Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
4 Industries Account for Majority of Global Ransomware Attacks
Threaded  |  Newest First  |  Oldest First
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
4/25/2017 | 1:27:40 PM
Financial
> The business and professional services sector

 

That's very broad, no?  Is financial services included in that (and, if so, what other verticals are included)?  Or is it a synonym for "financial services"?

If no to both questions, then color me surprised.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
4/27/2017 | 12:09:31 PM
Re: Financial
"Is financial services included in that "

I would say yes, that is probably the biggest part.
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
4/26/2017 | 8:39:43 AM
Surprised of Heathcare's percentage
I am surprised that healthcare wasn't more affected. Typically due to the nature of their industry security plays second fiddle to patient care. Meaning the security safeguards for protection are typically not as stringent.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
4/27/2017 | 12:10:20 PM
Re: Surprised of Heathcare's percentage
" healthcare wasn't more affected."

It may be that healthcare is more protected.
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
4/30/2017 | 6:11:17 PM
Re: Surprised of Heathcare's percentage
@Dr. T. Coming from healthcare, I would be suprised this was the case. Also, just from the cases last year like Hollywood Hospital and Titus seemed to back up that assertion.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
4/29/2017 | 6:28:27 PM
Re: Surprised of Heathcare's percentage
@Ryan: My experience has been pretty much the opposite.  What experiences or whatnot inform your own perspective?
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
4/30/2017 | 6:08:04 PM
Re: Surprised of Heathcare's percentage
@Joe. I was a Cyber Security Analyst for a series of hospitals under one network. Unless this was an anomaly which from my peers in the region didn't seem to be. My perspective was that patient care was the number 1 priority, which I would have to concur with. This leads to the premise of a free flow of data from practice to practice being paramount. In accordance with this idea, security safeguards in place were typically less stringent. I found this to premise to be the opposite after my transition to financial services. I was in heatlhcare for 3+ years. What has your perspective been?
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
4/27/2017 | 12:07:39 PM
professional services
Maybe professional services is where the money is, they expect to get it easily. 
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
4/27/2017 | 12:10:41 PM
government
I am surprised that government is on 19%. I would assume they would want to protect information from being released to public.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
4/27/2017 | 12:12:18 PM
France a mere 5%
Wonder why people would not care about France.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
4/29/2017 | 6:27:34 PM
Re: France a mere 5%
@Dr.T: I doubt it's people "not car[ing] about France" (after all, money's money), but could be for a variety of other reasons.  Perhaps the attacks weren't nearly as successful in France.  Perhaps people in France, being *far* more privacy conscious than people in the US, don't give out their emails as much.  Or perhaps the US is specifically targeted more because of a stereotype of dumb rich Americans.  Or so on.


COVID-19: Latest Security News & Commentary
Dark Reading Staff 4/10/2020
Researcher Hijacks iOS, macOS Camera with Three Safari Zero-Days
Kelly Sheridan, Staff Editor, Dark Reading,  4/3/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-18375
PUBLISHED: 2020-04-10
The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the session of a currently logged-in user and access the management console.
CVE-2019-18376
PUBLISHED: 2020-04-10
A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or a network device that intercepts/logs traffic to MC, to obtain CSRF tokens and use them to perform CSRF attacks against MC.
CVE-2019-7305
PUBLISHED: 2020-04-10
Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this can lead to data leakage, information di...
CVE-2020-8832
PUBLISHED: 2020-04-10
The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacke...
CVE-2020-1633
PUBLISHED: 2020-04-09
Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configured as a Broadband Network Gateway (BNG) and reach the EVPN leaf node, causing a stale MAC address entry. This could cause legitimate traffic to be discarded, lea...