laptops as part of a larger research project. What they found made them oddly uncomfortable; 'eDellRoot' on the list of trusted certificates, not expiring til 2039! They've written up a report on their research and conclusions, which can be found here: https://www.duosecurity.com/static/pdf/Dude,_You_Got_Dell_d.pdf The Findings There are two certificates found on Dell machines, including a trusted eDellRoot root certificate In the wild, we identified that one of the systems using these certificates...