Risk Management April 2, 2019

To Move Forward Securely, Look Backward With Ongoing Risk Assessments

4 min read - If we focus on the future at the expense of performing risk assessments to maintain defenses against existing threats, we will always be one step behind attackers.

Data Protection March 28, 2019

Let’s Make 2019 the Year of Fewer Records Compromised in Data Breaches

4 min read - A notable takeaway from the report was that despite fewer reported data breaches, 2018 witnessed a 126 percent uptick in the number of records breached containing personally identifiable information.

March 26, 2019

Operation ShadowHammer Supply Chain Attack May Have Distributed Backdoor to 1 Million-Plus Users

2 min read - Security researchers believe a supply chain attack known as "Operation ShadowHammer" may have distributed a backdoor to more than 1 million users.

March 25, 2019

TrickBot Creators Collaborate With BokBot to Conduct Man-in-the-Middle Attacks

2 min read - Security researchers warn that the cybercriminals behind the TrickBot and BokBot banking Trojans are now collaborating to perform man-in-the-middle (MitM) attacks.

Risk Management March 22, 2019

Taming Global Cybersecurity Risks Requires a Concerted Cyber Resilience Effort

5 min read - With the realization that "we're all in this together," boards want to learn how their organizations are collaborating with the rest of the ecosystem in planning and testing cyber resilience.

Threat Hunting March 21, 2019

Hunting for the True Meaning of Threat Hunting at RSAC 2019

4 min read - Many vendors at RSAC 2019 boasted of their advanced and even automated threat hunting capabilities, but it's important to understand the difference between true threat hunting and marketing jargon.

March 19, 2019

Threat Actors Use Fake Copyright Infringement Notifications in Instagram Hacking Campaign

2 min read - Security researchers discovered that attackers are using fake copyright infringement notifications as part of a recent Instagram hacking campaign.

Endpoint March 15, 2019

Will We See the Rise of Vaporworms and Other New Fileless Attacks in 2019?

3 min read - The evolution of the new and difficult-to-detect category of fileless malware may soon take an insidious turn with the development of what some researchers are calling vaporworms.

Data Protection March 14, 2019

Breaking Down the Incident Notification Requirements in the EU’s NIS Directive

6 min read - Similar to the GDPR, you can approach the NIS Directive as a roadblock or a nuisance, or you can consider it an excellent opportunity to improve your security posture.

March 13, 2019

Threat Actor Targets Japanese Users With New Ursnif Variant

2 min read - Security researchers discovered an attack campaign targeting Japanese users with a new variant of Ursnif banking malware.