Search results

Facebook has fixed two critical vulnerabilities in its popular WordPress plugin which could have been exploited to enable full site takeover, according to Wordfence. The security company revealed yesterday that it disclosed the bugs to the social network on December 22 last year and January 27...

The pressures of remote working and caregiving during the pandemic have taken a significant psychological toll on UK employees, leading to risky behavior online which could expose their employer to cyber-threats, according to Forcepoint. The security vendor polled 1000 UK adults to better...

Company leaders should be as close to their chief information security officers (CISOs) as their general counsel or finance directors, the head of the National Cyber Security Centre (NCSC) will argue today. In her first public speaking engagement, NCSC CEO Lindy Cameron, will tell a virtual...

The Federal Bureau of Investigation has issued a flash alert to Americans highlighting the dangers of Mamba ransomware. According to the Bureau, Mamba has been deployed against local governments, public transportation agencies, legal services, technology services, and industrial, commercial...

Four states have been chosen by the National Governors Association (NGA) for its 2021 Policy Academy to Advance Whole-of-State Cybersecurity. Kansas, Missouri, Montana, and Washington have all been selected by the NGA Center for Best Practices to work directly with the NGA on cybersecurity...

An American healthcare provider whose data was allegedly exfiltrated to an Amazon storage account by a cyber-attacker has taken legal action against Amazon. As many as 85,688 patient and employee records were compromised last week when a threat actor seemingly based in Ukraine struck...

An Australian TV network was taken off-air for over 24 hours by suspected state-backed attackers, in what it described as the largest attack on a media company in the country’s history. Production systems at the Sydney-headquartered Nine Network, currently the country’s top-rated network, went...

German lawmakers have been targeted once again by phishing attacks reportedly linked to Russian intelligence services. Local reports claimed yesterday that seven members of the Bundestag and 31 members of the state parliament had their inboxes compromised, although these appear to have been...

The security of the UK’s transport, energy and other critical national infrastructures (CNI) could be threatened by staff burnout and IT skills shortages, according to new research from cybersecurity services company Bridewell Consulting. The firm discovered that, in the last year, 85% of IT...

Last week (March 23 and 24) Infosecurity Magazine hosted its annual Spring Online Summit – a two-day virtual event showcasing 14 live, CPE-accredited sessions moderated by the Infosecurity editorial team, featuring an array of experts and thought-leaders discussing various topics and issues...

Security experts have linked the Hades ransomware operation to the Hafnium state-backed group that was behind early attacks on Microsoft Exchange servers. The ransomware crew was responsible for attacks on trucking giant Forward Air and a handful of others. It has been linked to infamous...

ClubCISO, the international community of chief information security officers and security leaders, has announced the appointment of Stephen Khan as its new chair. Khan is head of technology and cybersecurity risk at HSBC Group Information Security Risk, and is also the current chair of the...

The main issues and trends in regard to the use of AI in cybersecurity were discussed by Robert Hannigan, senior executive of BlueVoyant and chair the LORCA advisory board, speaking during the LORCA Live online event. Hannigan began by explaining that AI is often confused with automation, and...

The dating application Bumble has launched a new online safety initiative to help protect women in India from online abuse. Stand for Safety was created in collaboration with Safecity, an Indian-based public safety platform owned by the Red Dot Foundation. The goal of the initiative is to help...

Top trade associations in retail, hospitality, and travel are partnering with Retail and Hospitality ISAC (RH-ISAC) and the United States federal government’s Cybersecurity and Infrastructure Security Agency (CISA) to host the first industry-wide cybersecurity exercise. Day-long virtual...

Two cast members of an American reality TV show have been indicted in connection with a nationwide telemarketing fraud scheme that victimized the elderly. Real Housewives of Salt Lake City stars Jennifer Shah and Stuart Smith were arrested on March 30 and charged with conspiracy to commit wire...

The United States' Internal Revenue Service (IRS) has issued a warning over an ongoing phishing scam targeting higher education establishments in the United States. In a statement released yesterday, the IRS said that it was being actively impersonated over email by cyber-attackers seeking to...

The burgeoning commercial space industry needs support from the cybersecurity sector to ensure it can be trusted and resilient, according to Rob Meyerson, founder and CEO at Delalune Space, speaking during the LORCA Live online event. Meyerson is formerly of NASA in a highly technical role and...

Most global retailers are predicting an increase in fraud budgets next year, with nearly half seeing an increase in attacks, according to new data from Ravelin. The fraud prevention software vendor polled over 1000 merchants globally to understand their current challenges. It revealed that 45%...

A North Korean espionage campaign targeting security researchers has taken another turn with the creation of a new fake company, website and social media accounts to lure victims, according to Google. The tech giant’s Threat Analysis Group (TAG) first discovered the campaign back in January. At...