The Critical Role of Dynamic Authentication

Suparna Goswami • January 15, 2021

Organizations with largely remote workforces must strengthen their dynamic authentication processes to enhance security, says Sridhar Sidhu, senior vice president and head of the information security services group at Wells Fargo.

Cybercrime

Cybersecurity Expectations in 2021 in Malaysia

Latest

Cybercrime

Ransomware Disrupts Scottish Environment Protection Agency

Mathew J. Schwartz • January 15, 2021

The Scottish Environment Protection Agency says a ransomware attack last month continues to cause serious outages and warns that ransom-demanding attackers also stole some data. The Conti ransomware-as-a-service operation has claimed credit for the attack and begun to leak the stolen data.

Cybercrime

'Scam-as-a-Service' Scheme Spreads

Akshaya Asokan • January 15, 2021

A Russian-speaking "scam-as-a-service" operation dubbed "Classiscam" is expanding globally, with 40 interconnected gangs in about a dozen countries using fake product advertisements to launch phishing schemes, the security firm Group-IB reports.

3rd Party Risk Management

SolarWinds Supply Chain Hack: Investigation Update

Anna Delaney • January 15, 2021

The latest edition of the ISMG Security Report describes new details emerging from the SolarWinds supply chain hack investigation. Also featured: A discussion of why security education is so crucial in 2021 and tips on how to retain security and operations center analysts.

Forensics

How Conti Ransomware Works

Doug Olenick • January 14, 2021

Conti ransomware, which emerged eight months ago, poses a severe threat, according to Cybereason's Nocturnus Team, which offers an in-depth analysis of how the malware works.

Active Defense & Deception

Sizing Up the Role of Deception Technology

Anna Delaney • January 14, 2021

Chris Kubic, former CISO of the National Security Agency, describes how deception technology can change the defensive landscape: "Where deception comes into play is for the unknown threats, the things that are either an attack you haven't seen before or the attacker evolved their technique."

Business Continuity Management / Disaster Recovery

Capitol Breach: Cybersecurity Lessons to Apply

Mathew J. Schwartz • January 13, 2021

The physical breach of the U.S. Capitol by a violent mob, members of which allegedly accessed lawmakers' systems and stole devices, offers cybersecurity professional lessons to learn on authentication, encryption and more, says cybersecurity expert Brian Honan.

Breach Notification

Mimecast Says Hackers Compromised Digital Certificate

Jeremy Kirk • January 13, 2021

Email security provider Mimecast says hackers compromised a digital certificate that encrypts data that moves between several of its products and Microsoft's servers, putting organizations at risk of data loss.

Cybercrime

Mobile RAT for Android Offered on Darknet Forums

Akshaya Asokan • January 13, 2021

A recently identified mobile remote access Trojan dubbed "Rogue," which exploits Google's Firebase development platform, targets Android devices to exfiltrate personal data and can deliver other malware, according to Check Point Research. The RAT is being offered for sale or rent in darknet forums.

Cybercrime

Watering Hole Operation Leveraged Zero-Day Exploits

Akshaya Asokan • January 13, 2021

Google's Project Zero security team is describing its discovery last year of a complex "watering hole" operation that used four zero-day exploits to target Windows and Android mobile devices.

Critical Infrastructure Security

Parler Content Forcibly Archived by Researchers After Riot

Jeremy Kirk • January 12, 2021

Terabytes' worth of posts, images and videos from conservative social media site Parler have been forcibly obtained by security researchers who have archived the material for investigators in the wake of the violent riot at the U.S. Capitol.

Artificial Intelligence & Machine Learning

New Year Kicks Off With Vendor Consolidation

Doug Olenick • January 12, 2021

The new year has kicked off with a flurry of data security company acquisition activity; five deals have already been announced. Companies making acquisitions are striving to improve their secure access service edge - or SASE - posture, enter new markets or bolster their technology portfolios.

Cryptocurrency Fraud

Updated macOS Cryptominer Uses Fresh Evasion Techniques

Akshaya Asokan • January 12, 2021

Sentinel Labs researchers have identified an updated version of the cryptominer OSAMiner that targets the macOS operating system to mine for monero. The latest iteration uses new techniques to help prevent detection by security tools.