Author: Admin

By Guillaume Bourcy, Vice President, Data & Identity Solutions, TeleSign During the peak of the global pandemic, online shopping and cybercriminal activity hit unprecedented figures, hitting merchants’ bottom lines hard. Juniper Research predicts that merchant losses from eCommerce fraud in 2021 will be $20 billion, up from $17 billion in 2020. Slowing – or reversing ­– this trend makes prioritizing fraud prevention strategies across all eCommerce channels an imperative in 2022 and beyond. The first…

Security researchers say they have seen a “massive wave” of malicious hackers exploiting the comment feature in Google Docs to spread malicious content into the inboxes of unsuspecting targeted users. According to a blog post published by Avanan, the comments functionality of Google Docs, as well as its fellow Google Workplace web-based applications Google Sheets and Google Slides, is being exploited to send out malicious links. The flaw can be exploited by cybercriminals to send…

By Richard Hummel, Threat Intelligence Lead, NETSCOUTy In March 2018, a massive Distributed Denial of Service (DDoS) disrupted service for the developer platform GitHub. The attack, which lasted for approximately 20 minutes, was the largest on record. It was also a milestone. At roughly 1.2 terabits for second, it formally inaugurated the era of terabit-class attacks, roughly the equivalent of 25 or 30 high definition movies every second. It was followed one week later by…

A controversial ‘cybersecurity consultancy’ has said it’s closing after its report into alleged election fraud in Arizona was roundly rebuffed by officials. According to a reporter for The Guardian, boss Doug Logan “and the rest of the employees have been let go and Cyber Ninjas is being shut down.” Arizona Senate Republicans hired Cyber Ninjas to find evidence supporting Donald Trump’s widely debunked claims that the 2020 election was stolen from him. Its long-awaited report was this week…

A leading provider of school website infrastructure has been hit by a ransomware attack, potentially disrupting thousands of global customers. Finalsite claims to serve over 8000 schools worldwide, offering content management, communications, mobile and enrolment software. A message posted by the firm on Twitter yesterday apologized for the “prolonged outage” customers have been forced to endure as a result of the attack. “The Finalsite security team monitors our network systems 24 hours a day, seven…

In many ways, 2021 ended in much the same way it started: On a near-weekly basis, cybersecurity companies announced new exploits and urged customers to patch immediately. Meanwhile, disruptive attacks, nation-state campaigns, and cybercriminal activity seemed as prevalent as ever. On Dec. 10, various security agencies and analysts (both in the U.S. and overseas) warned about a critical flaw in Log4j, a Java-based logging utility used in multiple applications that is part of the Apache Logging…

While you will always need your technical, leadership, and communication skills, they’re not necessarily what will make you stand out from other project managers. Over the past few years, a lot has changed about how projects are managed and led, requiring many project managers to retool and reach what previously brought them — and their organizations — success. Today, most teams are working either remotely or as part of a hybrid workforce strategy that relies…

Security researchers are warning of a critical new Java bug with the same root cause as the notorious Log4Shell vulnerability currently being exploited around the globe. CVE-2021-42392 has yet to be officially published in the National Vulnerability Database (NVD), but according to JFrog, it impacts the console of the popular H2 Java SQL database. The security firm urged any organization currently running an H2 console exposed to their LAN or WAN to update the database immediately to…

By Jerry Hoff Given the continuing enterprise security landscape changes since early 2020, such as massively increased remote workforces and the ongoing push towards cloud-based services and infrastructure, many enterprise executives are rethinking and rearchitecting their enterprises to meet these challenges.  Remote work is now generally accepted as a permanent fixture, therefore, 2022 will require very different cybersecurity defenses to match the nature of new threats and what needs to be protected. That said, many…