Ransomware News

  • All
  • Security Boulevard
  • Wired
  • NDTV
  • Infosecurity
  • ZDNet
  • Health IT Security
  • The Daily Swig
  • ITPro
  • Data Breach Today
  • SC Media
  • Krebs on Security
  • MSSP Alert
  • IS Decisions
Security Boulevard
Detecting and Mitigating the PetitPotam Attack on Windows Domains Fresh on the heels of PrintNightmare and SeriousSam, we now have another high-impact attack vector on Windows domains that is relatively easy to carry out and difficult to mitigate. What is now being hailed across Twitter as #PetitPotam is a…August 2, 2021
Security BSides Athens 2021 – Talk 3: Thanassis Diogos’ ‘Ransomware Incidents Demystified’ Our thanks to Security BSides Athens for publishing their outstanding Security BSides Athens 2021 Conference videos on the groups' YouTube channel. Permalink The post Security BSides Athens 2021 – Talk 3: Thanassis Diogos’ ‘Ransomware Incidents Demystified’ appeared first on Security…August 2, 2021
What the Growing Costs of a Data Breach Means for the Business A recent global research report conducted by Cybereason, titled Ransomware: The True Cost to Business, revealed that the vast majority of organizations that have suffered a ransomware attack have experienced significant impact to the business, including loss of revenue, damage to…August 2, 2021
Malicious Life Podcast: The State of Credit Card Security In 2005, when Albert Gonzalez was hacking his way into the networks of many retail chains in the US (listen to Part 1, Part 2 and Part 3), credit cards were still very insecure: magnetic stripes and signed receipts did…August 2, 2021
Wired
Hospitals Still Use Pneumatic Tubes—and They Can Be Hacked The tech may seem antiquated, but it poses very modern cybersecurity problems.August 2, 2021
A Guide to RCS, and Why It Makes Texting So Much Better Google is pushing the new standard for Android devices, which promises better security and cooler features than plain old SMS.August 1, 2021
The Top 30 Vulnerabilities Include Plenty of Usual Suspects Plus: A sneaky iOS app, a wiper attack in Iran, and more of the week’s top security news.July 31, 2021
The Privacy Battle That Apple Isn’t FightingCalifornia has begun enforcing a browser-level privacy setting, but you still can’t find that option in Safari or iOS.July 30, 2021
NDTV
Cyberattacks on Organisations in India Grew Significantly: Check PointCyberattacks on organisations have grown globally by 29 percent in the last six months, Check Point said in its report on Thursday. The number of ransomware attacks on organisations also increased by...July 29, 2021
Cyberattacks May Result in US Engaging in 'Real Shooting War': Joe BidenUS President Joe Biden warned that if the US ended up in a "real shooting war" with a "major power" it could be the result of a significant cyberattack on the country, highlighting what Washington...July 28, 2021
Infosecurity
ZDNet
Stop ignoring this iPhone warning Apple makes it seem like all updates are the same. They are not.August 2, 2021
The cybersecurity jobs crisis is getting worse, and companies are making basic mistakes with hiring Overworked cybersecurity employees are struggling to keep up with the challenges of the job, and employers are struggling to keep hold of them.August 2, 2021
Microsoft: Watch out for this 'sneakier than usual' phishing attack Microsoft issues an alert over a 'crafty' phishing campaign.August 2, 2021
A Cold War is raging in cyberspace. Here's how countries are preparing their defenses Much like conventional militaries, countries also need to perform occasional drills of their cybersecurity defenses. Instead of soldiers and tanks, these involve virtual machines – and months of pestering executives for their login credentials.August 2, 2021
Health IT Security
The Daily Swig
UK universities awarded funding for research into IoT, smart home security Academics say that smart technology is a ‘balancing act’, and that consumers need to be aware of the risksAugust 2, 2021
Bug Bounty Radar // The latest bug bounty programs for August 2021New web targets for the discerning hackerJuly 30, 2021
Dropbox researchers develop tool to detect lateral movement attacks against enterprise networks‘Hopper’ delivered better detection and much reduced false alarms in early testsJuly 30, 2021
Aaron Portnoy – ‘There’s no silver bullet for ransomware or supply chain attacks’‘We don’t have the luxury of starting over’, offensive security specialist warns in wide-ranging interview INTERVIEW Aaron Portnoy confesses to periodic bouts of imposter syndrome, despite having carvJuly 30, 2021
