Uncategorized

Cryptojackers, trojanised crypto-currency miners, continue to spread across computers globally, while also becoming stealthier and increasingly avoiding detection. The new analysis was published by Microsoft's 365 Defender Research Team on Thursday. The technical write up reads: “In the past several months, Microsoft Defender Antivirus detected cryptojackers on hundreds of thousands of devices every month." “These threats also continue to evolve: recent cryptojackers have become stealthier, leveraging living-off-the-land binaries (LOLBins) to evade detection.” Cryptojackers are using...

The progression into the digital age is inevitable. It’s necessary to embed innovative technologies into all aspects of business, from decision-making to daily operations or risk being left behind. But how is an organisation supposed to protect itself from cyberattacks without degrading its ability to extract value from technology investments? That’s easier said than done. The rush to modernise systems and operations may introduce vulnerabilities across the business, therefore, exposing it to a great many...

According to a confidential United Nations (UN) report seen by Reuters on Thursday, North Korea stole hundreds of millions of dollars worth of crypto assets in at least one major hack. Also, the document allegedly suggests that the US previously accused North Korea of carrying out cyber-attacks to fund its nuclear and missile programs. The document stated: "Other cyber activity focusing on stealing information and more traditional means of obtaining information and materials of value...

New research has revealed the top email subjects clicked on in phishing tests were those related or from Human Resources, according to the latest 'most clicked phishing tests' conducted by KnowBe4. In fact, half of those that were clicked on had subject lines related to Human Resources, including vacation policy updates, dress code changes, and upcoming performance reviews. The second most clicked category were those send from IT, which include requests or actions of password...

Reportedly, the Lockbit ransomware gang has claimed the recent attacks on the Italian tax agency and the Canadian town of St Marys. On Friday, the local administration at St Marys explained in an update that the attack occurred last Wednesday, locking an internal server and encrypting data on it. The statement read: “Upon learning of the incident, staff took immediate steps to secure any sensitive information, including locking down the town’s IT systems and restricting...

As reported last week, over 69 million users of the site Neopets, a popular virtual pet website, may have had their data compromised in the first known US mega breach of the year. The company took to Twitter to confirm the news. Neopets is owned by Viacom. The Tweet said: “Neopets recently became aware that customer data may have been stolen. We immediately launched an investigation assisted by a leading forensics firm. We are also...

China has fined Didi Global, a global mobility technology, around $1.2 billion (8.026 billion yuan) for violating the country's network security law, personal information protection law, and data security law. The country's cybersecurity regulator, the Cyberspace Administration of China (CAC), also fined two Didi executives 1 million yuan each for the infringements. The ride-hailing service had its app removed from the web by the Chinese authorities last year, prompting an investigation to start. The CAC...

The FBI is preparing for a wave of multilayered digital assaults and disinformation campaigns targeting the 2022 US midterm election process. The perpetrators of these attacks are likely to be the state governments of China, Russia and Iran with the goal of sewing confusion and mistrust in the process. Systematic influence operations "cause panic or lack of confidence in our election infrastructure,” FBI director Christopher Wray said during a cybersecurity conference at Fordham University in...

A report released by Panaseer, a cybersecurity company, last week suggests that cyber insurance companies are looking for new ways to assess risk as they grow increasingly wary of rising claims. The 2022 Cyber Insurance Market Trends Report found that there is a lack of confidence in underwriting processes. Nearly one in 10 respondents admitted that they were 'not that confident' in their underwriting capabilities for cyber insurance. Only 44% of insurers said that they...

HackerOne, a vulnerability coordination and bug bounty platform, announced that a former employee of theirs had used their access to sensitive information regarding the vulnerabilities of clients to turn a quick profit. The unnamed individual’s system access was terminated just 24 hours after a tip off from a customer revealed they had “improperly accessed information in clear violation of our values, our culture, our policies, and our employment contracts.” The employee appeared to have contacted...