In the digital age, organizations and the missions and business processes they support rely on information technology and information systems to achieve their mission and business objectives. Not only is technology used to efficiently enable businesses to carry out operational activities, but it is also the backbone for the United States’ critical infrastructure. Although technology may reduce risks associated with the human factor and legacy data-processing, it introduces new risks that, if left unaddressed, could…

Microsoft President urges tech leaders to follow lessons from Apollo missions and “War Games” Length: 6:28 | Jan 22, 2021 President Brad Smith said that national security is threatened by the industry’s inability to learn lessons from the past. Source link

A researcher has published a proof-of-concept exploit script for a critical SAP vulnerability patched in March 2020 and attackers have begun probing for vulnerable SAP systems. Background On January 14, a proof-of-concept (PoC) exploit script for a critical vulnerability in the SAP Solution Manager, a centralized management solution for SAP and non-SAP systems, was published on GitHub. The vulnerability was discovered and disclosed by security researchers Pablo Artuso and Yvan Genuer of Onapsis. It was…

Oracle Cloud VMware Solution (OCVS) provides high performance dedicated hardware using Oracle Cloud Infrastructure (OCI), running the full VMware software stack. Announced August 2020, Existing VMware and Oracle customers can now take advantage of: Infrastructure-as-a-Service (IaaS) model with VMware overlay – abstracting functionality into the software for the customer to control, whilst consuming the underlying infrastructure as a service. This removes the overhead of traditional data centre maintenance tasks such as hardware and firmware patching,…

A punitive approach toward employees reporting data breaches intensifies problems. Image: iStock/iBrave Experts are warning, when it comes to cybersecurity, blaming users is a terrible idea. Doing so likely results in creating an even worse situation. “Many organizations have defaulted to a blame culture when it comes to data security,” comments Tony Pepper, CEO of Egress Software Technologies, in an email exchange. “They believe actions have consequences and someone has to be responsible.” “In cases where…

The European Data Protection Board has issued new advice to hospitals regarding what action to take in the event of a cyber-attack. Currently released in draft form, the new set of recommendations urges healthcare providers hit with ransomware to report the attack even if no patient data is accessed or exfiltrated.  The guidelines state: “The internal documentation of a breach is an obligation independent of the risks pertaining to the breach and must be performed in each…

A former home security technician has admitted habitually hacking into customers’ home surveillance cameras to spy on people without their consent.  Telesforo Aviles accessed the accounts of around 200 customers more than 9,600 times over a period of four and half years while employed by security company ADT.  The 35-year-old carried out the cyber-intrusions for his own sexual gratification. He made a note of which camera feeds were linked to the homes of women he…