IT Security Guru

FEBRUARY 28, 2023

Cyber insurers are losing money. Their loss ratios – total claims plus the insurer’s costs, divided by total premiums earned – are now consistently above 60%, which presents something of an existential threat to the insurance industry, making cyber risk a potentially uninsurable area due to falling profitability.

Cyber Insurance 114

Cyber Insurance Insurance Marketing Cyber Risk 114

CyberSecurity Insiders

MAY 18, 2022

A foundational approach to cybersecurity empowers CISOs to see abnormalities and block threats before they do damage. Constantly playing catch-up seems to have become the unfortunate norm in the cybersecurity industry. New major exploits are being revealed with almost clockwork regularity.

DNS 140

DNS Cybersecurity CISO Social Engineering 140

Malwarebytes

OCTOBER 17, 2023

“The work of the CRI supports the implementation of the endorsed UN framework for responsible state behavior in cyberspace, specifically the voluntary norm that States should cooperate to exchange information, assist each other, prosecute terrorist and criminal use of ICTs and implement other cooperative measures to address such threats.”

Government 87

Government Backups Ransomware Malware 87

Thales Cloud Protection & Licensing

MAY 23, 2022

Access Management is Essential for Strengthening OT Security. We have reached the point where highly connected cyber-physical systems are the norm, and the lines between information technology (IT) and operational technology (OT) are blurred. The threat landscape. NEW Cooperative refused to pay the $5.9

Healthcare 126

Healthcare Ransomware Authentication Threat Reports 126

Thales Cloud Protection & Licensing

NOVEMBER 28, 2022

The European Union enacted the Network and Information System (NIS) regulation in July 2016 with the intention of ensuring a specific level of security for networks and information systems belonging to critical and sensitive infrastructures in EU member states. As a result, security in the public and private sectors became fragmented.

Encryption 71

Encryption Risk Cybersecurity Marketing 71

The Last Watchdog

JUNE 21, 2020

Ransomware is undoubtedly one of the most unnerving phenomena in the cyber threat landscape. Numerous strains of this destructive code have been the front-page news in global computer security chronicles for almost a decade now, with jaw-dropping ups and dramatic downs accompanying its progress. inch diskettes.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

SecureWorld News

NOVEMBER 12, 2020

Sometimes when you are down in the cyber attack trees defending your organization, it can be tough to see the cyber threat forest. Understanding how things are shifting in the forest, or overall threat landscape, can help us categorize, strategize, and prioritize our resources. What are the top cyber threats right now?

Cyber threats 107

Cyber threats Insurance Cyber Insurance Ransomware 107

SecureList

NOVEMBER 22, 2022

This is the first edition of our policy analysis and observations of trends in the regulation of cyberspace, and cybersecurity, within the Kaspersky Security Bulletin. The war in Ukraine has further deepened polarization between different groups of states and communities.

Government 88

Government Marketing Cybersecurity Software 88

SecureWorld News

DECEMBER 9, 2022

The United States Department of Health and Human Services' (HHS) security team (the Health Sector Cybersecurity Coordination Center or HC3) released a report detailing how Royal ransomware has been used to target the healthcare sector. Since the beginning of the pandemic, cyberattacks targeting healthcare have increased dramatically.

Healthcare 75

Healthcare Ransomware Passwords Password Management 75

Krebs on Security

APRIL 30, 2020

In many ways, the COVID-19 pandemic has been a boon to cybercriminals: With unprecedented numbers of people working from home and anxious for news about the virus outbreak, it’s hard to imagine a more target-rich environment for phishers, scammers and malware purveyors. ” Alex Holden , founder and CTO of Hold Security , agreed.

Cybercrime 308

Cybercrime Computers and Electronics Marketing Scams 308

Malwarebytes

FEBRUARY 13, 2023

Earlier, we saw a proposal from the Securities and Exchange Commission (SEC) to amend Form 8-K to require registrants to disclose information about a material cybersecurity incident within four business days after the registrant determines that it has experienced a material cybersecurity incident. That effective date will be April 24, 2023.

Insurance 74

Insurance Cybercrime Healthcare Data breaches 74

McAfee

JUNE 17, 2021

How do you know that your security efforts measure up? Imagine if you had one place where you found a comprehensive real time security posture that tells you exactly where the looming current cyber risks are and the impact? Let’s consider a recent and relevant cyber threat. Risk and Posture.

Penetration Testing 97

Penetration Testing CISO Risk Cyber Insurance 97

SC Magazine

MAY 17, 2021

5G is among the technologies that researchers predict will have a big impact on the security landscape in the next decade. But what might they offer the front-facing information security officer – someone with a ten-year plan, wondering what to prepare for down the line? Photo by Mario Tama/Getty Images).

