The average 10,000-employee company spends $3.7 million a year dealing with phishing attacks, according to a new report from the Ponemon Institute.The report, which surveyed 377 IT professionals in companies ranging in size from less than 100 to ove…
Phishing is a $3.7-million annual cost for average large company Read More »
Just 1 percent of employees are responsible for 75 percent of cloud-related enterprise security risk, and companies can dramatically reduce their exposure at very little additional cost by paying extra attention to these users.According to newly-rel…
Most corporate risk due to just 1% of employees Read More »
More than 70 percent of Android phones from LG have a plugin installed that exposes them to the Certifi-gate remote support app vulnerability, where a rogue application — or even a text message — can completely take over a device.
Check Point Sof…
LG phones most exposed to new Certifi-gate vulnerability Read More »
To get more value out of stolen personal information, cybercriminals doubled their rate of account creation fraud this summer, according to a report report from NuData Security.Between May and July, 57 percent of the 500 million account creations an…
Fraud rate doubles as cybercriminals create new accounts in users’ name Read More »
When a security incident involves virtual machines in either a public or private cloud environment, the recovery costs double compared to that of a traditional environment, according to a new report from Kaspersky Lab.In a survey of 5,500 companies …
Virtualization doubles the cost of security breach Read More »
CrytoLocker is malware cyber criminals use to encrypt the contents of a computer until users pay up.But that’s only one type of cyber extortion, according to Tim Francis, enterprise cyber lead at Hartford, Conn.-based insurance company Travelers.Cri…
Tips for protecting your business against cyber extortion Read More »
Digital rights management might be coming back to the enterprise, experts say, as long as usability issues don’t get in the way.You might remember the technology from a decade or so ago. Companies were worried about employees accidentally sending se…
DRM could be making a comeback in the enterprise Read More »
The war against Islamic State has resulted in a cyber attack on US soil, and other such attacks are likely, according to a new report from Bat Blue Networks.According to the security firm, the cyber vandalism of websites for a sheriff’s office and c…
Report: ISIS-related cyber war reaches Alabama Read More »
The number of distributed denial-of-service attacks in the second quarter of this year was more than double that of last year, according to a new report from Akamai.The number of megasized attacks, larger than 100 gigabits per second, also doubled, …
DDoS attacks double as criminals leverage home routers, WordPress plugins Read More »
As information security becomes a more important topic of interest for corporate boards, CISOs are increasingly asked to step up and brief boards on cyber issues — which means they need to become better communicators, and have a broader understandi…
CISOs facing boards need better business, communication skills Read More »
Traditionally, blacklists of malicious IP addresses are assembled using honeypots and intrusion detection systems but a new approach, analyzing chatter on the dark and open Web, can find malicious addresses that would have been otherwise missed.Acco…
New IP address blacklist based on Web chatter Read More »
Darkhotel — the elite spying group discovered luxury hotels’ Wi-Fi networks last year — is back with new targets, new defensive capabilities, and a new zero-day exploit courtesy of the Hacking Team leak.According to a report released Monday by Kas…
Darkhotel expands targets, ups sophistication, leverages Hacking Team exploit Read More »
Darkhotel — the elite spying group discovered luxury hotels’ Wi-Fi networks last year — is back with new targets, new defensive capabilities, and a new zero-day exploit courtesy of the Hacking Team leak.According to a report released Monday by Kas…
Darkhotel expands targets, ups sophistication, leverages Hacking Team exploit Read More »
LAS VEGAS — The growth of the Internet of Things will offer new ransomware opportunities for cybercriminals, according to a report released Thursday by Symantec.
Researchers were able repackage existing Android ransomware — Android.Simplocker — inside a new Android Wear project, and when the phone was infected, so was a paired smartwatch. Once executed, the ransomware made the watch unusable, and also encrypted files stored on the watch’s SD card.
Researchers said they haven’t seen any examples of this kind of ransomware in the wild yet.
According to a report by Symantec researcher Kevin Savage, cybercriminals switch their focus to a different malware type approximately every two or three years of reaching a peak.
To read this article in full or to leave a comment, please click here
Report: IoT is the next frontier for ransomware Read More »
The criminals behind the GameOver ZeuS Botnet didn’t just steal $100 million from banks — they also spied on several countries on behalf of Russia, according to a Black Hat presentation Wednesday by an FBI agent and two other security experts.
These countries included Ukraine, Turkey, Georgia, and OPEC members, according to FBI special agent Elliott Peterson.
The gang, which called itself Business Club, had two leaders, one of whom was Evgeniy Bogachev who is still uncaught. The FBI is offering a $3 million reward for information leading to Bogachev’s arrest.
[ Follow all the stories out of Black Hat 2015 ]
To read this article in full or to leave a comment, please click here
GameOver ZeuS criminals spied on Turkey, Georgia, Ukraine and OPEC Read More »
