Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Retail Security Threat Season is in Full Swing
Christmas shopping season is over, but shopping -- and threats to retailers and their customers -- is still going strong.
21st Century Oncology Faces $2.3M HIPAA Settlement Cost after Breach
Company to pay US Department of Health and Human Services over potential HIPAA violations after patient medical data was stolen by cyberthieves.
China Shuts Down 13,000 Websites for Breaking Internet Laws
The government says its rules are to protect security and stability, but some say they are repressive.
Avoiding Micro-Segmentation Pitfalls: A Phased Approach to Implementation
Micro-segmentation is very achievable. While it can feel daunting, you can succeed by proactively being aware of and avoiding these roadblocks.
17 Things We Should Have Learned in 2017 But Probably Didn't
The worm has returned and the Yahoos have all been exposed, but did 2017 teach us any genuinely new lessons we shouldn't already have known?
My Cybersecurity Predictions for 2018, Part 3: Protecting Killer Cars
Death by autonomous auto is coming unless the industry gets security very right. The question is really whether it's already too late.
Jailed Hacker Claims Proof He Breached DNC on Russia's Orders
A Russian national in jail for hacking the Democratic National Committee says a data signature proves he acted on the Kremlin's orders.
Mozilla Issues Critical Security Patch for Thunderbird Flaw
Mozilla released five patches for Thunderbird security vulnerabilities, including one critical buffer overflow bug affecting Windows machines.
The Disconnect Between Cybersecurity & the C-Suite
Most corporate boards are not taking tangible actions to shape their companies' security strategies or investment plans, a PwC study shows.
Rapid Growth in Security Market Raises Question: How to Pick a Startup
VCs weigh in with their advice on how to select a startup with staying power when purchasing security solutions and services.
Nissan Canada Finance Alerts 1.13 Million Customers of Data Breach
Attackers gain access to personal information of Nissan Canada Finance and Infiniti Financial Services Canada customers.
Hacker Targeted Huawei Router 0-Day in Attempt to Create New Mirai Botnet
Thousands of attempts have been made to exploit a zero-day vulnerability in the Huawei home router HG532.
The Financial Impact of Cyber Threats
Determining the financial impact of specific IT vulnerabilities is a good way to prioritize remediation and prevent attacks.
The Coolest Hacks of 2017
Robots, voting machines, machine learning, and the wind were among the hacks security researchers pulled off this year.
Nasties Abound: Symantec's Q3 Threat Report
Symantec's Threat Report from the 2017 Q3 shows that malware writers are busier than ever.
6 Tips to Protect Against Technical Support Fraud
Just when you’re having fun over the holidays and not paying attention, you can be hit with a tech support scam. Here's how to stay safe into the new year.
2017 Security Predictions through the Rear Window
If you're going to forecast the future, go big.
Cloud Security Is a Shared Responsibility
In the answer to a question from a recent webinar, editor Curtis Franklin looks at who's responsible for data security in the cloud.
Exposed File From Ancestry's RootsWeb.com Contains Data on 300,000 Users
A file containing hundreds of thousands of RootsWeb users' email, login information, and passwords was found externally exposed, genealogy site says.
CISOs Play Rising Role In Business
CISO hiring trends show more external hires, longer tenures, and an increase in MBAs as tech pros are required to understand the business.
EtherDelta Hack Begins Rocky Weekend for Crypto
Popular cryptocurrency exchange EtherDelta announces a potential DNS attack and suspends service just days before Bitcoin hit a five-day drop.
Hit the Cyber Underground for the Hottest Travel Deals
You can get everything from inexpensive flights and hotels to fake passports in the cyber underground, says Trend Micro.
Network Printer & Scanner Spoofing Campaign Targets Millions
Cybercriminals distribute malicious email attachments purportedly coming from three common brands of network printer-scanner devices.
Block Threats Faster: Pattern Recognition in Exploit Kits
When analysts investigate an indicator of compromise, our primary goal is to determine if it is malicious as quickly as possible. Identifying attack patterns helps you mitigate quicker.
CISO Holiday Miracle Wish List
If CISOs could make a wish to solve a problem, these would be among the top choices.
Businesses Go on Pre-Holiday Cloud Acquisition Spree
VMware, McAfee, and Trend Micro announce a series of acquisitions that indicate a strong focus on cloud security.
