Author Archives: Jeff Peters

Weekly Cyber Risk Roundup: Third-Party Breaches and Apache Struts Issues

Posted on by

Twitter is the week’s top trending cybercrime target after malicious actors leveraged a third-party analytics service known as Twitter Counter to hijack a number of Twitter accounts and post inflammatory messages written in Turkish along with images of Nazi swastikas. Hundreds of accounts were compromised, the Associated Press reported. Forbes magazine, the Atlanta Police Department,… Read More Continue reading Weekly Cyber Risk Roundup: Third-Party Breaches and Apache Struts Issues→

Weekly Cyber Risk Roundup: Cloudflare Aftermath and Online Stores Breached

Posted on by

The Cloudflare software bug that resulted in the potential leaking of sensitive data remained as the top trending cybercrime event of the past week as researchers continued to investigate and quantify the effects of the incident. In a March 1 blog post, Cloudflare CEO Matthew Prince described the “Cloudbleed” impact as “potentially massive” and said… Read More Continue reading Weekly Cyber Risk Roundup: Cloudflare Aftermath and Online Stores Breached→

Weekly Cyber Risk Roundup: Cloudflare Bug Discovered, Typos Lead to Theft

Posted on by

This week’s biggest story is the Cloudflare software bug discovered by Google researchers and disclosed Thursday that could have compromised private information such as HTTP cookies, authentication tokens, HTTP POST bodies, and other sensitive data. “The bug was serious because the leaked memory could contain private information and because it had been cached by search… Read More Continue reading Weekly Cyber Risk Roundup: Cloudflare Bug Discovered, Typos Lead to Theft→

Weekly Cyber Risk Roundup: Yahoo’s Value Drops and New Regulations

Posted on by

Yahoo is once again back in the news for a variety of reasons, including a reported third data breach. However, it appears the reports of a “new breach” stem from additional notifications that were sent to some users on Wednesday regarding forged cookies being used to access accounts. Yahoo first disclosed that it was notifying… Read More Continue reading Weekly Cyber Risk Roundup: Yahoo’s Value Drops and New Regulations→

Weekly Cyber Risk Roundup: New PoS Breaches and Simple Attacks

Posted on by

The week’s top trending event was the compromise at Freedom Hosting II, which has been estimated to host as much as 20 percent of active dark web sites. As a result, thousands of dark web sites were taken offline, and the stolen data has since been widely shared. Security researcher Troy Hunt, who reviewed some… Read More Continue reading Weekly Cyber Risk Roundup: New PoS Breaches and Simple Attacks→

Weekly Cyber Risk Roundup: Ransomware and Insecure Databases Dominate Headlines

Posted on by

Ransomware and extortion continue to dominate the headlines in 2017. The past week saw several widely reported incidents involving service outages and lost data due to infections, as well as warnings that malicious actors are attempting to extort organizations via the threat of DDoS attacks. The Austrian hotel Romantik Seehotel Jägerwirt paid approximately $1600 in… Read More Continue reading Weekly Cyber Risk Roundup: Ransomware and Insecure Databases Dominate Headlines→

Posted in SBN

Weekly Cyber Risk Roundup: DDoS Attacks Disrupt Services and SEC Probes Yahoo

Posted on by

A series of distributed denial-of-service (DDoS) attacks against financial institutions led to customers of Lloyds Banking Group experiencing intermittent outages over a 48-hour period and was the top trending cybercrime event over the past week. The Guardian reported that the attacks hit Lloyds, Halifax and Bank of Scotland from January 11 to January 13. IBTimes… Read More Continue reading Weekly Cyber Risk Roundup: DDoS Attacks Disrupt Services and SEC Probes Yahoo→

Posted in SBN

Weekly Cyber Risk Roundup: Ransomware Disrupts Organizations and Massive Data Leaks

Posted on by

Extortion is once again the top trending cybercrime issue as concern continues around the theft, destruction and blackmail related to thousands of insecure MongoDB, Elasticsearch, CouchDB and Hadoop Distributed File System installations. While those stories led much of the past week’s discussion, there was also a steady stream of reports of organizations being infected with… Read More Continue reading Weekly Cyber Risk Roundup: Ransomware Disrupts Organizations and Massive Data Leaks→

Posted in SBN

Weekly Cyber Risk Roundup: More Extortion and Marijuana Retailers’ Woes

Posted on by

Extortion continues to dominate the cybercrime headlines in 2017 with the week’s top two trending targets being the successful ransom at Los Angeles Valley College and continued extortion attempts around MongoDB databases. It was less than a year ago that Hollywood Presbyterian Medical Center became a national news story by paying a $17,000 ransomware demand… Read More Continue reading Weekly Cyber Risk Roundup: More Extortion and Marijuana Retailers’ Woes→

Posted in SBN

Organizations Struggle with Third Party and Supply Chain Cybercrime, Says New Report

Posted on by

The past year saw organizations struggle with third-party issues as malicious actors shifted their tactics towards weak points in the supply chain and exploited the interconnected nature of cybercrime, according to a new report from SurfWatch Labs.“One of the most telling statistics in all of SurfWatch Labs’ evaluated cyber threat data is the rise of CyberFacts related… Read More Continue reading Organizations Struggle with Third Party and Supply Chain Cybercrime, Says New Report→