Collaborate Disseminate
In 2010, SANS reported that knowledge of the Pass the Hash attack first described some thirteen years earlier was still poor. By 2019, knowledge of the threat vector that has now been in the public domain for more than two decades has improved, but is … Continue reading Pass the Hash Remains a Poorly Defended Threat Vector
An analysis of more than 2.2 billion emails between April and June (Q2) 2019 exposes the current tactics, techniques and targets of contemporary attackers.
read more
Continue reading Email Attacks Using Cloud Services are Increasing
Despite everything that has happened over the last four years, the security posture of the 2020 presidential candidates’ campaign websites is little better and often worse than it was in 2016.
read more
Continue reading 2020 Presidential Candidate Campaign Websites Fail On User Privacy
NIST has published a draft Zero Trust Architecture (ZTA) special publication (SP.800.207). The purpose is to develop a technology-neutral lexicon of the logical components of a zero trust strategy, and to define ZTA, describe possible deployment scenar… Continue reading NIST’s Zero Trust Taxonomy Introduces Components, Threats and Migration Routes
An ongoing cybercrime campaign that started as early as December 2018, has avoided widespread detection through a combination of stealth tactics and hiding in plain sight.
read more
Continue reading MasterMana Campaign Combines Stealth, Free Services and Old Malware
The Marsh/Microsoft 2019 Global Risk Perception Survey is a follow-on to a similar survey published in February 2018 (conducted in 2017). SecurityWeek criticized the earlier survey results for not including a specific cybersecurity function among the r… Continue reading Organizations Prefer Quick Technological Fix Over Deep-Rooted Cyber Resiliency: Report
Medical Practice Closing Doors Permanently After Ransomware Destroys Patient Records and Backups
read more
Continue reading Medical Practice Closing Permanently After Ransomware Attack
New York Attorney General Letitia James filed a lawsuit against Dunkin’ Donuts in the Supreme Court of the State of New York on Thursday, September 26, 2019. The complaint alleges fraudulent, deceptive and illegal conduct, and focuses on Dunkin’ Donuts… Continue reading Dunkin’ Donuts Sued by New York’s State Attorney General Over Data Breaches
A new survey of CISO attitudes conducted by Symantec and Dr Chris Brauer of Goldsmiths, University of London will surprise few CISOs, but should be required reading for other business leaders. It describes adrenaline junkies that fear burnout and worry… Continue reading There Is Life for the CISO After a Breach
In a paper warning about the evolution of what it calls ‘disruptionware’, the Institute for Critical Infrastructure Technology (ICIT) highlights ransomware and RDP access as the current focus of a new development that “sees adversaries disrupting busin… Continue reading Organizations Warned of Dual Threat Posed by RDP and Disruptive Ransomware