Tue.Oct 06, 2020

article thumbnail

Rethinking Email Security in the Face of Fearware

Dark Reading

E-mail messages preying on fear have ramped up since the COVID-19 outbreak, raising questions about security's reliance on historical data about past attacks to predict the future

Security 101
article thumbnail

Why Intrusive Monitoring Technology Is Ineffective

Data Breach Today

Kroll's Richard Dailly on Better Ways to Fight Supply Chain Fraud Using intrusive technologies to check staff behavior in an effort to fight against supply chain fraud is ineffective, says Richard Dailly, managing director in Hong Kong at the security firm Kroll, who explains why.

Security 246
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

3 Simple Reasons Why Information Governance NEEDS Automation

AIIM

Digitally Transforming IS the Future. Most organizations and departments have a mandate to continuously improve operations. A conventional change agenda involves better tools and technology, better behaviors, and better processes, all focused on generating better efficiencies and improved productivity - a transition called Digital Transformation. Ultimately, AIIM believes this Digital Transformation extends beyond conventional change.

article thumbnail

Visa Alert: POS Malware Attacks Persist

Data Breach Today

Devices at 2 Hospitality Firms Targeted Despite the shift to e-commerce during the pandemic, attacks against POS devices persist. For example, Visa's payment fraud disruption team uncovered recent malware attacks on POS devices used by two North American hospitality companies.

253
253
article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

Swiss-Swedish Diplomatic Row Over Crypto AG

Schneier on Security

Previously I have written about the Swedish-owned Swiss-based cryptographic hardware company: Crypto AG. It was a CIA-owned Cold War operation for decades. Today it is called Crypto International , still based in Switzerland but owned by a Swedish company. It’s back in the news : Late last week, Swedish Foreign Minister Ann Linde said she had canceled a meeting with her Swiss counterpart Ignazio Cassis slated for this month after Switzerland placed an export ban on Crypto International , a

More Trending

article thumbnail

CISA alert warns of Emotet attacks on US govt entities

Security Affairs

The CISA agency is warning of a surge in Emotet attacks targeting multiple state and local governments in the US since August. The Cybersecurity and Infrastructure Security Agency (CISA) issued an alert to warn of a surge of Emotet attacks that have targeted multiple state and local governments in the U.S. since August. During that time, the agency’s EINSTEIN Intrusion Detection System has detected roughly 16,000 alerts related to Emotet activity.

article thumbnail

OnDemand | The Risks of Cloud Computing

Data Breach Today

Remote Working with Teams & Zoom View this webinar to learn about the growth in cloud use, the need for security, the examples of cloud data loss concerns and how we address them.

Cloud 210
article thumbnail

A sophisticated cyberattack hit the International Maritime Organization (IMO)

Security Affairs

The United Nations International Maritime Organization (IMO) disclose a cyber attack that disrupted its IT systems. The United Nations International Maritime Organization (IMO) is a global standard-setting authority for the safety, security and environmental performance of international shipping. The UN Maritime Organization is the United Nations that develops a regulatory framework that is adopted on a global scale to ensure the safety and security of shipping and the prevention of marine and a

Security 118
article thumbnail

Hacking Group Used Rare UEFI Bootkit for Espionage

Data Breach Today

Kaspersky: 'MosaicRegressor' Framework Targeted Nongovernment Organizations, Diplomats A Chinese-speaking hacking group used a rare Unified Extensible Firmware Interface bootkit dubbed "MosaicRegressor" to target nongovernment organizations and diplomatic missions with an espionage campaign for two years, the security firm Kaspersky reports.

Security 211
article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

Apple's T2 Security Chip Has an Unfixable Flaw

WIRED Threat Level

The Checkm8 vulnerability that exposed years of iPhones to jailbreaking has finally been exploited in Macs as well.

Security 134
article thumbnail

Ransomware Attack Hits Clinical Trial Software Vendor

Data Breach Today

Ryuk Incident Shines Spotlight on Medical Supply Chain Threats A recent ransomware attack on a provider of software used by firms involved with COVID-19 vaccine development and other drug clinical trials illustrates increasing cyberthreats facing medical industry supply chain partners.

article thumbnail

Using a WordPress flaw to leverage Zerologon vulnerability and attack companies’ Domain Controllers

Security Affairs

Using a WordPress flaw (File-Manager plugin–CVE-2020-25213) to leverage Zerologon (CVE-2020-1472) and attack companies’ Domain Controllers. Recently, a critical vulnerability called Zerologon – CVE-2020-1472 – has become a trending subject around the globe. This vulnerability would allow a malicious agent with a foothold on your internal network to essentially become Domain Admin with just one click.

article thumbnail

John McAfee Indicted on Federal Tax Evasion Charges

Data Breach Today

Also Faces Civil Charges Tied to Promoting Initial Virtual Coin Offerings John McAfee, the founder of the cybersecurity firm that bears his name who also is a serial entrepreneur and a former presidential candidate, has been charged with federal income tax evasion. Plus, the SEC is accusing him of promoting initial virtual coin offerings without disclosing he was paid to do so.

article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

What is data loss and how does it work?

