Uncategorized

By now I’m sure that you have heard about the easyJet data breach. More than 9 million customers suffered breached personally identifiable information (PII), and some 2,000 customers had their card details “viewed”. Hugo van den Toorn, manager of offensive security at Outpost 24 warned that "often after such a breach, information will be sold on to underground marketplaces, this kind of data is then often used in various attacks: Credit card details for making...

Verizon published today its yearly Data Breach Investigation Report, based on real-world data from 41,686 security incidents and 2,013 data breaches provided by 73 data sources, both public and private entities, spanning 86 countries worldwide. The report provides a most useful snapshot of the current state of the fight against cybercrime, and highlights not only the weaknesses in organisations' approach to security, but also the areas where cybercriminals seem to be focussing their efforts. IT...

By Kevin Bailey, Managing Director & Principal - Security Research at Omnisperience  When I look back at the cybersecurity industry, in the early 2000s it involved a few hundred vendors battling for their share of a ~$750 million market. The hacker was motivated by the chase and notoriety rather than monetary rewards. Fast forward to 2020 and sophisticated hackers have now established a matrix structure comparable to multinational corporations with the discipline, skills, diversity of...

Technology has undoubtedly made life more bearable during a global pandemic. From drones being rolled out to deliver medicines and essential items across Ireland, to the rise of video conferencing platforms, such as Zoom creating a more connected community of remote workers. The affordances of our ever increasingly digital epoch have made isolation more tolerable by providing interconnectivity and entertainment. However, there is a darker side to the rapid uptake of technology during this international...

Last week, Qualys launched its latest solution, Vulnerability Management Detection and Response - VMDR, which integrates asset visibility, vulnerability management, detection and response across global hybrid-IT environments all from a single app. It was presented to the world with an informative webinar (available here). With the recognition that this launch is taking place during unprecedented times, we caught up with Sumedh Thakar, President and Chief Product Officer, and Philippe Courtot, Chairman and CEO at Qualys,...

Dr. Edward Amoroso of TAG Cyber and Rich Powell, famed Mad Magazine illustrator, have teamed up to deliver a light-hearted look at our current working from home culture through the eyes of a caricatured cybersecurity specialist: Charlie Ciso. The book’s protagonist is based on the CISO (Chief Information Security Officer) job role who, “is the person who’s blamed if a company gets hacked”. This delightful book offers tips, tricks and amusing anecdotes that are sure...

By Angel Duan, Marketing and Communications specialist at OneLogin  The security industry, like every other vertical on earth, is adjusting to the new normal ushered in my the global Covid-19 pandemic, and the waves of home working that it has ushered in. In many ways, the culture of remote working which the security industry has fostered for years means we are one of the better positioned industries for this change in culture. However, it doesn’t mean that we...

KnowBe4 has launched a new feature to its PhishER product called PhishRIPTM, which helps security professionals remove, inoculate and protect against email threats faster.    Technical controls do not filter out all of the malicious emails that come into a user’s inbox. Various research has shown that phishing, spam and malware attachments still make it through email filters. Mimecast notes filters are missing 12% of unwanted emails. According to research by the University of Plymouth in the UK, 75% without links and 64% with links of potential phishing messages made it...

This week, the UK government was given the green light to collect mobile data of British citizens to try and bring a halt to the spread of the coronavirus. While many may see this as a breach of privacy, the independent privacy watchdog, the Information Commissioners Office (ICO) have granted permission for this to go ahead. Initially, the government had enquired about leveraging the data from mobile phones to observe and track that the public...

Citizen Lab, a research group within the University of Toronto, has been able to drive a proverbial truck through the encryption used by video conferencing app Zoom. In a report where the group said the video platform was not suitable for sharing secrets nor government or business use, Citizen Lab found Zoom has been rolling its own encryption scheme as part of a custom extension to the real-time transport protocol. Further, instead of using AES-256...