Shadow IT and misconfigured APIs accounted for the vast majority of security incidents in the cloud last year, according to a new report from IBM Security X-Force. The threat intelligence player drew on multiple data sources, including dark web analysis, pen-testing data, incident response cases and threat intelligence to compile the 2021 IBM Security X-Force Cloud Threat Landscape Report. It revealed that attackers are actively looking to exploit weaknesses in enterprise protection, many of which come…

The UK’s high street banks have been called out for “shockingly low” reimbursement rates for Authorized Push Payment (APP) fraud. APP fraud is an increasingly popular type of scam in which the fraudster — posing as a trusted entity such as a family member or business — tricks the victim into transferring money to a bank account under their control. It cost an estimated £479m in 2020. Until a voluntary banking code of conduct was…

Key Takeaways for Control 4 Most fresh installs of operating systems or applications come with pre-configured settings that are usually insecure or not properly configured with security in mind. Use the leverage provided by multiple frameworks such as CIS Benchmarks or NIST NCP to find out if your organization needs to augment or adjust any baselines to become better aligned with policies your organization is trying to adhere to. Throughout the CIS Controls, many Controls…

Apple released security patches to fix two zero-day vulnerabilities in iOS and macOS that are actively exploited in attacks in the wild. Apple rolled out security patches to fix a couple of zero-day flaws in iOS and macOS (CVE-2021-30860, CVE-2021-30858), the IT giant also warns its customers that these issues are actively exploited in attacks in the wild, come of which were reported by researchers from Citizen Lab. In August, researchers from Citizen Lab spotted a zero-click…

CDMG – 10th Anniversary – Trip to Walt Disney World Contest – up to $10,000.00 USD in Value – Contest begins September 15, 2021 and ends on December 15, 2021. January, 2022 will mark 10 years of our hard work at building the Cyber Defense Media Group.  Thanks to growing interest, we have over 200,000 opt in email subscribers, millions of annual visitors reading our news, our e-magazines, listening to our podcasts and watching our interviews. …