Tue.Jul 07, 2020

article thumbnail

Ransomware + Exfiltration + Leaks = Data Breach

Data Breach Today

Data-Leaking Extortionists' Revised Playbook Goes Way Beyond Ransomware Ransomware-wielding attackers continue to pummel organizations. But labeling these as being just ransomware attacks often misses how much these incidents involve serious network intrusions, exfiltration of extensive amounts of data, data leaks and, as a result, reportable data breaches.

article thumbnail

[Podcast] The Impact of a Pandemic on Information Governance

AIIM

When I think back to this time last year, I’m shocked by just how different things are since the start of COVID-19. Businesses have gone through major shifts in record time - projects like moving to a remote office environment that often takes months to complete were carried out in just a few days or weeks. Now, as our time with COVID goes on, some of the focus has shifted from short-term business concerns like how to set up a remote working strategy , how to ensure security while working from h

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Russian BEC Gang Targets Hundreds of Multinational Companies

Data Breach Today

Researchers: Cosmic Lynx Group Has Hit Businesses in Over 40 Countries A newly uncovered Russia-based business email compromise gang has been targeting hundreds of large, multinational corporations in over 40 countries since 2019, according to the security firm Agari.

Security 295
article thumbnail

China Issues Draft Data Security Law

Hunton Privacy

When compared to the EU or the U.S., China has lacked a comprehensive data protection and data security law that regulates in detail requirements and procedures relating to the collection, processing, control and storage of personal data. In recent years, China has seen developments on data protection both in legislation and in practice. Recently, another significant draft law on data security was issued by the Chinese legislative authority.

Security 140
article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

Microsoft Seizes Domains Used for COVID-19 Phishing Scam

Data Breach Today

Software Giant Asked Federal Court for Injunction Against Unnamed Hackers A U.S. federal court has issued an injunction that gives Microsoft permission to seize control of several malicious domains being used to operate a COVID-19-themed phishing scam, according to recently unsealed court documents.

Phishing 236

More Trending

article thumbnail

More Than 1,000 IoT Security Guidelines: Which One to Use?

Data Breach Today

Study Suggests Actionable Recommendations Would Improve IoT Security With more than 1,000 IoT security guidelines, recommendations and best practices, which ones should an organization follow? Researchers at Carleton University in Canada say 91 percent of the guides are outcome-based, which are not necessarily easy for manufacturers to follow.

IoT 236
article thumbnail

Russian Hackers Targeting Remote Workers

Adam Levin

A Russia-based hacking group is exploiting the current Covid-19 pandemic to target and compromise U.S. companies with multiple strains of malware, according to a new report. Cybersecurity firm Symantec released a warning that the Russian hacking group “Evil Corp” has been behind a widespread hacking campaign against over thirty U.S. organizations, including eight Fortune 500 companies.

article thumbnail

Purple Fox Malware Targets More Vulnerabilities

Data Breach Today

Proofpoint Says Gang Upgraded Exploit Kit The developers behind the Purple Fox fileless downloader malware recently upgraded their operation and are now targeting two new vulnerabilities to gain access to networks, according to a report by security firm Proofpoint.

Access 225
article thumbnail

What Ventana says about the future of finance and analytics

IBM Big Data Hub

Follow @IBMAnalytics. Ventana Research is a leading benchmark research and advisory services organization, providing some of the most comprehensive analyst and research coverage for business.

Analytics 102
article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

Purple Fox Malware Targets Fresh Vulnerabilities

Data Breach Today

Proofpoint Says Gang Upgraded Exploit Kit The developers behind the Purple Fox fileless downloader malware recently upgraded their operation and are now targeting two new vulnerabilities to gain access to networks, according to a report by security firm Proofpoint.

Access 191
article thumbnail

First-Ever Russian BEC Gang, Cosmic Lynx, Uncovered

Threatpost

Researchers warn that Cosmic Lynx targets firms that don't use DMARC and uses a "mergers and acquisitions" pretext that can lead to large sums of money being stolen.

article thumbnail

Social Media Platform Fined 100,000 USD by Washington State AG for COPPA Violations

Hunton Privacy

On June 24, 2020, the Washington State Attorney General (“Washington AG”) announced that it had settled an enforcement action against the owners of the “We Heart It” social media platform for alleged violations of the Children’s Online Privacy Protection Act (“COPPA”) and the Washington State Consumer Protection Act. Under the consent decree , the defendants must pay $100,000, with an additional $400,000 suspended contingent upon compliance with the consent decree.

article thumbnail

Credit-Card Skimmer Has Unlikely Target: Microsoft ASP.NET Sites

Threatpost

A campaign discovered by Malwarebytes Labs in mid-April has lifted credentials from a number of e-commerce portals.

