Technologies & Solutions - Articles - Page 91

Capcom suffers data breach

November 6, 2020

Japanese gaming giant Capcom has disclosed a data breach which led to unauthorized access of some files and systems. The developer claimed that the incident impacted email and file servers, among other systems.

Blackbaud sued after ransomware attack

Maria Henriquez

November 6, 2020

Blackbaud, cloud software provider, has been sued in 23 proposed consumer class action cases in the U.S. and Canada related to the ransomware attack and data breach that the company suffered in May 2020.

NOAA to enhance weather forecasting and research with artificial intelligence

November 5, 2020

NOAA’s Satellite and Information Service (NESDIS) has signed an agreement with Google to explore the benefits of Artificial Intelligence (AI) and Machine Learning (ML) for enhancing NOAA’s use of satellite and environmental data.

California voters approve California Privacy Rights Act (CPRA)

Maria Henriquez

November 5, 2020

California voters have passed the California Privacy Rights Act (CPRA), expanding data protection for consumers.

Director of CISA Chris Krebs says there's no evidence of foreign interference in the 2020 election

Maria Henriquez

November 5, 2020

Chris Krebs, the director of the Cybersecurity and Infrastructure Security Agency (CISA), said that after the final day of voting and with millions of votes cast, the federal government has "no evidence any foreign adversary was capable of preventing Americans from voting or changing vote tallies."

5 minutes with Doug Matthews - Ransomware threats on political organizations

Maria Henriquez

November 5, 2020

While the first thing that may come to mind is attacks on voter booths and polling data, hackers were expected to hit more vulnerable targets first, such as community-based organizations and systems supporting political campaigns. These networks are rarely designed to withstand the ransomware threats much larger, established political bodies face, and hackers know it. Here, we talk to Doug Matthews, Vice President of Product Management for Veritas, about the conditions impacting data protection during the election period.

Email security best practices for a remote human perimeter

DJ Sampath

November 5, 2020

Cybercriminals quickly weaved the pandemic into their email scams earlier this year, and more recently impersonated the IRS by pretending to share updates about COVID tax relief in an attempt to steal sensitive tax information. In mid-April, Google’s Threat Analysis Group reported that they detected 18 million COVID-19 themed malware and phishing emails per day. And that’s without including all the email impersonation, invoice fraud, and phishing attacks that have nothing to do with COVID, but are dangerous nonetheless. In this article, I will provide some tips to help individuals and organizations communicate more securely over email.

Attackers targeting non-governmental organizations in Myanmar with new ‘KilllSomeOne’ backdoor

Operators used four different DLL side-loading scenarios to install and execute new malware after removing a resident PlugX Backdoor

November 4, 2020

Sophos uncovered attackers using DLL side-loading to execute malicious code and install backdoors in the networks of targeted organizations. A report published, “A New APT uses DLL Side-loads to Killl Someone,” outlines the discovery of four different DLL side-loading scenarios, which all share the same program database path and some of which carry a file named “KilllSomeOne.”

DHS awards $2M to University of Illinois-led consortium to create national network of cybersecurity institutes

November 4, 2020

The Department of Homeland Security (DHS) Science and Technology Directorate (S&T), in partnership with the Cybersecurity and Infrastructure Security Agency (CISA), has awarded $2 million to the Critical Infrastructure Resilience Institute (CIRI), a DHS Center of Excellence (COE) led by the University of Illinois at Urbana-Champaign (UIUC), to develop a plan that CISA can execute to build a national network of cybersecurity technical institutes.

InfoSec teams fight dual battle: Limited visibility and board communication

Vinay Sridhara

November 4, 2020

Cybersecurity teams struggle with a lack of visibility into threats, endpoint devices, access privileges, and other essential security controls necessary for a robust cybersecurity posture. Without full visibility into their entire digital ecosystem, infosec teams cannot fully secure the assets on their networks or effectively prioritize the most serious threats. Below, I dive into how security professionals are still fighting the battle between effectively viewing serious threats and communicating cyber risk to company leadership.