Collaborate Disseminate
A fake Windows Update spam campaign has been dropping the Cyborg ransomware. The mail delivery mechanism claims to come from Microsoft. It directs the potential victim to an attachment described as the ‘latest critical update’.
read more
Continue reading Fake Windows Update Delivers Cyborg Ransomware
Stalkerware is a growing social problem with potentially dire personal consequences. It is a complex issue with no simple solution — but ten organizations have come together to create the global Coalition Against Stalkerware to provide victim support … Continue reading Technology Firms and Victim Advocacy Groups Launch Coalition Against Stalkerware
“The retail industry is experiencing more breaches than any other industry in 2019,” starts a new report on threats to the retail industry. This is somewhat surprising to those accustomed to see healthcare, education, manufacturing and finance at the h… Continue reading Online Retailers Ill-Prepared for Holiday Season
Threat statistics come from a variety of sources: reported incidents, vendor telemetry, internet traffic and dark web analysis. All have value, and all have limitations.
read more
Continue reading Value and Limitations of Vendor Telemetry and Reported Incidents
Firewall Maintenance Needs Automation to Prevent Misconfiguration
read more
Companies subject to PCI DSS security requirements are audited once per year, yet many of these companies continue to be breached. It is not that PCI DSS fails, but that companies fail to maintain compliance from one audit to the next. According to Ver… Continue reading PCI DSS Compliance Between Audits is Declining: Verizon
805,000 Cybersecurity Professionals Are Currently Estimated to be Working in the U.S., Study Finds
read more
Continue reading Cybersecurity Workforce Gap: 145% Growth Needed to Meet Global Demand
Cybersecurity startup firm Sepio Systems, with headquarters in Gaithersburg, Maryland and R&D in Tel Aviv, Israel, has closed a $6.5 million Series A funding round. The funding was led by Hanaco Ventures and Merlin Ventures, with the participation … Continue reading Sepio Systems Raises $6.5 Million to Defend Against Rogue Hardware
The Most Effective Cyber Defense is Having an Agile Leadership Team that Prioritizes Risk Based Upon Relevant Threats
read more
Continue reading The Future of Cyber Through the Eyes of an Intelligence Firm
Identity deception attacks continue to grow, but the type of attack seems to be changing. During Q3, 2019, phishing campaigns impersonating brands dropped by 6% over the previous quarter. Attacks impersonating individuals, however, increased by 10%. Th… Continue reading Vendor Email Compromise is Latest Identity Deception Attack