Insights
Webscrapers are bots that crawl public sites looking for information such as products, inventories, descriptions, pricing, anything. Research shows in some industries they can account for 40-60% of web traffic significantly skewing analytics, overloading servers and internet access. Worse is when they steal your images and logos allowing cyber criminals to clone your site and steal traffic. Even when used solely for legitimate purposes, webscrapers affect your business by rendering the analytics used for marketing and product plans inaccurate.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
The Covid-19 pandemic has changed priorities for companies and their IT departments. Enabling work from home and other necessary shifts have been the focus of the effort and budgets. But the need for compliance has not gone away nor will it. Do not neglect compliance with all that is going on.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Telco networks used to use proprietary protocols and devices. But over the past few years as the technology changed, telcos switched to commercial networking providers. The networks did get hacked before, but the use of commercial networking equipment makes them more vulnerable. The intent of the hacks is to penetrate client company networks and insert phishing and other attacks.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
A new security advisory issued by Microsoft warns of a vulnerability in the DNS Servers that would allow a denial of service attack.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Law enforcement has warned against paying in a ransomware attack. Companies did pay thinking it would be a faster path to restoring business as usual. New research shows that not only isn’t it a faster path to business as usual, it can double the costs.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
An online marketplace selling access to hacked servers is continuing to grow becoming the largest vendor of this information. Sadly some of the hacked servers belong to hospitals, state governments and financial institutions.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
As we have mentioned earlier, cyber criminals are quick to recognize what captures peoples’ attention, and capitalize on it. Now, it is Covid-19. Many people are looking for information or advice on Covid-19. Cyber criminals know this and create realistic looking sites or send phishing emails that offer information, PPE (Personal Protective Equipment), or faster government stimulus checks or anything else to get us to click. Don’t do it!
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
The widely used Thunderbolt interface has been shown to have a flaw allowing someone with access to the port to bypass passwords and other security. A feature of Thunderbolt is direct access to memory, and it is this that allows attackers access. The good news is that the attackers need physical access to the device.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Computer services firm Cognizant has released information saying the cost of the ransomware attack that hit it in April was over $50 million.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Passwords have been a security tool for decades. But their weaknesses have been well documented. Now a Microsoft VP provides more information on getting rid of passwords.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Finding security bugs is serious but finding them in software and hardware designed to provide security is concerning. Fortunately, it appears these bugs were found by security companies who notified Cisco and who in turn, is notifying clients. The affected items are the Adaptive Security Appliance and Firepower Threat Defense system. Some of the bugs are rated as high-severity. Clients of these Cisco products are advised to apply patches as soon as possible.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
While ransomware attacks may be down, other attacks including phishing related to Covid-19 are rising fast. Cyber criminals are adept at finding ways to grab our attention and make us click or do other dangerous actions. The high demand for Covid-19 information is one of those things we are all interested in.
CISOs are the ones working hard to keep us safe and these are the things keeping them up at night.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
One positive aspect of the Corona-19 pandemic is that ransomware attacks are down significantly from 2019 levels. Sadly, this is not expected to continue as the pandemic declines.
https://healthitsecurity.com/news/ransomware-success-declines-amid-covid-19-but-resurgence-is-likely
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
SAP notified a number of customers that an internal review showed that several products failed to meet security standards of contracts or legal obligations. The products affected were cloud based. The company is still working on fixes. Customers should watch for updates from Cisco and apply them as soon as possible.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
A previously relatively quiet hacking group launched a massive attack against close to 1 million WordPress sites. The attack leveraged a number of vulnerabilities attempting to steal credentials. WordPress recommends that users apply updates to themes and plugins. WordPress suggests the use of an application firewall to block these and other attempts at compromise.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
The global pandemic has shifted workers from the office to the home leading to a higher reliance on cloud services. But security of the cloud services remains with the client company.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Not surprisingly cyber-attacks on mobile platforms are increasing. Also, not surprisingly, COVID-19 is a popular theme to get people to click.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
You receive a tipoff that your systems have been breached. Do you notify customers and suppliers? And if so, what information do you reveal?
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Cyber criminals have found at least one major bank that will reveal the last three transactions if caller id matches the phone number on file. The criminals are spoofing your number to get the last three transactions which can be used in conjunction with the spoofed caller id to access the account. And the attack gets more complicated.
https://krebsonsecurity.com/2020/04/would-you-have-fallen-for-this-phone-scam/
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
A bug discovered recently was patched by Oracle in mid-April. But now attacks on that bug have begun and Oracle issued an alert advising all Weblogic customers to install the patch.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.