IT Governance

Data loss refers to the destruction of sensitive information. It’s a specific type of data breach, falling into the ‘availability’ category of data security (the other two categories being ‘confidentiality’ and ‘integrity’). Data can be lost in several ways – occurring either accidentally or maliciously – and will cause numerous problems for your organisation.

IT 98
article thumbnail

10 Years Since Stuxnet: Is Your Operational Technology Safe?

Dark Reading

The destructive worm may have debuted a decade ago, but Stuxnet is still making its presence known. Here are steps you can take to stay safer from similar attacks.

IT 107
article thumbnail

Microsoft Zerologon Flaw Under Attack By Iranian Nation-State Actors

Threatpost

Microsoft warns that the MERCURY APT has been actively exploiting CVE-2020-1472 in campaigns for the past two weeks.

Security 107
article thumbnail

Do's and Don'ts for School Cybersecurity Awareness

Dark Reading

Remote learning has introduced an array of new cyberthreats to American families and schools, but this can be an educational moment for all involved.

article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

Welcoming the Canadian Government to Have I Been Pwned

Troy Hunt

Following in the footsteps of many other national governments before them , I'm very happy to welcome the Canadian Centre for Cyber Security to Have I Been Pwned. The Canadian Centre for Cyber Security now has full and free access to query all Canadian federal government domains across both past and future breaches. Canada's inclusion in the service brings the total to 11 federal governments across North America, Europe and Australia.

article thumbnail

New Research Finds Bugs in Every Anti-Malware Product Tested

Dark Reading

Products from every vendor had issues that allowed attackers to elevate privileges on a system -- if they already were on it.

IT 109
article thumbnail

John McAfee has been arrested in Spain and is awaiting extradition

Security Affairs

The legendary cyber security expert John McAfee has been indicted on charges of tax evasion by the DoJ, authorities arrested him in Spain. The popular cyber security expert and cryptocurrency evangelist John McAfee has been indicted on charges of tax evasion by the Department of Justice (DOJ). The expert has been arrested in Spain and is awaiting extradition.

article thumbnail

Google Brings Password Protection to iOS, Android in Chrome 86

Dark Reading

Chrome 86 will alert users when stored passwords are compromised, and block or warn of insecure downloads, among other security updates.

Passwords 104
article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

Facing data scientist shortage, organizations turn to ML automation and embedded analytics

DXC Technology

Data-driven insights are wholly dependent on the ability of enterprises to collect and analyze data for actionable information about customers, markets, product development, and operations. Up until recently this has meant hiring data scientists who know how to create machine-learning algorithms, build predictive computing models, integrate data from multiple sources (including unstructured data), and uncover […].

article thumbnail

Zerologon Vulnerability Used in APT Attacks

Dark Reading

MERCURY, the Iranian advanced persistent threat group, is using Zerologon in a new series of attacks detected by Microsoft.

105
105
article thumbnail

APT Attack Injects Malware into Windows Error Reporting

Threatpost

The fileless attack uses a phishing campaign that lures victims with information about a workers' compensation claim.

article thumbnail

How Netflix Makes Security Decisions: A Peek Inside the Process

Dark Reading

A senior information security risk engineer explains how Netflix's risk management program helps businesses leaders make key decisions.

article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

COVID-19 Clinical Trials Slowed After Ransomware Attack

Threatpost

The attack on eResearchTechnology potentially slowed down coronavirus research worldwide, and researchers suggest a nation-state actor could be behind the incident.

article thumbnail

Malware for Ad Fraud Gets More Sophisticated

Dark Reading

Facebook says SilentFade campaign disabled notifications that could have warned users that their accounts had been compromised.

123
123
article thumbnail

A Poker Pro Accused of Cheating Wants $330M in Damages

WIRED Threat Level

Mike Postle claims he was the victim of an elaborate online campaign to tar him as a fraud—and he's suing a dozen defendants.