article thumbnail

Chinese Antivirus Firm Was Part of APT41 ‘Supply Chain’ Attack

Krebs on Security

The government alleges the men used malware-laced phishing emails and “supply chain” attacks to steal data from companies and their customers. One of the alleged hackers was first profiled here in 2012 as the owner of a Chinese antivirus firm. Image: FBI. Security analysts and U.S. Chengdu404’s offices in China.

Antivirus 355
article thumbnail

GUEST ESSAY – Notable events in hacking history that helped transform cybersecurity assessment

The Last Watchdog

Assessing the risks involved in using the latest technology is something our culture had to adopt in the early days of the computer. New technologies come with risks — there’s no denying that. Businesses and consumers have to assess cybersecurity risks to protect their assets and private information.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

5 Major Cybersecurity Trends to Know for 2024

eSecurity Planet

Bottom line: Prepare now based on risk. Without guidelines, organizations risk unfettered use of AI, risks of data leaks, and no recourse for unethical AI use within the organization. Also consider learning about the top governance, risk, and compliance tools to identify the best one for you.

article thumbnail

GUEST ESSAY: Here’s why managed security services — MSS and MSSP — are catching on

The Last Watchdog

Keeping up with new risks, resolving them as soon as they occur, and recovering from incidents identified too late may, as you can certainly imagine, take up valuable resources and cause businesses to lose time, money, and the trust of their clients/partners. The greater the reliance, the more likely such a breach will take place.

Marketing 247
article thumbnail

Why security pros should care about making zero trust frictionless

SC Magazine

Various industry guidelines define zero trust, such as Forrester’s Zero Trust eXtended (ZTX), Gartner’s Continuous Adaptive Risk and Trust Assessment (CARTA), and more recently NIST 800-207. Thus, unpatched devices, legacy systems, and over-privileged users are a higher risk. .

article thumbnail

Ten Years Later, New Clues in the Target Breach

Krebs on Security

.” Pavel Vrublevsky is a convicted cybercriminal who became famous as the CEO of the Russian e-payments company ChronoPay , which specialized in facilitating online payments for a variety of “high-risk” businesses, including gambling, pirated Mp3 files, rogue antivirus software and “male enhancement” pills.

article thumbnail

Top Threat Intelligence Platforms for 2021

eSecurity Planet

What sets FireEye apart from the competition is how its platform tailors strategic intelligence to an organization’s corporate risk management and business goals by providing highly-contextual data so users can align security strategies to respond to the most likely threats taking aim at an organization. AT&T Cybersecurity.