Category: Cybersecurity Insiders

COOs Will Make Impact-Based Security a Mainstream Requirement

Cyber risk management accounts for the probability of attacks on operational technology (OT) at large industrial facilities, including all the components that control equipment, automation, safety, network communications, their infrastructure, and more. However, a gap often exists between the CISO…

HawkEye Malware: Technical Analysis

HawkEye, also known as PredatorPain (Predator Pain), is a malware categorized as a keylogger, but over the years, it has adopted new functionalities that align it with the capabilities of other tools like stealers. History of HawkEye HawkEye emerged before…

Ransomware spreading through Microsoft Teams

Black Basta ransomware, a notorious cybercrime group, has recently resurfaced in the news for its new and alarming method of spreading file-encrypting malware through Microsoft Teams. Teams, a widely used messaging and collaboration app, has become a target for this…

Protecting Against Inevitable Insider Threats

The seven pillars of the Department of Defense (DOD) Zero Trust Reference Architecture provide a comprehensive framework for securing today’s organizations. However, the data layer – arguably the most critical and foundational pillar – remains insufficiently addressed. This gap is…

How to Safeguard Mobile Banking Apps from Cyber Risk

The convenience of mobile banking has transformed financial services, making banking apps more accessible and user-friendly. According to the Statista Research Department, more than 66% of the population in 2023 used online banking services, and this trend is expected to…

Starbucks targeted by a ransomware attack

A recent ransomware attack targeting Blue Yonder, a company providing supply chain software, has caused notable disruptions in the IT systems of its client, Starbucks, a major player in the food and beverage industry. The attack primarily affected employee information,…

How Android and iOS Devices Are Affected by Stalkerware

Stalkerware, a type of malicious software that allows someone to secretly monitor and track another person’s device, has become a growing concern for mobile users. While this software is commonly used by malicious individuals to invade privacy, it can also…

2024 VPN Risk Report

Introduction In the past, Virtual Private Networks (VPNs) have been the go-to solution for remote access. However, with the surge in remote work and distributed workforce models and the rise of cloud adoption, the basic connectivity provided by VPNs is…

British businesses lost $55 billion from Cyber Attacks

For years, we’ve heard countless reports of individuals and businesses lamenting the significant losses they’ve suffered due to cyber-attacks. But a recent report from Howden reveals a staggering figure: UK businesses have lost a total of $55 billion (£47 billion)…

Microsoft seizes websites distributing Phishing email kits

Microsoft has recently issued a significant warning regarding the activities of a cyber-crime group named ONNX Marketing Services, which has been identified as distributing highly sophisticated phishing email kits. These kits have the potential to compromise Microsoft Customer Accounts across…

The Silent Revolution in Cybersecurity: Going Passwordless

The digital landscape is evolving rapidly, with it, the threats we face online. As cyberattacks grow in sophistication, so must the defenses that protect our sensitive information. Among the groundbreaking shifts in cybersecurity, one revolution is unfolding silently yet powerfully:…

How to test if your smart phone is spying on you

In today’s digital landscape, data privacy and security are top concerns for users, especially those relying on smartphones, as these devices may inadvertently record conversations and transmit data to remote servers. If you’re worried about potential eavesdropping by your smartphone,…

Advanced Radar Screening Key to Safer Public Spaces

The unfortunate reality is that – for the safety of the people attending – security measures are now an absolute requirement in large public spaces, including performance venues, airports, train stations and even malls. While government, community, and public safety…

How Data Breaches Erode Trust and What Companies Can Do

Data breaches can be expensive. The average ransomware attack costs organisations about $47,000, according to the 2024 Data Breach Investigations Report, and it can even soar into the millions. Business email compromise (BEC) attacks often target executives with valuable company…

Consequences of Bowing Down to Hackers in Ransomware Attacks

Ransomware attacks have become one of the most dangerous cybersecurity threats in recent years. As cybercriminals increasingly target individuals, businesses, and even government organizations, the choice of whether or not to pay the ransom has become a contentious issue. In…

