ENISA published ENISA Threat Landscape for DoS Attacks
ENISA published the ENISA Threat Landscape for DoS Attacks report to bring new insights to the DoS threat landscape. Denial-of-Service […]
Security
Security
Russia-linked APT28 group spotted exploiting Outlook flaw to hijack MS Exchange accounts
Microsoft warns that the Russia-linked APT28 group is actively exploiting the CVE-2023-23397 Outlook flaw to hijack Microsoft Exchange accounts. Microsoft’s
Cybersecurity Tools
How to build a cyber incident response team (a 2024 playbook)
This post is authored by Heimdal’s Valentin Rusu – Machine Learning Research Engineer and overall cybersecurity guru here at Heimdal. As an incident response manager himself, Valentin regularly coordinates security responses for companies of all shapes and sizes – including many of the examples discussed in this post. He explains everything you need to know […]
The post How to build a cyber incident response team (a 2024 playbook) appeared first on Heimdal Security Blog.
Cybersecurity Tools
All Customer Support System Users Exposed in The Okta Data Breach
The ongoing Okta data breach investigation brings new details to light. The company announced that hackers have accessed data from every user of Okta’s customer support system. David Bradbury, Okta’s Chief Security Officer said We have determined that the threat actor ran and downloaded a report that contained the names and email addresses of all […]
The post All Customer Support System Users Exposed in The Okta Data Breach appeared first on Heimdal Security Blog.
Cybersecurity Tools
Gloucester City Council Incurs £1.1 Million Cost in Ransomware Recovery
Gloucester City Council, situated in England’s West Midlands, incurred over £1.1 million ($1.39 million) in expenses to recover from a ransomware attack in December 2021. This information was disclosed in a council meeting agenda on Monday. This meeting took place in the wake of a formal reprimand issued to the council by the Information Commissioner’s […]
The post Gloucester City Council Incurs £1.1 Million Cost in Ransomware Recovery appeared first on Heimdal Security Blog.
Cybersecurity Tools
Microsoft Stopped Developing Defender Application Guard for Office
Microsoft stopped actively developing Defender Application Guard for Office and the Windows Security Isolation APIs. This means they also might remove the security feature in the future. Threat actors often use Office document attachments to spread blackmail Trojans through malicious emails. So, most security specialists said they didn`t expect Microsoft to phase out this feature. […]
The post Microsoft Stopped Developing Defender Application Guard for Office appeared first on Heimdal Security Blog.
Security
The Internet Enabled Mass Surveillance. AI Will Enable Mass Spying.
Spying and surveillance are different but related things. If I hired a private detective to spy on you, that detective
The Week in Cyber Security and Data Privacy: 27 November – 3 December 2023
Welcome to this week’s round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Unsecured Kid Security app exposes over 300 million records The popular parental control app Kid Security, which allows parents to monitor and control their children’s online safety, exposed user activity logs to the Internet for over a month via misconfigured Elasticsearch and Logstash instances. The security researcher
The post The Week in Cyber Security and Data Privacy: 27 November – 3 December 2023 appeared first on IT Governance UK Blog.
Data Breaches and Cyber Attacks in November 2023 – 519,111,354 Records Breached
IT Governance’s research has found the following for November 2023: The number of incidents is particularly high this month, partly because we’ve improved our incident-finding processes, but also partly because we’ve seen several big supply chain attacks this month. In these cases, a service provider suffered a cyber attack, which had a knock-on effect on numerous other organisations. For example, UK service provider CTS suffered a cyber incident this month, which affected around 80 of its clients too (UK law firms). Data Breach Dashboard For a quick, one-page overview of this month’s findings, please use our Data Breach Dashboard: Note:
The post Data Breaches and Cyber Attacks in November 2023 – 519,111,354 Records Breached appeared first on IT Governance UK Blog.
DNA Double-Helix Hacker Heist: A Wake-Up Call for Cybersecurity Vigilance
A recent breach at 23andme resulted in the theft of immutable and irreplaceable data – our DNA! Companies with such critical data must take every precaution to limit the data they have become caretakers of, from theft my malicious actors. In this case, 23andme has lost our DNA! This needs to be a serious criminal offence that is punished with significant consequences.