News
-
"Mitigating Cloud Risks Starts With Full Visibility of Shadow IT"Netskope and GovLoop conducted a survey to which 230 public sector agency managers and employees responded and provided insight into their understanding of cloud security risks. About 42 percent of the respondents cited good awareness of cloud security… -
"Researchers Disclose New Side-Channel Attacks Affecting All AMD CPUs"Researchers from the Graz University of Technology and the CISPA Helmholtz Center for Information Security have disclosed new timing and power-based side-channel attacks, which affect all CPUs made by AMD. The researchers were among those who discovered…
-
"US Treasury Tracks $5.2bn of Ransomware Transactions in Six Months"The US Treasury has tracked $5.2bn worth of Bitcoin transactions likely to have been ransomware payments in the first half of 2021. Its Financial Crimes Enforcement Network (FinCEN) bureau hinted in a new report that even this amount might only be…
-
"Olympus Investigates Potential Cyber-Attack"Olympus has launched an investigation after detecting a potential cybersecurity incident in part of its IT system. The Japanese manufacturer of optics and reprography products said that suspicious activity was spotted on October 10. The possible threat…
-
"US Government Warns of Insider and Ransomware Threat to Water Plants"The FBI, the Cybersecurity and Infrastructure Security Agency (CISA), the Environmental Protection Agency (EPA), and the National Security Agency (NSA) have issued an alert warning of ongoing malicious cyber-activity targeting the country’s water and…
-
"Crypto Romance Scam Drains $1.4M"Researchers at Sophos Labs have unearthed a fraudulent scam that exploits iPhone users looking for love via dating apps. Under the CryptoRom scam, victims are contacted through their dating app account, and the scammer gains the victim’s trust by…
-
"New "Yanluowang" Ransomware Variant Discovered"Security researchers at Symantec are warning of a newly discovered ransomware variant currently being used in targeted attacks. The new ransomware is dubbed “Yanluowang” after the .yanluowang extension it adds to encrypted files. The…
-
"AI Fake-Face Generators Can Be Rewound To Reveal the Real Faces They Trained On"Several studies call into doubt the notion that neural networks are black boxes that do not reveal anything about what is happening inside. Researchers at the University of Caen Normandy in France performed a membership attack to expose hidden training…
-
"Hackers Can Fake Signed Documents Because of a Flaw in LibreOffice and OpenOffice"OpenOffice and LibreOffice have pushed updates to address a vulnerability that could allow an attacker to spoof signed documents. The vulnerability is classified as mild in severity, but its exploitation could lead to severe consequences. The…
-
"Applying Behavioral Psychology to Strengthen Your Incident Response Team"A team of researchers from George Mason University (GMU), Dartmouth College, and HP did a study on the inner workings of cybersecurity incident response teams (CSIRTs), which led to the development of a framework that applies behavioral psychology…
-
"Microsoft Says It Mitigated Largest-Ever DDoS Attack"Technology giant Microsoft has disclosed that it mitigated a DDoS attack of 2.4 terabytes per second, which targeted an undisclosed European customer using its cloud computing service Microsoft Azure. According to Microsoft, the attack, observed in…
-
"Brewer's Token Gaffe Causes Massive PII Breach"An authentication error left the personal data of hundreds of thousands of BrewDog customers and Equity for Punks shareholders exposed for a year and a half. Researchers at security consulting and testing company Pen Test Partners discovered the…