article thumbnail

TrickGate, a packer used by malware to evade detection since 2016

Security Affairs

TrickGate is a shellcode-based packer offered as a service, which is used at least since July 2016, to hide malware from defense programs. The TrickGate packer was primarily used in attacks aimed at the manufacturing sector, and other attacks aimed at the education, healthcare, government, and finance industries.

article thumbnail

Data breaches grow across UK education sector

IT Governance

A recent freedom of information request by chartered accountants UHY Hacker Young reveals a worrying rise in reported data breaches across the UK education sector. The highest number of breaches in 2016-17. In 2016–17, UK schools reported the highest number of breaches (703) across the sector, an increase of 4% on the previous year.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw

Security Affairs

Microsoft has observed APT28 using GooseEgg in post-compromise activities against various targets, including government, non-governmental, education, and transportation sector organizations in Ukraine, Western Europe, and North America. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Military 110
article thumbnail

GUEST ESSAY: Why there’s no such thing as anonymity it this digital age

The Last Watchdog

Here are a few unexpected examples of supposedly anonymous data reversal: •In 2016, the Australian government released what they called the “anonymous” (i. She’s a devoted security and privacy enthusiast with a focus on public education and communication. . But anonymous data really doesn’t exist anymore. million people.

Metadata 230
article thumbnail

German BSI warns of 17,000 unpatched Microsoft Exchange servers

Security Affairs

Most affected organizations are educational institutions such as schools and universities, healthcare facilities including clinics and doctors’ practices, nursing services, legal and tax advisory firms, local governments, and a multitude of medium-sized enterprises. ” reads the alert published by the BSI.

article thumbnail

The DoD Isn't Fixing Its Security Problems

Schneier on Security

The 2015 Cybersecurity Culture and Compliance Initiative outlined 11 education-related goals for 2016; the GAO found that the Pentagon completed only four of them. GAO repeatedly identified lack of status updates and accountability as core issues within DoD's cybersecurity awareness and education efforts.

IT 107
article thumbnail

What it Takes to Be Your Organisation’s DPO or Data Privacy Lead

IT Governance

Quality DPO training educates and prepares the person for the role. ‘GDPR’ has become a familiar term. We recognise the visible and consumer-facing aspects of it in our everyday lives. What’s not so evident is whether organisations are keeping their practices fully up to date and in line with the GDPR.