The forensic analysis of a ransomware attack [Q&A]
A ransomware attack can be devastating for businesses. But while in the aftermath of an attack the focus will be on recovery, it's also important to look at how the attack happened and what information can be gleaned to help prevent future incidents.
We spoke to Joseph Carson, chief security scientist at privileged access management specialist Delinea, to talk through the analysis of a typical attack and what lessons can be learned.
Passkey support comes to Chrome and Android
Google has announced today that it's bringing passkey support to both Chrome and Android. Passkeys offer a significantly safer replacement for passwords and other phishable authentication factors and mark another step towards a passwordless future.
If you're unfamiliar with passkeys, they're a joint initiative from Apple, Google, and Microsoft. Unlike a password the key is stored exclusively on your devices and never gets shared with anyone else.
SOC stresses mean 71 percent of security professionals consider quitting
Information and work overload, insufficient downtime, lack of tool integration, and alert fatigue mean that 71 percent of security operations center professionals say they're likely to quit their job.
A new report from logging and security analytics company Devo Technology shows SOC leaders continue to face a tricky balancing act when it comes to retaining SOC analysts amid major talent shortages and turnover.
Starting next month, we'll see independently audited viewing figures for Netflix shows
Streaming video giant Netflix has signed up as a member of Barb (Broadcasters' Audience Research Board) in the UK. This means that starting in November we will have access to independently audited viewing figures for Netflix shows.
The numbers will make for interesting reading as, until now, this is data that Netflix has been very secretive about. But with an ad-supported tier due to be launched, advertisers will require details about the number of people they can expect to reach with their advertisements.
Microsoft implements yet another upgrade block on Windows 11 22H2 due to Windows Hello problems
Microsoft is warning people who use Windows Hello not to upgrade to Windows 11 2022 Update because the sign-in system may end up not working.
The company has also put a safeguard block in place meaning that people who may be affected by the issue will not be offered the Windows 11 22H2 upgrade. There is also a warning not to try to bypass the block with a manual upgrade due to the problems this may cause.
Microsoft releases KB5018427 update to address security issues with Windows 11 2022 Update
Microsoft has released its first update to Windows 11 22H2 / Windows 11 2022 Update in the form of KB5018427. This is a cumulative security update that includes the improvements from the previously released KB5017389 update, as well as additional "security issues".
While the update addresses quite a large number of problems with Windows 11 22H2, it does not fix the known issues with provisioning packages or slow file copying.
Acer Chromebook 516 GE proves PC gamers no longer need Microsoft Windows 11
Chromebooks sure have come a long way. What was once merely a glorified web browser running atop meager hardware has morphed into a legitimate Windows alternative for home, education, and business use. You can even get Chromebooks with high-quality hardware these days. Thanks to cloud-based video-game-streaming, Chromebooks can serve as gaming computers nowadays too.
Today, Acer launches its first-ever Chromebook designed specifically for gamers. Powered by a 12th Gen Intel Core processor and equipped with at least 8GB of RAM, the 16-inch Acer Chromebook 516 GE should be perfect for game-streaming platforms like NVIDIA GeForce NOW, Xbox Cloud Gaming, and Amazon Luna to name a few. And yes, this Chrome OS laptop has an RGB keyboard.
Internet Archive's new COVID-19 Web Archive lets you explore the pandemic from different perspectives
There are moments in everyone’s lives when they become aware that they are living through history. The COVID-19 pandemic, with its global lockdowns, was definitely one of those times.
In a bid to document the "personal, cultural, and societal impact" of the global pandemic from a number of different perspectives, the Internet Archive has created a giant COVID-19 web portal for anyone to explore.
Remote workforces at SMBs are being left unprotected
Cyberattacks and other threats aren't limited to large organizations, indeed SMBs are often targeted as they are seen as having fewer resources to devote IT security defenses, particularly related to remote workers.
A new survey from software company Devolutions bears out this view, with only 18 percent of SMBs checking all the requisite IT security boxes and 13 percent not implementing any essential IT security measures at all.
Protecting sensitive data in the 'golden age' of cybercrime
Like it or not, the global cybercrime industry has grown at a prolific rate over the last decade, making it harder than ever for organizations to keep sensitive data safe. To put the size of the issue into perspective, a recent IDC report found that around 50 percent of organizations have suffered unrecoverable data loss in the last three years. What’s more, the data also demonstrated how the pandemic turbocharged the issue, with attacks surging by an eye-watering 238 percent between February and April 2020. Simply put, the world seems to be in an extremely worrying 'golden age' of cybercrime at the moment.
As every business knows, a successful cyber-attack can have a devastating effect, potentially costing huge amounts of time and money to resolve, as well as inflicting major reputational damage, should sensitive information be taken or lost. In some cases, the organizations involved never recover.
Using just-in-time credentials to minimize access-based DevOps security risks
While the rapid adoption of DevOps processes has helped companies assume an agile product position in the market, security has lagged. Specifically, DevOps's prioritization of tools and automation has led to an explosion of machine identities that traditional waterfall-based security mechanisms cannot keep pace with.
Verizon's 2021 Data Breach Investigations report highlighted the extent of the problem by revealing that 61 percent of data breaches involved misused credentials data. These breaches are rarely incidents of a malicious actor stealing a human entity's password. Instead, hackers leverage expired or unused machine identities, also known as workload identities, to penetrate networks. As a result, some 92 percent of respondents to a recent Enterprise Strategy Group (ESG) survey indicated that they see workload identities as "critical" or "very important" risks.
One in five CISOs works over 25 hours overtime each week
According to new research from Tessian, 18 percent of UK and US security leaders work over 25 hours extra a week, double the amount of overtime they reported in 2021.
On average, they work 16.5 hours over their contracted weekly hours, up from 11 hours in 2021. Also three-quarters of security leaders say they aren't able to always switch off from work, 16 percent of these say they can rarely or never switch off.
Consumers want businesses to be more transparent about handling data
Consumers want to see more transparency from businesses around how their data is handled, according to the Cisco 2022 Consumer Privacy Survey.
The survey also shows that while consumers are supportive of artificial intelligence -- 54 percent are willing to share their anonymized data to improve AI products -- they are concerned about how businesses use AI, with 65 percent having lost trust in organizations due to their AI use.
UK sees one case of fraud every 85 seconds
A new study finds that £95 ($105) is lost to fraud every second in the UK. This is according to analysis by fraud prevention specialist Outseer of all the reported incidents of fraud to Action Fraud -- the UK's national reporting center for fraud and cybercrime -- between 1st July 2021 to 30th June 2022.
The data shows one case was reported to Action Fraud every 85 seconds and reported losses totalled over £3 billion ($3.31 billion) during the 12-month study period.
YouTube launches @ handles for channels
YouTube has announced that creators can now make use of @ handles for their channels. The move is a long time coming and the aim is to help increase engagement on the platform.
With the introduction of handles, YouTube is making it easier for users to mention others in their comments and more. Handles are rolling out over the next month, and YouTube says that it will notify creators when they are able to choose one for their channel.
Most Commented Stories
It's finally time to say goodbye to Windows 11 -- Nitrux Linux 3.7.0 is the OS you've been waiting for!
Windows 12.1 is everything Windows 11 should be -- and the Microsoft operating system we need!
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.