Latest

Cybercrime

NCSC Investigated 658 Serious Cybersecurity Incidents

Mathew J. Schwartz  •  October 23, 2019

The National Cyber Security Center, the U.K.'s national computer emergency response team, investigated 658 serious cybersecurity incidents in a 12-month period and supported nearly 900 victim organizations - most of whom learned they had fallen victim after being alerted by the center.

CISO Trainings

The Ultimate Missing Link in Cyber: Continuous Compromise Assessment

Information Security Media Group  •  October 16, 2019

According to Ricardo Villadiego, Lumu Technologies' Founder and CEO, organizations are "sitting on a gold mine: their own data". Under the single premise that organizations should assume they are compromised and prove otherwise, Lumu seeks to empower enterprises to answer the most basic question: Is your organization...

3rd Party Risk Management

Security Leaders Share Secret Sauce for Success with Digital Transformation

CyberArk  •  October 8, 2019

Join three industry practitioners to learn about the most pressing challenges of today.

Active Defense & Deception

Deception Technology: Making the Case

Information Security Media Group  •  September 19, 2019

Deception technology has emerged as a hot practice - but not one that is necessarily on every enterprise's budgeting radar. Don Gray, CTO of PacketViper, talks about the emergence of deception technology and how security leaders can make the case - and find the budget - for its usage.

Business Continuity Management / Disaster Recovery

Hackers Attempted DDoS Attack Against Utility: Report

Akshaya Asokan  •  September 10, 2019

Earlier this year, intruders probed weaknesses in the network firewalls of a U.S. power utility to attempt a distributed denial-of-service attack, but there was no disruption in electricity service, according a recently released report. The incident illustrates potential weaknesses in the power grid.

Cybercrime

Wikipedia Investigates DDoS Attack

Apurva Venkat  •  September 9, 2019

Online encyclopedia Wikipedia is investigating a DDoS attack that temporarily blocked access to several of its European and Middle Eastern sites over the weekend.

Security Operations

SecOps Is Broken. What Can We Do About It?

Information Security Media Group  •  September 6, 2019

Learn how your enterprise security team can step up to the challenge of increasing daily attacks.

Cybercrime

Satori Botnet Co-Creator Pleads Guilty

Scott Ferguson  •  September 4, 2019

Kenneth Currin Schuchman, 21, who authorities charged with co-creating the massive Satori botnet that was used to wage several large-scale DDoS attacks, pleaded guilty Tuesday to a single federal charge.

Security Operations

Sorting Through 'Zero Trust' Misconceptions

Tom Field  •  August 27, 2019

F. Ward Holloway of Forescout Technologies sorts through what he sees as common misconceptions about the "zero trust" approach to security, including the assumption that it can prove to be too costly and complex to implement.

Active Defense & Deception

Operation Soft Cell

Cybereason  •  August 23, 2019

In 2018, the Cybereason Research team identified a series of attacks targeting telecommunications companies. These attacks shared the same TTPs and consisted of a webshell execution followed by the deployment of Poison Ivy, a well-known RAT attributed to Chinese APT groups.

Cybercrime

Down and Out in Hacktivist Land

Mathew J. Schwartz  •  August 23, 2019

Where have all the hacktivists gone? While the likes of Anonymous, AntiSec and LulzSec became household names in the early 2010s, in the past three years the number of website hacks, defacements and information leaks tied to bona fide hacktivists has plummeted.

Account Takeover

Credential Stuffing Attacks vs. Brute Force Attacks

Mike Greene  •  August 19, 2019

To explore how credential stuffing attacks and brute force attacks differ, we need to understand what they are and how they operate. Here is a quick summary.