Manufacturing 95

Manufacturing IoT Artificial Intelligence Technology 95

Cisco Security

JANUARY 10, 2023

Many of them still ring true now and will continue to do so, but some new concerns have risen up the agenda. Many of them still ring true now and will continue to do so, but some new concerns have risen up the agenda. Here are the topics that I think will be top of mind in 2023, and what CISOs can do to prepare.

CISO 138

CISO Insurance Cyber Insurance Phishing 138

Krebs on Security

FEBRUARY 10, 2020

Justice Department today unsealed indictments against four Chinese officers of the People’s Liberation Army (PLA) accused of perpetrating the 2017 hack against consumer credit bureau Equifax that led to the theft of personal data on nearly 150 million Americans. and Liu Lei (??) commercial and government interests. .”

Hacking 246

Hacking Identity Theft Government Phishing 246

SecureWorld News

JANUARY 20, 2021

As remote work has become the norm during the pandemic, many companies have adapted to changing environments and technologies. The threat of vishing attacks. The cyber criminals were looking for employees who could perform username and e-mail changes and found an employee through a cloud-based payroll service.

VPN 98

VPN Accountability Social Engineering Phishing 98

SecureList

MAY 17, 2022

When the war in Ukraine broke out, many analysts were surprised to discover that what was simultaneously happening in the cyber domain did not match their predictions [1]. Overview of cyber activities. Introduction. In this report, we aim to provide a strategic technical assessment of our understanding of current events.

Energy and Utilities 92

Energy and Utilities Ransomware Internet Internet 92

Security Affairs

MARCH 4, 2021

analyzes ransomware landscape in 2020 and TTPs of major threat actors. Group-IB , a global threat hunting and adversary-centric cyber intelligence company, has presented its new report “Ransomware Uncovered 2020-2021 ”. The norm seems to be shifting toward the millions. The gold rush of 2020.

Ransomware 122

Ransomware Cybercrime Malware Marketing 122

SecureList

DECEMBER 14, 2022

Timeline of significant cyber-events predating Feb 24th. For instance, according to the New York Times, in 2003, the United States made plans for a huge cyberattack to freeze billions of dollars in Saddam Hussein’s bank accounts and cripple his government before the invasion of Iraq.

DDOS 131

DDOS Ransomware Government Energy and Utilities 131

SecureWorld News

JUNE 16, 2023

The EU is attempting to provide guardrails on a technology that is still not well understood but does present a lot of concerns from a legal perspective," said Jordan Fischer, cyber attorney and partner at Constangy, who recently moderated a panel discussion on "The Future of Privacy and Cyber: AI, Quantum and Mind Readers" at SecureWorld Chicago.

Artificial Intelligence 90

Artificial Intelligence Technology CISO Government 90

SecureWorld News

OCTOBER 20, 2020

Assistant Attorney General For National Security, John Demers, says the power grid attacks in 2015 and 2016 were the first known destructive attacks against civilian critical infrastructure. In what is commonly referred to as the most destructive and costly cyber attack ever, the conspirators unleashed the 'NotPetya' malware.

Malware 64

Malware Cyber Attacks Government Manufacturing 64

The Last Watchdog

AUGUST 1, 2019

Company officials at Capital One Financial Corp ought to have a crystal clear idea of what to expect next — after admitting to have allowed a gargantuan data breach. Related: Hackers direct botnets to manipulate business logic Thompson is accused of pilfering sensitive data for 100 million US and 6 million Canadian bank patrons.

Data privacy 198

Data privacy Data breaches Internet Internet 198

The Last Watchdog

FEBRUARY 27, 2019

This development is unfolding largely off the radar screen of the website publishers who depend on this ecosystem, says Chris Olson, CEO of the Media Trust , a 15-year-old website security vendor, based in McLean, VA that is on the front lines of mitigating this seething threat. Related: Protecting web gateways. Losing control of risk.

Retail 138

Retail Digital transformation Advertising Software 138

Centraleyes

DECEMBER 11, 2023

The central goal of DORA is to set uniform requirements for the security of networks and information systems within the financial sector. It covers not only financial institutions but also critical third parties providing ICT-related services, like cloud platforms and data analytics. Who Does DORA Impact? What Are the Next Steps?

Risk 52

Risk Insurance Architecture Banking 52

SecureList

MAY 8, 2024

Ransomware attacks continue to be one of the biggest contemporary cybersecurity threats, affecting organizations and individuals alike on a global scale. In this report, we share our observations, research, and statistics to shed light on the evolving ransomware threat landscape and its implications for cybersecurity.

