This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: FireEye’s Mandiant researchers have discovered a malware family using the Common Log File System (CLFS) to hide their second-stage payload in registry transaction files. In their blog post Too… The ISBuzz Post:…
Tag: http://www.informationsecuritybuzz.com/feed/
Homograph Attacks Fool Microsoft’s Email Software
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: ITPro Microsoft Outlook shows real contact details in some phishing emails. Microsoft Outlook is susceptible to phishing attacks using internationalized domain names (IDNs), according to reports from two separate… The ISBuzz Post:…
Expert Comment: Howard University Cancels Classes After The Ransomware Attack
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: In response to reports that Washington D.C’s Howard University has canceled classes on Tuesday after being hit by a ransomware attack, cybersecurity experts offer their following comments. BACKGROUND: In response to… The ISBuzz Post:…
Local Authorities – Is Insecurity In Their DNA?
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ Being certain that most readers will have noticed the levels of successful cyber-attacks carried out against public services such as Government, and in particular the scattered Local Authorities who have… The ISBuzz Post:…
Microsoft Warns Cloud Customers Of Exposed Databases
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: It has been reported that Microsoft (MSFT.O) on Thursday warned thousands of its cloud computing customers, including some of the world’s largest companies, that intruders could have the ability to read, change… The ISBuzz Post:…
Double-Extortion Ransomware: Double The Threat, Double The Challenges For Businesses
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ Ransomware actors have been a continuous threat to organisations for years, and the scale of the attacks keeps advancing. In the last twelve months alone, thirty-seven percent of UK companies… The ISBuzz Post:…
Commentary: Proxyshell Flaws Warning Could Spell Trouble For Unprepared Organisations
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: Following warnings from CISA* of malicious cyber actors targeting ProxyShell vulnerabilities, there is growing concerned more government and organization systems could be exposed. BACKGROUND: Following warnings from CISA* of… The ISBuzz Post:…
Win 10 Admin Escalation With Razor Bug – Expert Insight
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: Jonhat on Twitter details the Zero-day admin escalation he found using Razer peripherals on Windows 10. He even includes a video example of the escalation. Excerpt: Need local admin… The ISBuzz Post:…
IT Leaders Fear Being Targets of Rising Nation-State Attacks
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ HP Wolf Security has just released the findings of a global survey of 1,100 IT decision-makers (ITDMs), examining their concerns around rising nation-state attacks. 72% of respondents said they worry… The ISBuzz Post:…
U.S. State Department Reportedly Hit By Cyber Attack
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: The U.S. State Department was recently hit by a cyber-attack and notifications of a “possible serious breach” were issued, according to a series of tweets by Fox News reporter… The ISBuzz Post:…
Trusting ‘Zero Trust’ – The Case For Certifications And Standards
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ For want of a better term, the ‘Cyber Security Industry’ has for many years now followed a terminology based, trending pattern attempting to achieve robust solutions to accommodate protection of… The ISBuzz Post:…
100 Million User T-Mobile Breach? – Multiple Comments
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: T-Mobile confirmed Sunday that it is looking into an online forum post claiming to be selling personal data of 100,000mm customers. If you are planning to provide continuing coverage… The ISBuzz Post:…
SEC Fines Pearson $1 Million For Downplaying Severity Of 2018 Breach – Industry Comment
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: Following the news that the SEC has fined UK education publishing company, Pearson, $1 million downplaying the severity of a 2018 cyber-attack, please see comment below from Industry experts.… The ISBuzz Post:…
Security Expert Re: Georgia Healthcare System Breach
This article has been indexed from http://www.informationsecuritybuzz.com/feed/ BACKGROUND: A ransomware attack on one of southeast Georgia’s largest healthcare systems exposed both staff and patients’ protected health information (PHI.) The Georgia-based healthcare system, St. Joseph’s/Candler (SJ/C), has 116 service locations across the state. BACKGROUND:… The ISBuzz Post:…