ITPro
Is this the end of the road for ransomware? Hackers seem to have developed a conscience, but it’s unlikely they are gone for goodJuly 31, 2021
Microsoft warns of dangerous ‘BazaCall’ call centre ransomware scamHuman operators are tricking victims into manually downloading malware onto their systemsJuly 30, 2021
The top 12 password-cracking techniques used by hackersSome of the most common, and most effective, methods for stealing passwordsJuly 29, 2021
Biden warns cyber attacks could lead to “shooting war”The comments come as the US continues to battle a wave of serious cyber attacksJuly 28, 2021
Data Breach Today
Ransomware Attackers Eying 'Pure Data-Leakage Model' Facing Intense Scrutiny, Attackers Retool, Says Cybercrime Researcher Bob McArdleA funny thing happened on the way to the nonstop ransomware payday: Some groups hit the wrong targets - Ireland's health system, a major U.S. fuel pipeline - resulting in the…August 2, 2021
Ransomware Changes: DoppelPaymer Rebrands; Babuk EvolvesNew 'Pay or Grief' CryptoLocking Malware Is DoppelPaymer in Disguise, Experts SayThe ransomware landscape changes constantly as groups disappear, change approaches or rebrand. The DoppelPaymer operation, for example, appears to have reinvented itself as Grief, while the administrator of Babuk…July 30, 2021
ISMG Editors’ Panel: Ransomware UpdateAlso: Update on NIST 'Zero Trust' InitiativeIn the latest weekly update, three editors at Information Security Media Group discuss important cybersecurity issues, including the latest ransomware trends, plus an update on NIST's "zero trust" initiative.July 30, 2021
Insurer: Size of Claims Paid for Ransomware Attacks DeclinesKey Factors: Negotiating Lower Ransoms, Improving RecoveryCyber insurance provider Coalition Inc. says its clients' average claims for losses when they were hit by a ransomware attack totaled $184,000 in the first half of this year, down 45% compared to the…July 30, 2021
SC Media
Krebs on Security
The Life Cycle of a Breached DatabaseEvery time there is another data breach, we are asked to change our password at the breached entity. But the reality is that in most cases by the time the victim organization discloses an incident publicly the information has already…July 29, 2021
PlugwalkJoe Does the Perp WalkOne day after last summer's mass-hack of Twitter, KrebsOnSecurity wrote that 22-year-old British citizen Joseph "PlugwalkJoe" O'Connor appeared to have been involved in the incident. When the Justice Department last week announced O'Connor's arrest and indictment, his alleged role in…July 26, 2021
Serial Swatter Who Caused Death Gets Five Years in PrisonA 18-year-old Tennessee man who helped set in motion a fraudulent distress call to police that lead to the death of a 60-year-old grandfather in 2020 was sentenced to 60 months in prison today.July 21, 2021
Spam Kingpin Peter Levashov Gets Time ServedA federal judge in Connecticut today handed down a sentence of time served to spam kingpin Peter “Severa” Levashov, a prolific purveyor of malicious and junk email, and the creator of malware strains that infected millions of Microsoft computers globally.…July 20, 2021
MSSP Alert
Should Congress Ban U.S. Companies from Paying Ransomware Hackers? Should Congress ban U.S. companies from paying ransomware hacker groups for decryption keys? The post Should Congress Ban U.S. Companies from Paying Ransomware Hackers? appeared first on MSSP Alert.August 2, 2021
Managed Security Services Provider (MSSP) News: 02 August 2021 Today's MSSP news involves Black Hat USA 2021, CrowdStrike, Deloitte, GuardSight, LastPass, NIST, Nozomi Networks funding, Saviynt, Secureworks, Sparrow Co & more. The post Managed Security Services Provider (MSSP) News: 02 August 2021 appeared first on MSSP Alert.August 2, 2021
Black Hat 2021 Cybersecurity Conference Live Blog: MDR, XDR and MSSP Updates Black Hat USA cybersecurity conference news from CrowdStroke, Sparrow, Secureworks & more. New MSSP, MDR & XDR cloud software developments. The post Black Hat 2021 Cybersecurity Conference Live Blog: MDR, XDR and MSSP Updates appeared first on MSSP Alert.August 2, 2021
Ernst & Young Acquires MSSP SecureWorx for Australia Cybersecurity Compliance Ernst & Young acquires SecureWorx -- an MSSP & cybersecurity consulting firm not to be confused with Dell's managed XDR provider Secureworks. The post Ernst & Young Acquires MSSP SecureWorx for Australia Cybersecurity Compliance appeared first on MSSP Alert.August 2, 2021
IS Decisions