Ransomware 112

Ransomware Encryption Small Business Cybersecurity 112

Identity IQ

JUNE 1, 2023

The Rise of AI Social Engineering Scams IdentityIQ In today’s digital age, social engineering scams have become an increasingly prevalent threat. However, the emergence of artificial intelligence (AI) has taken these scams to a whole new level. This was a 3% increase compared to the previous year. Phishing attacks.

Social Engineering 52

Social Engineering Scams Engineering Identity Theft 52

The Last Watchdog

MARCH 14, 2023

A new report from the Bipartisan Policy Center ( BPC ) lays out — in stark terms – the prominent cybersecurity risks of the moment. The BPC’s Top Risks in Cybersecurity 2023 analysis calls out eight “top macro risks” that frame what’s wrong and what’s at stake in the cyber realm. and even state-by-state in the U.S.

Cybersecurity 209

Cybersecurity Data privacy Risk Government 209

SecureWorld News

SEPTEMBER 27, 2020

But corporations do it all the time, sending millions every year in Bitcoin to recover data that's been taken "hostage." The days where victims could simply pay ransom for an encryption key, unscramble their data, and move on are ending. If they were to take the Bitcoin and run, security firms would stop making payments.

Ransomware 65

Ransomware Cryptocurrency Computers and Electronics Banking 65

SecureList

JUNE 20, 2022

Knowing the technical aspects of an attack may allow victims to build stronger defences, patch gaps and increase their cyber-resilience. A constant challenge in such an endeavour is that the cyber context, in all its complexity and interconnectedness, remains a dark, unknown forest for many decision-makers.

Energy and Utilities 84

Energy and Utilities Data collection Malware Cybersecurity 84

SecureWorld News

AUGUST 21, 2023

This third installment is "Safeguarding Ethical Development in Chat GPT and Other LLMs through a Comprehensive Approach: Integrating Security, Psychological Considerations, and Governance." In Part 1 , we began by exploring how practical security measures can protect these aspects: Addressing prompt engineering abuse, especially DAN 13.5

Government 74

Government Cybersecurity Data privacy Artificial Intelligence 74

ForAllSecure

APRIL 7, 2021

Vamosi: When I was last looking for a new job. Welcome to the hacker mind and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. At a time when organizations are dealing with the SolarWinds breach and a persistent threat of ransomware throughout the world.

Hacking 40

Hacking InfoSec Cybersecurity Engineering 40

ForAllSecure

APRIL 7, 2021

Vamosi: When I was last looking for a new job. Welcome to the hacker mind and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. At a time when organizations are dealing with the SolarWinds breach and a persistent threat of ransomware throughout the world.

Hacking 40

Hacking InfoSec Cybersecurity Engineering 40

CyberSecurity Insiders

JUNE 30, 2023

Despite the continued warnings, data breaches and endless guidance – a weak and easily hackable password guards a sobering number of online accounts and identities. Across the globe, digital identification is becoming more mainstream; with new measures constantly coming to fruition to make this the norm.

Passwords 52

Passwords Authentication Data breaches Accountability 52

Malwarebytes

JULY 20, 2021

Hafnium at the time was a newly identified attack group that was also thought to be responsible for attacks on internet-facing servers, and which was known for exfiltrating data to file sharing sites. Its targets were mainly entities in the United States across a number of industry sectors. How is that only four months ago?

Cybercrime 117

Cybercrime Government Hacking Ransomware 117

Centraleyes

FEBRUARY 21, 2024

Compliance Trends and Timeline for Regulations in 2024 From data security standards to privacy laws and emerging technologies, staying abreast of the evolving regulatory compliance trends landscape is crucial. In contrast, the United States is witnessing a gradual shift driven by investor demands. in ESG adoption.

Cybersecurity 52

Cybersecurity Data privacy Risk Small Business 52

SecureList

JANUARY 31, 2024

However, some of them have reached a critical mass of creeping changes, which could lead to a qualitative shift in the threat landscape as early as next year. In 2023, ransomware attacks consolidated their hold on the top of the ranking of information security threats to industrial enterprises.

Ransomware 68

Ransomware Energy and Utilities Marketing Backups 68

Security Boulevard

MAY 10, 2022

In this paper, EclecticIQ analysts examined various drivers of the Ukraine-Russia war to identify and describe possible outcomes for cyber and technology in the context of the ongoing Ukraine-Russia war. Methodology. These outcomes are not necessarily mutually exclusive, nor are they equally likely.

Government 52

Government Media Technology Cybercrime 52