security

Starbucks, Supermarkets Targeted in Ransomware Attack

Posted on by Admin
Starbucks, Supermarkets Targeted in Ransomware Attack

Starbucks and several major U.K. supermarkets experienced disruption due to a ransomware attack on the prominent supply chain software provider Blue Yonder. The company disclosed the incident on Thursday, Nov. 21, and it was still working to restore services the following Monday. The disruption to the Blue Yonder platform prevented Starbucks from paying its baristas and managing their schedules, according to the Wall Street Journal. As a result, cafe managers had to manually calculate their…

Read More

Australia Passes Groundbreaking Cyber Security Law

Posted on by Admin
Australia Passes Groundbreaking Cyber Security Law

Australia passed its first-ever Cyber Security Act on Nov. 25, introducing various measures to strengthen the nation’s defenses. Among its key provisions is a requirement that organisations report to the government if they pay ransomware criminals — a practice that has become widespread globally. The Cyber Security Act follows Australia’s Cyber Security Strategy 2023-2030. The strategy, designed to position Australia as a leader in cyber resilience, foreshadowed several measures in the law, including creating a…

Read More

From Service to Security: My Path to Empowerment at Cisco

Posted on by Admin
From Service to Security: My Path to Empowerment at Cisco

My career journey began before I was even old enough to realize it. Growing up, my mother, a single parent and immigrant, turned her handcrafted items into our family’s livelihood at local flea markets, where I would often accompany her. Her resilience and entrepreneurial skills were my earliest lessons in business, laying the groundwork for my own aspirations. These early experiences instilled in me a drive to make a meaningful impact, a drive that has…

Read More

From Service to Security: My Path to Empowerment at Cisco

Posted on by Admin
From Service to Security: My Path to Empowerment at Cisco

My career journey began before I was even old enough to realize it. Growing up, my mother, a single parent and immigrant, turned her handcrafted items into our family’s livelihood at local flea markets, where I would often accompany her. Her resilience and entrepreneurial skills were my earliest lessons in business, laying the groundwork for my own aspirations. These early experiences instilled in me a drive to make a meaningful impact, a drive that has…

Read More

1.1 Million UK NHS Employee Records Exposed

Posted on by Admin
1.1 Million UK NHS Employee Records Exposed

Over a million NHS employee records — including email addresses, phone numbers, and home addresses — were exposed online due to a misconfiguration of the low-code website builder Microsoft Power Pages. In September, researchers with the software-as-a-service security platform AppOmni identified a large shared business service provider for the NHS that was allowing unauthorised access to sensitive data through insecure permission settings on Power Pages. Specifically, the permissions on some tables and columns in Power…

Read More

Patch Tuesday: Four Critical Vulnerabilities Paved Over

Posted on by Admin
Patch Tuesday: Four Critical Vulnerabilities Paved Over

On Patch Tuesday, Windows systems will be updated with a flood of security fixes. In November, Windows patched four zero-day vulnerabilities, two of which have been exploited. Patch Tuesdays are a good time for admin teams to remind employees of the importance of keeping operating systems and applications up to date. In the meantime, software makers like Microsoft and Adobe will have caught problems and closed backdoors. In addition, as XDA pointed out, sharp-eyed Windows…

Read More

AI-Assisted Attacks Top Cyber Threat For Third Consecutive Quarter, Gartner Finds

Posted on by Admin
AI-Assisted Attacks Top Cyber Threat For Third Consecutive Quarter, Gartner Finds

For the third consecutive quarter, Gartner has found that cyber attacks staged using artificial intelligence are the biggest risk for enterprises. The consulting firm surveyed 286 senior risk and assurance executives from July through September, and 80% cited AI-enhanced malicious attacks as the top threat they were concerned about. This isn’t surprising, as evidence suggests AI-assisted attacks are on the rise. Other commonly cited emerging risks outlined in the report include AI-assisted misinformation, escalating political…

Read More

Number of Active Ransomware Groups Highest on Record

Posted on by Admin
Number of Active Ransomware Groups Highest on Record

This year has seen the highest number of active ransomware groups on record, with 58 attacking global businesses in the second quarter. Threat intelligence platform provider Cyberint has reported only a slight dip in the third quarter, with 57 active groups. Furthermore, in Q3, the top 10 ransomware groups were responsible for only 58.3% of all detected attacks. This reflects both the increase in the number of active groups in general and a decline in…

Read More

NIS 2 Compliance Deadline Approaches: What You Need To Know

Posted on by Admin
NIS 2 Compliance Deadline Approaches: What You Need To Know

On Oct. 17, the Network and Information Security 2 Directive takes effect. This means that relevant entities in industries such as energy, transport, water, healthcare, and digital infrastructure that carry out activities within the E.U. must comply with the relevant legislation. NIS 2, which was approved by the European Parliament in November 2022, aims to establish a consistent, minimum cybersecurity baseline across all E.U. member states, involving mandatory security measures and reporting procedures. Organisations subject…

Read More

7 Security and Compliance Tips From ISC2 Security Congress

Posted on by Admin
7 Security and Compliance Tips From ISC2 Security Congress

During Cybersecurity Awareness Month, thousands of cyber experts from across the globe convened in Las Vegas for the ISC2 Security Congress 2024 to discuss the industry challenges and best practices — including strategies for reducing business risks and minimizing uncertainty in their operations. Ralph Villanueva was one of those cyber professionals who offered advice to audiences. An IT security and compliance analyst at Hilton Grand Vacations, he riffed on the popular business self-help book “7…

Read More
1 2 3 4 … 15