Lack of security and operations basics leave businesses unprepared for breaches
A new report from endpoint management specialist 1E reveals 77 percent of IT decision makers polled believe that they are not well prepared to react to a serious data breach and 60 percent have experienced a security breach in the past two years.
The study conducted by Vanson Bourne polled 300 decision makers from from IT operations and 300 from IT security, and finds 80 percent say digital transformation increases cyber risk.
US companies waste over two months a year resetting passwords
To mark today's World Password Day, access and identity management company OneLogin has released a report that shows IT professionals at US companies waste 2.5 months a year resetting internal passwords.
It also finds that almost half of US businesses (44 percent) take up to a month or more to deprovision ex-employees, while 28 percent take a full working week.
UK government launches five-week consultation into IoT security
The UK government is looking to ensure the security of the Internet of Things as they become more prevalent in the home, possibly through the use of legislation.
The government says that it wants IoT devices to be secure by design and, having already published a code of practice paper, is now embarking on a five-week security consultation during which the Department for Digital, Culture, Media and Sport (DCMS) will consider regulatory proposals.
Third party risk is biggest enterprise cyber threat
As supply chains become more integrated and businesses rely more on using the cloud, so the risk that they face also increases.
A new study commissioned by vendor monitoring company RiskRecon and conducted by the Cyentia Institute shows that 84 percent of organizations host critical or sensitive assets with third parties.
Personal details of 80 million US households exposed on unsecured Microsoft cloud server
Security researchers have discovered an unprotected database stored on a Microsoft cloud server. The 24GB database includes personal information about 80 million households across the US.
The researchers from vpnMentor were working on a web mapping project when they made the discovery. They say that as the database they found left out in the open relates to American households which include multiple residents, the data breach could potentially affect hundreds of millions of people.
Dark Web-leaked banking credentials leap 129 percent
A new report into the financial services threat landscape shows that there has been a huge increase in the number of banking credential leaks, while instances of compromised credit cards increased by 212 percent year-on-year.
The report from threat protection platform IntSights reveals many of the leaked credentials came from the Collection #1 database of over 773 million unique email addresses and 21 million unique passwords released onto the Dark Web in January this year.
More than half of companies have sensitive files open to all employees
The latest data risk report from security company Varonis reveals that 53 percent of companies have at least 1,000 sensitive files open to all employees, putting them at risk of data breaches.
Keeping old sensitive data that risks fines under HIPAA, GDPR and the upcoming CCPA is a problem too. The report finds over half of data is stale and 87 percent of companies have over 1,000 stale sensitive files, with 71 percent having over 5,000 stale sensitive files.
Automated governance platform helps businesses use data safely
Data privacy is a major concern for businesses, made more acute by the raft of new compliance and data protection rules appearing around the world.
Immuta is launching a platform with no-code, automated governance features that enable business analysts and data scientists to securely share and collaborate with data, dashboards, and scripts without fear of violating data policy and industry regulations.
Free test checks website security and PCI DSS compliance
Good website security is essential to give customers confidence in your business, but for smaller organizations testing can prove difficult.
To address this issue, security testing and risk rating company ImmuniWeb is launching a free website security test that can be used by anyone.
Email threats become more focused and malware gets harder to detect
Spam emails containing malware significantly dropped in 2018, to just six percent, down from 26 percent in 2017. But at the same time malware is becoming more sophisticated and harder to detect.
These are among the findings of the latest Global Security Report from Trustwave. The largest single category of malware encountered is downloaders at 13 percent.
Ransomware detections up 200 percent with businesses the main target
The latest quarterly threat research from Malwarebytes for Q1 2019 reveals a 200 percent jump in ransomware and continued increase in business targets for cyberthreats.
This shift back to ransomware comes in the wake of a continued decline in cryptomining, as well as an increased focus on mobile attacks and large-scale business invasions.
Microsoft drops password expiration policies from Windows 10 1903 security baseline
In new draft security baseline documentation, Microsoft has scrapped the policy that requires users to change their passwords on a regular basis.
The new security settings apply to Windows 10 version 1903 and Windows Server version 1903, and the change sees Microsoft conceding that its policy of forcing periodic password changes is "an ancient and obsolete mitigation of very low value". The company has a series of suggestions for how to better improve password security.
IoT devices put healthcare networks at risk
The proliferation of healthcare Internet-of-things devices, along with unpartitioned networks, insufficient access controls and the reliance on legacy systems, has exposed a vulnerable attack surface that can be exploited by cybercriminals, according to a new report.
The study by network threat detection specialist Vectra also shows gaps in policies and procedures can result in errors by healthcare staff members.
Employees put sensitive data at risk in workplace chat sessions
Around a quarter of employees share confidential information via chat sessions, and a similar number talk badly about their boss, while 78 percent wouldn’t care if some of this information was exposed publicly.
These are among the findings of a new study by secure collaboration platform Symphony which surveyed over 1,500 employees in the US and UK about their workplace communication habits.
Is Huawei funded by Chinese state security? The CIA seems to think so
Huawei has had a rough time of things when it comes to international relations, with the US and others implementing various bans on the use of the company's products. It all stems from fears about Huawei's alleged connections to the Chinese government and the potential for espionage, but this is something the company has denied time and time again.
The US has made no secret of its doubts about Huawei, and the fears have spread around the globe. Now, according to a report, the CIA has issued a warning to the UK saying that the firm has received funding from Chinese state security.
Recent Headlines
Most Commented Stories
Windows 12.1 is everything Windows 11 should be -- and the Microsoft operating system we need!
Apple Intelligence will launch in beta and that’s unacceptable for a trillion-dollar company
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.