open digital lock

Cyber threat activity continues to grow in Q3

New data from managed security service provider Nuspire reveals large increases in overall threat activity in the second quarter of this year continued throughout Q3, with additional growth in both exploits and botnets.

There's been a 236.22 percent jump in Kryptik variants -- a type of trojan malware distributed to victims through phishing campaigns, the goal being to steal information, including cryptocurrency wallets, files and SSH keys.

By Ian Barker -
Threat concept

Threat intelligence adoption grows but skills lag behind

A new study from Vulcan Cyber shows 75 percent of organizations have dedicated threat intelligence teams and two-thirds have dedicated threat intelligence budgets.

However, 73 percent of respondents say a lack of skills is their biggest threat intelligence challenge and is keeping organizations from making the most of their investments in threat intelligence resources.

By Ian Barker -
Email attack

Four out of 10 work emails are unwanted

Analysis of over 25 billion emails from Hornetsecurity reveals that 40.5 percent of work emails are unwanted.

We're tempted to say, "only four out of 10?" but it all depends how you define unwanted. The report looks specifically at the use of email to deliver malicious payloads -- so those emails from your boss that you'd rather not receive don't count!

By Ian Barker -
api

New platform aims to tackle API security problems

API security is a major challenge for IT teams, traditional solutions are often fragmented, leading to the need for multiple products and added complexity and cost.

Israeli cybersecurity startup Wib is launching a holistic API security platform to bring complete visibility and control across the entire API ecosystem from code right through to production.

By Ian Barker -
SMB laptop

60 percent of SMBs are not confident of fending off a ransomware attack

Smaller businesses are an attractive target for attackers since they often don't have the same security resources as larger organizations.

A new report from OpenText Security Solutions, based on a survey of over 1,300 security and IT professionals at SMBs, reveals 84 percent are concerned about a ransomware attack impacting their business and 60 percent are not confident they can fend off such an attack.

By Ian Barker -
Christmas robot

Automated threats responsible for 62 percent of eCommerce security incidents

Automated threats, ranging from account takeover, credit card fraud, web scraping, API abuses, Grinch bots, and DDoS attacks, are a persistent challenge for the eCommerce industry, according to a new report.

Cybersecurity company Imperva has conducted a 12-month analysis of threats targeting the retail industry. A continued barrage of attacks on retailers’ websites, applications, and APIs throughout the year and during peak holiday shopping times is a continued business risk for the retail industry.

By Ian Barker -
Capitol building

Federal cybersecurity leaders are struggling to protect information

A new survey of 150 federal cybersecurity leaders finds that 73 percent of respondents feel a lack of foundational data protection efforts puts their agency at risk.

In addition the research, from data protection provider Zettaset, shows 77 percent say that siloed systems that lack visibility make it difficult to properly protect critical assets. It's not surprising then that 57 percent report experiencing multiple data breaches over the past two years.

By Ian Barker -

Cybersecurity fears likely to make businesses Metaverse averse

The virtual world of the Metaverse is already attracting people to attend virtual events and play games. It also has the potential for businesses to make money -- research from McKinsey suggests it could be a $5 trillion industry by 2030.

However businesses are still wary of the additional challenges, particularly with regard to security. New research carried out by YouGov for app security company F5 shows six out of 10 respondents say the Metaverse has introduced security complexities that their organization may not be equipped to address.

By Ian Barker -
cybersecurity

Cybersecurity Awareness Month -- this year it's personal

In what was a far-sighted move back in 2004, the President of the United States and Congress declared October to be Cybersecurity Awareness Month, dedicated to helping individuals protect themselves online as threats to technology and confidential data become more commonplace.

This has now become a regular event on the calendar and the theme of this year's campaign is 'See Yourself in Cyber', aiming to underline the fact that cybersecurity is ultimately about people rather than technology.

By Ian Barker -
Business security

Navigating cyber complexities: Top tips from an ethical hacker for Cybersecurity Awareness Month

October is Cybersecurity Awareness Month, and this year’s overarching theme is "It’s Easy to Stay Safe Online."

While cybersecurity news often centers around massive data breaches and hacks, it can be overwhelming to citizens and consumers who feel powerless against such threats. However, this year’s theme serves as a reminder that we all have a part to play in making the online world a safer place, whether that be at work, home or school. 

By Joseph Carson -
Mechanism for Internet security broken

A fundamental mechanism that secures the internet has been broken

Resource Public Key Infrastructure -- or RPKI -as it's better known -- is a security framework that is designed to prevent cybercriminals or rogue states from diverting internet traffic.

National research center for Cybersecurity ATHENE says it has found a way to easily bypass this security mechanism, and in a way that means affected network operators are unable to notice.

By Wayne Williams -
Risk dial

New exposure management platform helps businesses manage cyber risks

The average enterprise uses more than 130 cybersecurity point solutions, creating siloed data that is hard for security teams to apply in meaningful ways.

To address this problem, Tenable is launching a new exposure management platform, aimed at giving customers a unified view into their organization's assets and vulnerabilities across the whole attack surface.

By Ian Barker -
DDoS attacks

DDoS attacks get smaller -- but there are more of them

The amount of DDoS attacks increased by 75.6 percent compared to the second half of 2021, but the average (0.59 Gbps) and maximum (232.0 Gbps) attack sizes each decreased by 56 percent and 66.8 percent, respectively.

New research from Nexusguard shows that single-vector attacks represented 85 percent of all attacks globally in the first half of this year. Of these User Datagram Protocol (UDP) attacks accounted for 39.6 percent, an increase of 77.5 percent from the first half of 2021, the remainder being HTTPS flood attacks.

By Ian Barker -
Lock and money

New tool helps enterprises measure the effectiveness of their security spending

Spending more money on cybersecurity tools doesn't necessarily mean you're less likely to suffer from a cyberattack. Until now though it's been hard to tell whether what you do spend is actually delivering a good return on investment.

Safe Security is today launching a new Return on Security Investment (ROSI) calculator that enables CISOs and CFOs to quantify the reduction in risk for each dollar invested in cybersecurity.

By Ian Barker -
security alert

5 alarming trends making cybersecurity threats riskier and more expensive

Imagine a future in which every person, object, and service is connected to the internet. Your car knows your destination before you do, your fridge restocks itself, and your doctor can remotely monitor your health. Now imagine that one day, all of those interconnected devices get hacked at once. Your car suddenly careens off the road, your fridge emits a deafening alarm, and your doctor’s office is flooded with false patient data.

This nightmare scenario is becoming increasingly likely, as the world becomes ever more connected and reliant on technology. And it’s not just consumers who are at risk -- businesses are, too. A single cyberattack can cost a company millions of dollars, and the price is only going up as hackers become more sophisticated.

By Lee Li -
Load More Articles