Seventy-three percent of companies are using vulnerable, end-of-life networking equipment, up from 60 percent last year, according to a new analysis of more than 212,000 Cisco networking devices at 350 organizations across North America.”It’s amazin…
73% of companies using vulnerable end-of-life networking devices Read More »
Cybercriminals could be getting better, and more creative, at stealing money from businesses.
Next week, New York State will begin a 45-day public comment period on its new financial industry cybersecurity regulation — and, so far, security experts have a favorable view of the proposal.Under the new regulations, banks and insurance companie…
NY regulation aims to raise bank security standards Read More »
Retailers were supposed to start accepting chip cards last October, but a year past the start of the EMV liability shift, two-thirds still haven’t done so.Only 2 million merchants, representing 33 percent of the industry, are actively accepting chip…
As migration anniversary approaches, only a third of retailers accept chip cards Read More »
The technology is there for companies to inspect the SSL traffic going in and out of their networks, but performance, management and privacy concerns combine to hinder its adoption — allowing cyberattackers to hide their malicious activity in the e…
A single ransomware author and distributor was able to collect $121 million in ransomware payments during the first half of this year, netting $94 million after expenses, according to a report released today.”Ransomware has grown over the years, and…
A single ransomware network has pulled in $121 million Read More »
Distributed denial of service attacks that take advantage of misconfigured NTP servers were up 276 percent last quarter compared to the same time last year, reaching a new record high, according to a new report.
Part of the reason for the increase …
NTP reflection attacks hit record high Read More »
Cloud-based filesharing, collaboration and social networking applications are common vectors for malware infections, a large portion of of which are ransomware delivery vehicles, according to a report released today.Javascript exploits and droppers,…
Ransomware prevalent in cloud-based malware Read More »
Cross-site scripting and SQL injection attacks are well-known threats for public-facing Web applications, but internal systems can be attacked as well. For example, about half of network management systems studied had these vulnerabilities, accordin…
Half of network management systems vulnerable to injection attacks Read More »
A CEO said that his controller had just received an email, ostensibly from him, asking her to process an urgent outgoing payment.Everything about the letter looked legit.”It has my display name, spelled correctly,” said Kevin O’Brien, co-founder and…
New tech can help catch spearphishing attacks Read More »
Smartphone infection rates nearly doubled during the first half of this year, from 0.25 percent to 0.49 percent compared to the second half of 2015, according to a report released today by Nokia.Nokia provides endpoint malware detection services to …
Report: Smartphone infection rate doubled in first half of 2016 Read More »
Think that your new EMV-compliant chip-reading point of sale terminal will keep crooks from stealing your customer credit card info?Think again.Researchers have spotted a website setting EMV skimmers — at www.emvskimmer.com, if it hasn’t already be…
Crooks are selling a skimmer that works on all chip card readers Read More »
Deception technologies such as honeypots are becoming increasingly popular with enterprises as the products get more flexible and the tools allow security analysts swamped with incident reports to zero in on cases of actual ongoing infiltration.
Ac…
Deception technology grows and evolves Read More »
In the wake of continued security problems, NASA’s CIO is sending a no-confidence signal to Hewlett Packard Enterprise, which received a $2.5 billion contract in 2011 to address problems with the agency’s outdated and insecure information technolog…
NASA CIO allows HPE contract’s authority to operate to expire Read More »
In the wake of continued security problems, NASA’s CIO is sending a no-confidence signal to Hewlett Packard Enterprise, which received a $2.5 billion contract in 2011 to address problems with the agency’s outdated and insecure information technology…
NASA CIO allows HPE contract to expire, refuses to sign-off on authority to operate Read More »
