OT and ICS vulnerabilities increase in the second half of 2021
Operational technology and industrial control systems saw a 110 percent increase in the number of vulnerabilities disclosed in the second half of last year.
The latest Biannual ICS Risk & Vulnerability Report from Claroty shows that remotely exploitable vulnerabilities are still causing problems, demonstrating the importance of securing remote connections.
The Microsoft Store undergoes a dramatic Windows 11 redesign online
Microsoft is in the process of rolling out a dramatic redesign of the web version of the Microsoft Store, heavily inspired by Windows 11.
The Fluent design makeover brings the Microsoft Store website more closely in line with the look and feel of Windows 11. This means rounded corners, updated typography and new icons, but the app installation process has also been revamped.
API attacks increase almost 700 percent in the last year
Malicious API traffic has increased 681 percent in the last year, set against a 321 percent increase in overall API traffic.
A new report from API security specialist Salt Security shows 95 percent of surveyed organizations have experienced an API security incident in the past 12 months.
Less than a quarter of directors see ransomware as a top priority
Only 23 percent of board of directors consider ransomware to be their top priority. Yet 59 percent of organizations have fallen victim to ransomware.
A new study from email security company Egress, independently conducted by Arlington Research, polled 500 IT leaders across the US and UK. It finds 52 percent of organizations allocate less than a quarter of their security budget to anti-phishing measures, yet 84 percent were hit by phishing and 42 percent had credentials stolen.
The password hygiene message still isn't getting across to consumers
According to a new report from SpyCloud, 70 percent of breached passwords are still in use and 64 percent of consumers repeat passwords across multiple accounts.
Researchers identified 1.7 billion exposed credentials, a 15 percent increase from 2020, and 13.8 billion recaptured personal identifiable information (PII) records obtained from breaches in 2021.
Certificate outages are an entirely preventable disaster
These days, I wince anytime a major digital service outage makes headlines. Outages happen, of course -- and sometimes they are unavoidable. Servers crash. Cybercriminals get lucky. People make mistakes.
That’s not why I wince, though. I wince because anytime an email exchange goes down, a music service crashes, or a mobile provider loses service, I know there are good odds that the culprit is none of those things. All too often, major service outages come down to two simple words: "expired certificate."
Google explains how it is helping in Ukraine
Google's president of global affairs, Kent Walker, has detailed the various ways in which the company is offering support to the people of Ukraine following the Russian invasion.
The announcement comes after Microsoft made a public declaration of support for the Ukrainian nation and condemned the actions of Russia. Google is offering not only financial support, but also helping to improve security, safety and the dissemination of trustworthy information about the unfolding situation in the country.
PNY XLR8 Gaming microSD card is perfect for Nintendo Switch and Valve Steam Deck
From time to time, a manufacturer will release a memory card that it claims is designed for gaming. Consumers often wonder if there is anything special about these cards that will truly benefit gamers. The answer is largely... no. Sorry, folks, but a storage card that is designed for gaming is usually just marketing hype.
With all of that said, today, PNY launches a microSD card under its XLR8 gaming brand. You know what? Thanks to the card's impressive specifications, gamers will actually want to check it out. While it is primarily intended to be used with the Nintendo Switch, it will absolutely be a smart choice for the new Valve Steam Deck and Android devices too. The card will, of course, work with any device that uses such a card, including the Raspberry Pi, drones, digital cameras, and more.
Lexar launches GOLD Series Professional 1800x UHS-II U3 SDXC storage card
Nowadays, professional photographers with high-end camera equipment are embracing CFexpress storage cards more and more. The problem? Those cards are quite expensive. Not to mention, many photographers can get by fine without using top of the line. And so, for many photographers -- amateur and professional alike -- SD cards remain a great option.
Thankfully, companies are still manufacturing new SD cards, and today, Lexar launches its latest. The GOLD Series Professional 1800x UHS-II U3 SDXC storage card is both fast and durable. Best of all, pricing starts at just $36.99, making it affordable for all consumers.
Why organizations need to increase their focus on zero-day threats
Zero-day exploits are some of the most critical cybersecurity threats facing businesses today, but also one of the most difficult to address. Cybercriminals that exploit zero-day vulnerabilities take advantage of flaws within an organization's software and security systems before the victim itself discovers it. This can lead to potentially devastating consequences when bad actors are successful in accessing critical data and networks undetected.
It is also much harder to defend against these attacks when the victim is fighting in the dark - how can an organization fix a vulnerability when they don’t know it is there? For this reason, there are thousands of organizations across the world operating with unknown gaps in their cybersecurity defenses that are vulnerable to zero-day threats
F-Secure launches free online tool to generate secure passwords
With almost depressing regularity we see lists of commonly used and easily cracked passwords. The problem is that although we all know we should use strong passwords creating them is hard.
If you're struggling to come up with strong passwords don't worry, cybersecurity company F-Secure is riding to your rescue with the launch of a new, free online Strong Password Generator tool.
Poor integration and lack of supply chain agility costs businesses dear
According to a new survey, 85 percent of companies say they are losing money to integration issues related to their supply chains, with 24 percent admitting to losing $500,000 or more.
The study carried out by Dimensional Research for Cleo shows 14 percent, say they are losing over $1 million per year, up from just 10 percent in each of the previous two years, reflecting a 40 percent year-on-year increase.
Organizations vulnerable to emerging threats as they struggle with malware analysis
Almost every organization is struggling with malware analysis according to a new report from infrastructure protection company OPSWAT.
The study finds 94 percent of organizations are finding it challenging to recruit, train, and retain malware analysis staff. In addition 93 percent of organizations are challenged by malware analysis tools that lack automation, integration, and accuracy. This leads to over 20 percent of organizations reporting they are unable to investigate and resolve a majority of their malicious files or alerts.
Winter is here
Gary Kasparov, the famous Russian chess player wrote a book in 2015 titled "Winter is Coming" which chronicled the collapse of the Soviet Union, charted the rise of Putin, and painfully captured the many missed opportunities of the West to contain Putin. The book also laid out historical reasons that Putin invaded Ukraine in a chilling fashion. Now that "Winter is Here," Putin initiated a ground war that might evolve to other geographies and realms, including information operations and cyber.
The prospect of a full-blown Cyber war -- once remote -- seems more likely if the Russian invasion of the Ukraine escalates and spills out of Eastern Europe and enters the highly-connected world in which we live. How bad can it be? No one fully knows, but cybersecurity professionals are no strangers to Russian cyber-attacks.
WhoCrashed 7 adds full support for Windows 11 and latest bugchecks to improve diagnosis
Blue-screen errors can be the hardest ones of all for Windows users to troubleshoot. Usually there’s a low-lying problem -- kernel or driver corruption, or even hardware failure. But how do you go about diagnosing the problem and finding the cure?
WhoCrashed is a tool designed to help you interpret these crashes, and with the release of WhoCrashed 7.0 Home Edition, this powerful diagnostics tool just got a lot better.
Most Commented Stories
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.