RSS_Virtulization

Security experts recommend setting basic security standards for all your data feeds, enlisting help from procurement and doing an API inventory. Cyber security lock. Security computer Data Internet protection with lock, key on microscheme chip. Hacker attack and data breach, information leak concept. (Cyber security lock. Security computer Data Internet protection with lock, key on microschem Getty Images/iStockphoto From garage door openers to multi-million dollar tractors, API feeds open up security vulnerabilities on devices in…

A Chinese game developer has accidentally leaked nearly six million player profiles for the popular title Battle for the Galaxy after misconfiguring a cloud database, Infosecurity has learned. AMT Games, which has produced a string of mobile and social titles with tens of millions of downloads between them, exposed 1.5TB of data via an Elasticsearch server. A research team at reviews site WizCase found the trove, which contained 5.9 million player profiles, two million transactions, and 587,000 feedback messages. Profiles typically…

Tenable®, Inc., the Cyber Exposure company, has appointed Roger Scheer as Regional Vice President of Central Europe. Based in Germany, Scheer will manage Tenable’s operations in the region, furthering its strategic initiatives in the enterprise security market, and continue developing its channel activities and relationships. Scheer has extensive cybersecurity experience and over 25 years in IT sales and sales leadership positions. As organizations continue to face unprecedented cybersecurity challenges brought on by remote work, the…

Most criminal hackers aren’t state-sponsored agencies or activists looking for high-profile targets, and they don’t spend countless hours staking out and researching their targets. Instead, they tend to be opportunistic, looking for any available target. In that regard, you can think of them as a burglar; sure, they’re aware of high-value marks, but it’s more effective to go after easier targets. And just as a burglar will look for those marks by scouting neighbourhoods and…

The events of 2020 didn’t prevent small- to mid-sized businesses (SMBs) from adopting the cloud. Impact Networking reported that SMBs’ overall cloud spending grew 6.3% between 2019 and 2020. Such growth is projected to lead more than a third (35%) of SMBs to annually spend between $600,000 and $1.2 million on public cloud services by the end of 2021, noted Statista. Why Are SMBs Moving to the Cloud? SMBs are turning to the cloud for…

A security researcher discovered a bug in PatchGuard Windows security feature that can allow loading unsigned malicious code into the Windows kernel. Japanese researcher Kento Oki has discovered a bug in PatchGuard that could be exploited by an attacker to load unsigned malicious code into the Windows operating system kernel. The PatchGuard, also known as Kernel Patch Protection, is a software protection utility that has been designed to forbid the kernel of 64-bit versions of Windows…

A woman from Rhode Island has been charged with impersonating Microsoft to steal personal information from political candidates and their campaign staff.  Cranston resident Diana Lebeau allegedly sent phishing emails to approximately 22 members of the campaign staff of a candidate for political office in or around January 2020.  In the emails, the 21-year-old allegedly posed as either the campaign’s managers or one of the campaign’s co-chairs. Recipients were directed to enter their account login details into an attached…

Bitcoin prices rocketed in early 2021, and so did the number of cybercriminals distributing malware to force infected devices to mine them, with numbers quadrupling from February to March alone. Getty Images/iStockphoto Kaspersky has published a pair of reports detailing the state of the cybersecurity threat landscape in the first quarter of 2021. The first report, detailing desktop attacks, found that cryptomining malware has exploded in popularity, while the second report covering mobile devices, revealed…

  The Council is currently working on the next evolution of its mobile security standards. To date, PCI SSC has two mobile standards: PCI Software-based PIN Entry on COTS (SPoC) Standard, which provides a software-based approach for protecting PIN entry on the wide variety of COTS devices, and PCI Contactless Payments on COTS (CPoC) Standard which addresses security for solutions that enable merchants to accept contactless payments using a smartphone or other commercial off-the-shelf (COTS)…