Russia's Fancy Bear APT Group Gets More Dangerous
Encryption and code refreshes to group's main attack tool have made it stealthier and harder to stop, ESET says.
Digital Forensics & the Illusion of Privacy
Forensic examiners don't work for bounties. They do what is required to catch criminals, pedophiles, or corporate embezzlers, and now their important security research is finally being acknowledged.
US Census Bureau: Data Exposed in Alteryx Leak Already Public
The US Census Bureau says no personally identifiable information it collected was compromised in this week's Alteryx leak.
Fileless Malware Attacks Hit Milestone in 2017
Non-malware attacks account for the majority of all attacks this year, and ransomware grows to a $5 billion industry, new data shows.
Facebook Helps Users Detect Phishing Emails
A new Facebook tool shares recent security-related emails so users can verify whether messages are legitimate.
The Hard Work of Pointing Fingers
Pointing the finger at a perpetrator is difficult. Pointing it at the right perpetrator is even harder. That doesn't stop many organizations from trying.
Why Network Visibility Is Critical to Removing Security Blind Spots
You can't secure what you can't see. Here are four ways to shine a light on the dark spaces of your corporate infrastructure.
Small,Targeted Ransomware Attacks Emerge
Cybercriminals narrow their focus on specific industries, geographies, or size for a better return on investment, security experts say.
Be a More Effective CISO by Aligning Security to the Business
These five steps will you help marshal the internal resources you need to reduce risk, break down barriers, and thwart cyber attacks.
My Cybersecurity Predictions for 2018, Part 2: GDPR Hype Is Hype
GDPR is the biggest thing in IT privacy and security in a decade. Or its not. Joe Stanganelli on what 2018 will hold in GDPR-driven privacy.
9 Banking Trojans & Trends Costing Businesses in 2017
New Trojans appeared, old ones resurfaced, and delivery methods evolved as cybercriminals set their sights on financial data.
Attack Attribution Tricky Say Some as US Blames North Korea for WannaCry
There's not enough evidence to conclusively tie the rogue regime to the ransomware attacks, some security experts say.
IoT Security Is a Matter of Life & Death
When the IoT enters the hospital room, its security becomes a matter of literal life and death.
Five Arrested for Cerber, CTB-Locker Ransomware Spread
Authorities arrest three Romanian suspects for spreading CTB-Locker malware and two for a ransomware case linked to the United States.
Breach Reveals Data on All US Households
Information on every US household has now been stolen. What does that mean for IT security?
Security Worries? Let Policies Automate the Right Thing
By programming 'good' cybersecurity practices, organizations can override bad behavior, reduce risk, and improve the bottom line.
Another Cyberattack Spotted Targeting Mideast Critical Infrastructure Organizations
Operation Copperfield appears focused on data theft and reconnaissance, Nyotron says.
My Cybersecurity Predictions for 2018, Part 1: Following Trends & the FTC
2017 was a wild ride in cybersecurity. It's looking like 2018 won't offer any calmer ride.
Microsoft Office Docs New Vessel for Loki Malware
Loki malware, built to steal credentials, is distributed via Microsoft Excel and other Office applications rigged with malicious 'scriptlets' to evade detection.
New Database Botnet Leveraged for Bitcoin Mining
Attackers are quietly building an attack infrastructure using very sensitive machines.
Massive Cloud Leak Exposes Alteryx, Experian, US Census Bureau Data
A misconfigured Amazon Web Services S3 storage bucket exposed sensitive data on consumers' financial histories, contact information, and mortgage ownership.
Dirty Practices Make for Difficult Security
Data hygiene is low on the priority list for most IT users, and IT security departments end up cleaning up the mess.
Trump Adviser: North Korea Waged WannaCry Attack
White House declares the North Korean government as perpetrators of the epic ransomware attack that spread around the globe in early May.
Comprehensive Endpoint Protection Requires the Right Cyber Threat Intelligence
CTI falls into three main categories -- tactical, operational, and strategic -- and answers questions related to the "who, what, and why" of a cyber attack.
|
How Enterprises are Attacking the Cybersecurity ProblemConcerns over supply chain vulnerabilities and attack visibility drove some significant changes in enterprise cybersecurity strategies over the past year. Dark Reading's 2021 Strategic Security Survey showed that many organizations are staying the course regarding the use of a mix of attack prevention and threat detection technologies and practices for dealing with cyber threats.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
