data breach

CISOs in Australia Urged to Take a Closer Look at Data Breach Risks

Posted on by Admin
CISOs in Australia Urged to Take a Closer Look at Data Breach Risks

Clayton Utz cyber partner Brenton Steenkamp has seen his fair share of cyber attacks. Returning to Australia in October after a seven-year stint in Amsterdam, he has brought home tales of dealing with multiple large ransomware attacks in Europe, as well as the data governance lessons they provided. Steenkamp said he has observed many Australian organisations are yet to assume the “paradigm shifting” view of risk around data estates that is necessary for future data…

Read More

How the Change Healthcare breach can prompt real cybersecurity change

Posted on by Admin
How the Change Healthcare breach can prompt real cybersecurity change

People’s lives, privacy and safety can hang in the balance when malicious criminals disrupt healthcare operations. Recently, a ransomware attack forced Change Healthcare, which maintains medical records for approximately one-third of patients in the United States, to shut down their systems and impacted pharmacies nationwide, delaying critical prescriptions. This incident is just the latest in a string of healthcare breaches affecting an alarming number of patients and giving attackers access to the most sensitive personal…

Read More

How Can Businesses Defend Themselves Against Cyberthreats?

Posted on by Admin
How Can Businesses Defend Themselves Against Cyberthreats?

Today, all businesses are at risk of cyberattack, and that risk is constantly growing. Digital transformations are resulting in more sensitive and valuable data being moved onto online systems capable of exploitation, thus increasing the profitability of a successful breach. Furthermore, launching a cyberattack is becoming more accessible. Exploit kits and malware-as-a-service offerings are getting cheaper, while open-source AI tools are making masquerading as a trusted executive and exploiting vulnerabilities easier. TechRepublic consolidated expert advice…

Read More

CISOs aren’t scapegoats: Fostering a security-first culture

Posted on by Admin
CISOs aren’t scapegoats: Fostering a security-first culture

Ten years ago, it was the norm for security breaches to be the sole responsibility of the chief information security officer (CISO). For this reason, the CISO role traditionally had a higher turnover rate, with many experiencing extreme burnout. But now, as data breaches make regular headlines and every organization becomes a lucrative target for cybercriminals, IT security has become a business priority, causing the full C-suite to take note.  Cybersecurity is now a business…

Read More

Devices Infected With Data-Stealing Malware Increased by 7 Times Since 2020

Posted on by Admin
Devices Infected With Data-Stealing Malware Increased by 7 Times Since 2020

The number of devices infected with data-stealing malware in 2023 was 9.8 million, a sevenfold increase over the same figure for 2020, according to new research from Kaspersky Digital Footprint Intelligence. However, the researchers believe that the true figure could be as high as 16 million, as credentials from devices infected in 2023 may not be leaked onto the dark web until later this year (Figure A). Figure A: Number of infections of data-stealing malware…

Read More

Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes

Posted on by Admin
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes

Mar 05, 2024NewsroomEmail Security / Network Security The threat actor known as TA577 has been observed using ZIP archive attachments in phishing emails with an aim to steal NT LAN Manager (NTLM) hashes. The new attack chain “can be used for sensitive information gathering purposes and to enable follow-on activity,” enterprise security firm Proofpoint said in a Monday report. At least two campaigns taking advantage of this approach were observed on February 26 and 27,…

Read More

Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

Posted on by Admin
Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

The threat actor tracked as TA866 has resurfaced after a nine-month hiatus with a new large-volume phishing campaign to deliver known malware families such as WasabiSeed and Screenshotter. The campaign, observed earlier this month and blocked by Proofpoint on January 11, 2024, involved sending thousands of invoice-themed emails targeting North America bearing decoy PDF files. “The PDFs contained OneDrive URLs that, if clicked, initiated a multi-step infection chain eventually leading to the malware payload, a…

Read More

Ensure service account security is top priority this holiday season

Posted on by Admin
Ensure service account security is top priority this holiday season

Security teams have long been aware of the risks associated with service accounts and how they can constitute a major threat to businesses. Although businesses are aware of the risks associated with service accounts, protecting them from malicious actors has not been a priority until recently. As we know from years past, the holiday season is a popular time of year for threat actors to try new tricks to break into an organization’s network. Now…

Read More

Cyber Security Trends to Watch in Australia in 2024

Posted on by Admin
Cyber Security Trends to Watch in Australia in 2024

Ransomware attacks on infrastructure and mid-market businesses are tipped to rise, while the use of AI cyber tools will grow as IT customers seek more signal and less noise from vendors. The year 2023 was a big year for cyber security professionals in Australia. While IT teams continued to deal with the fallout of some big Australian data breaches, the new 2023-2030 Australian Cyber Security Strategy was released to boost defences against future threats. Experts…

Read More

How to build cyber resilience in a rapidly evolving threat landscape

Posted on by Admin
How to build cyber resilience in a rapidly evolving threat landscape

The ransomware landscape is ever evolving and it can seem as though there is a new headline about a breach, extortion demand or fallout after an attack every day. But how can security leaders build cyber resilience?  Here, we talk to Justin Shattuck, Chief Information Security Officer (CISO) at Resilience Security magazine: Tell us about your title and background.  Shattuck: I currently serve as the CISO for Resilience, a cyber risk company bridging the divide between…

Read More
1 2 3 4 5 … 25