article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

How computer vision and AI can revolutionize supply chain and grid management for utilities

CGI

How computer vision and AI can revolutionize supply chain and grid management for utilities. In a century of automotive progress that started with the Ford Model T, learning to drive a car has become an almost universal rite of passage, and good driving skills are a point of pride for many people. The driving forces behind autonomous vehicle technology are computer vision (CV) and artificial intelligence (AI).

article thumbnail

IoT Security Principles

Schneier on Security

The BSA -- also known as the Software Alliance, formerly the Business Software Alliance -- is an industry lobbying group. They just published "Policy Principles for Building a Secure and Trustworthy Internet of Things.". They call for: Distinguishing between consumer and industrial IoT. Offering incentives for integrating security. Harmonizing national and international policies.

IoT 105
article thumbnail

The 5 tech improvements banks and other financial institutions will need to maintain AML compliance

DXC Technology

Banks have been focused on identifying and preventing money laundering and terrorist financing for about two decades, using both manpower and technology. While banks have worked to combat perpetrators’ increasingly sophisticated tactics, regulators have identified needed improvements in overall process management and end reporting. The major technology improvements required by banks and financial institutions to […].

article thumbnail

Cerberus Banking Trojan Unleashed on Google Play

Threatpost

The Cerberus malware can steal banking credentials, bypass security measures and access text messages.

Access 101
article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

EDP Renewables Confirms Ransomware Attack

Dark Reading

Its North American branch was notified of the attack because intruders reportedly gained access to 'at least some information' stored in its systems.

article thumbnail

Keeper Threat Group Rakes in $7M from Hundreds of Compromised E-Commerce Sites

Threatpost

Researchers warn that Keeper, using Magecart code, will launch increasingly sophisticated attacks against online merchants worldwide in the coming months.

article thumbnail

Russian Cyber Gang 'Cosmic Lynx' Focuses on Email Fraud

Dark Reading

Cosmic Lynx takes a sophisticated approach to business email compromise and represents a shift in tactics for Russian cybercriminals.

91
article thumbnail

NYDFS Announces a Series of Virtual Currency Initiatives

Data Matters

On June 24, 2020, the New York State Department of Financial Service (NYDFS) announced a series of virtual currency initiatives aimed at providing additional opportunities and clarity for BitLicense and limited-purpose trust company applicants and licensees. These initiatives include: A proposed framework for obtaining a conditional BitLicense when partnering with an existing licensee.

Mining 68
article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

Authors of Purple Fox EK adds 2 Microsoft exploits

Security Affairs

The authors of the Purple Fox EK have integrated two new exploits for Microsoft vulnerabilities to the Purple Fox EK. The Purple Fox EK continues to be improved by its authors that implemented two new exploits for Microsoft critical- and high-severity Microsoft vulnerabilities. The Purple Fox EK appears to have been built to replace the notorious RIG exploit kit (EK) in the distribution of the Purple Fox Trojan.

article thumbnail

Citrix Bugs Allow Unauthenticated Code Injection, Data Theft

Threatpost

Admins should patch their Citrix ADC and Gateway installs immediately.

Security 112
article thumbnail

Looks Like Russian Hackers Are on an Email Scam Spree

WIRED Threat Level

A group dubbed "Cosmic Lynx" uses surprisingly sophisticated methods—and targets big game.

article thumbnail

Drone Path Often Reveals Operator's Location

Dark Reading

The threat posed by drones to critical infrastructure and other operational technology is made more serious by the inability of law enforcement to locate operators, researchers say.

92
article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

#DevDay 2020 from the comfort of home

Micro Focus

Recent world events regarding the pandemic of 2020 have emphasized the importance of digital readiness and modernizing core business applications now more than ever. But where to begin? Allow me to introduce the Micro Focus Virtual #DevDay 2020 series. What is #DevDay? #DevDay is our flagship event that unites COBOL and mainframe application developers, and.

63
article thumbnail

Cell phones, robocalls, and text messages – two pronouncements

Data Protection Report

On July 6, 2020, the U.S. Supreme Court upheld most of the federal law that prohibits “robocalls” to cell phones but struck down the exception for collection of debts owed to the federal government. ( Barr v. American Association of Political Consultants , No. 19–631 (July 6, 2020) (2020 WL 3633780).

article thumbnail

New Certified IG Officers Association (CIGOA) vows to bring a global high-level IG certification to market

IG Guru

Check out the video below introducing the new CIGO association and certification. The post New Certified IG Officers Association (CIGOA) vows to bring a global high-level IG certification to market appeared first on IG GURU.