CSO

The holiday season rings in more than just higher sales for retailers. There’s also more shoplifting and lower profit margins than the rest of the year, according to a report released today. Plus, this year, there’s an extra surprise — flash mobs….

Challenging work, skills training and flexible work hours are important for all cybersecurity employees, but especially so for the highest skilled workers, according to a report released today by the Center for Strategic and International Studies.In…

Samsung just can’t catch a break these days. Its phones are exploding, and so are its washing machines, and now a security researcher has found a second vulnerability in Samsung Pay.Salvatore Mendoza demonstrated the first vulnerability at Black Hat…

Companies that focus on the immediate breach remediation costs may be missing the big picture, and could be under-investing in security as a result.Several studies have come out recently trying to get a handle on the total costs of a data breach, wi…

Bad guys use common techniques to steal data, while companies focus too much on sophisticated attacks, according to the second annual Hacker’s Playbook, based on an analysis of nearly 4 million breach methods.Security professionals are figuring out …

Millions of IoT devices are misconfigured so that they can forward messages — which, combined with default admin settings, allows them to be used to attack e-commerce and other websites, a new report says.The problem is well known and has been arou…

Shodan is a search engine that looks for internet-connected devices. Hackers use it to find unsecured ports and companies use it to make sure that their infrastructure is locked down. This summer, it was also used by security researchers and law en…

Most of the recent data breaches involve customer information such as user names and passwords, credit card numbers, and medical histories. The companies hacked are hurt — they have to contact victims, pay for credit monitoring services and fines, …

Even smaller criminal groups are using smart business tactics to help insulate them from risk, such as the Vendetta World online shop, which sells credit card numbers.
According to a report released today by FireEye, the two criminals behind this o…

Seventy-three percent of companies are using vulnerable, end-of-life networking equipment, up from 60 percent last year, according to a new analysis of more than 212,000 Cisco networking devices at 350 organizations across North America.”It’s amazin…

Retailers were supposed to start accepting chip cards last October, but a year past the start of the EMV liability shift, two-thirds still haven’t done so.Only 2 million merchants, representing 33 percent of the industry, are actively accepting chip…

The technology is there for companies to inspect the SSL traffic going in and out of their networks, but performance, management and privacy concerns combine to hinder its adoption — allowing cyberattackers to hide their malicious activity in the e…

A single ransomware author and distributor was able to collect $121 million in ransomware payments during the first half of this year, netting $94 million after expenses, according to a report released today.”Ransomware has grown over the years, and…

Distributed denial of service attacks that take advantage of misconfigured NTP servers were up 276 percent last quarter compared to the same time last year, reaching a new record high, according to a new report.
Part of the reason for the increase …