2024 Cloud Security Report -Checkpoint

Introduction With businesses increasingly reliant on cloud technologies, the security of cloud platforms has escalated into a significant concern that highlights their potential and susceptibility. Traditional security measures often fall short in addressing the dynamic and sophisticated nature of threats…

Top industries facing cyber threats

While consumers are no strangers to phishing emails, fraudulent SMS messages, and social media scams, the scale and complexity of cyberattacks aimed at critical sectors go far beyond these relatively simple threats. Entire industries and governmental bodies face increasingly sophisticated…

Bitsight acquires Cybersixgill for $115 Million

In a significant move to bolster its cybersecurity portfolio, Bitsight, a leading cybersecurity startup based in Massachusetts, has officially announced its acquisition of Cybersixgill, an Israeli-based dark web security specialist, for $115 million. This deal marks a key step in…

The invisible cyber shield that combats morphing threats

Cyber threats are evolving at an alarming rate. AI-powered malware, advanced phishing techniques, and adaptive attacks can by-pass traditional security measures, leaving today’s defences inadequate in isolation. Businesses need a new, invisible shield for comprehensive protection.  This year’s (2024) Verizon…

Hacking Groups Collaborate for Double Ransom Scheme

Kaspersky, the cybersecurity firm originally based in Russia, has uncovered a troubling trend where cybercriminal groups are teaming up to maximize profits by deploying two types of malicious attacks in succession. This collaborative strategy involves spreading information-stealing malware first, followed…

Satanic Threat Actor demands $100k ransom from Hot Topic

Hot Topic, the popular retailer known for its pop-culture merchandise and fashion items, is embroiled in a fresh data breach controversy. A cybercriminal group, identified as ‘Satanic,’ is reportedly demanding a ransom of $100,000 to delete a stolen dataset that…

How to Protect Your Smart Device from Spying Applications

In today’s digital age, smart devices—such as smartphones, tablets, smart TVs, and even home assistants—are integral to our everyday lives. However, as their functionality increases, so do the risks of security breaches. One significant concern is the growing threat of…

The Growing Threat of Ransomware in 2024: What You Need to Know

Ransomware attacks have become a regular fixture in the headlines, wreaking havoc across industries, leaving organizations racing to restore operations, and customers worrying about the safety of their data. The fallout from a ransomware incident reaches well beyond operational disruptions—reputational…

Best Practices in Penetration Testing: Ensuring Robust Security

Penetration testing (or “ethical hacking”) is an essential practice for identifying and addressing security vulnerabilities in systems, networks, and applications. By simulating real-world cyberattacks, organizations can proactively assess their defenses and strengthen their cybersecurity posture. However, penetration testing requires skill,…

5 Identity Theft Challenges Every Business Needs to Tackle

As more businesses move online, establishing an e-commerce channel is essential to meet buyer expectations for speed and convenience. But as more activity is conducted online, businesses face a rising threat that can’t be overlooked: business identity theft. This especially…

Three trending Cybersecurity news headlines on Google

Elon Musk’s Starlink Satellite Broadband Caught in the Crossfire of 2024 U.S. Election Controversy Elon Musk’s Starlink, a satellite-based internet communication service, has recently found itself entangled in a growing controversy linked to the 2024 U.S. Presidential Election. The company,…

What is Machine Identity Management?

In the rapidly evolving world of digital transformation, security has become one of the most critical challenges for organizations. While much attention has been focused on securing human identities, a growing concern is the protection and management of machine identities.…

Detect and Destroy APTs with Crystal Eye TDIR

Red Piranha is a leading developer & manufacturer of premium Cyber Security products in Australia. Red Piranha is also an official member of Team Defence Australia that promises to deliver advanced cybersecurity capabilities to its clients. By using automation, world-class…

PRODUCT REVIEW: TXONE NETWORKS FOR PROACTIVE OT DEFENSE

Securing Operational Technology (OT) in today’s industrial environments has never been more challenging, with blind spots like unmanaged legacy assets, transient devices, and unauthorized USBs presenting significant vulnerabilities. To make things worse, OT systems often rely on older, specialized equipment…

The Most Notorious Cyber Threat Groups: A Global Overview

In the digital age, cyber threats have evolved from isolated incidents to organized, sophisticated attacks that can target governments, corporations, and individuals worldwide. Among these threats are cybercriminal groups, state-sponsored hackers, and hacktivists that operate under various motives—ranging from financial…

Nokia starts investigating source code data breach claims

Nokia has recently initiated a thorough investigation into claims of a cyberattack allegedly carried out by a hacking group known as IntelBroker. The group has been circulating sensitive information on the internet for the past three days, raising alarm bells…

Three UK Council websites hit by DdoS Cyber Attacks

Three UK councils—Salford, Portsmouth, and Middlesbrough—were disrupted by a Distributed Denial of Service (DDoS) attack, causing temporary outages on their websites. The National Cyber Security Centre (NCSC), part of the UK’s GCHQ, has confirmed that the attack was carried out…

How to Make SaaS Backups More Secure than Production Data

In today’s digital landscape, Software as a Service (SaaS) applications have become vital for businesses of all sizes. However, with the increasing reliance on cloud-based solutions comes the heightened need for robust data security. While production data is often fortified…

Gmail Security Challenges Amid Rising Phishing Scams

Gmail, often heralded as one of the most secure email services globally, is currently facing a wave of security-related controversies that have raised concerns among its users. Recent insights from Google’s Threat Analysis team reveal that several Gmail users have…

ANY.RUN Discovers Tricky Phishing Attack Using Fake CAPTCHA

Phishing campaigns relentlessly continue to evolve, utilizing innovative tricks to deceive users. ANY.RUN, the interactive malware analysis service, recently uncovered a phishing attack that takes advantage of fake CAPTCHA prompts to execute malicious scripts on victims’ systems. How the Attack…

2024 Application Security Report -Fortinet

Introduction In today’s digital ecosystem, the expansion of application and API landscapes offers both opportunities and challenges for organizations. Advancements in application development and integration foster unparalleled business agility and innovation but also enlarge the attack surface, creating numerous opportunities…

Medusa Ransomware attack impacts 1.8 million patients

In what could potentially be the largest data breach in the history of pathology labs in the United States, the Medusa Ransomware group has reportedly affected over 1.8 million patients associated with Summit Pathology Laboratory in Colorado. This incident underscores…

Preparing IT teams for the next AI wave

Artificial Intelligence (AI) is fast transforming modern businesses, they are now beginning to understand the importance of risk and compliance – not only as regulatory checkboxes but as critical components of successful AI integration. Historically, these activities have been sidelined,…

IBM Data Breach 2024 might be fake

A cyber threat group known as 888 has made headlines by claiming it has successfully infiltrated the servers of International Business Machines (IBM), allegedly stealing around 17,500 rows of sensitive information belonging to both current and former employees. This assertion,…

Facebook alerts users about the ongoing Malvertising Campaign

Social media platforms can quickly become perilous if users neglect fundamental cyber hygiene practices. This concern is particularly relevant for Facebook users, as an alarming malvertising campaign is currently underway that disseminates SYS01Stealer malware. Presently, Facebook is the epicenter of…

Elections and Financial Crime: Navigating a Shifting Landscape

As global elections reshape the political landscape, the future of financial crime regulation and enforcement hangs in the balance. Explore how changing leadership across major economies can influence financial integrity, compliance, and global sanctions, and learn how businesses can proactively…

Establishing Security Guardrails in the Age of Shadow IT

Staying on top of customer expectations in the digital age means adopting new software at a dizzying pace. Enabling a remote workforce also requires provisioning dozens of SaaS apps and online productivity services. Juggling these business imperatives while keeping data…