|
Over 80% companies re-structured their cybersecurity infrastructure in 2020
Over 80 percent of enterprises have transformed their approach to cybersecurity. This change has been led by large-scale enterprises. Small and medium-sized enterprises have followed suit by improving the way they approach cybersecurity. Many small businesses are digitally driven. Companies with as few as 10 employees are adjusting their cloud security as more of their employees are working from home.
https://www.hackread.com/companies-re-structured-cybersecurity-infrastructure-2020/
Microsoft rolls out protection for critical accounts in Office 365
Priority Account Protection enables an organization's security team to provide critical accounts with custom-tailored protection measures to block targeted attacks such as phishing that could lead to severe security breaches due to their access to highly sensitive company data. It allows prioritizing alerts and threat investigations involving an organization's most targeted or visible executive-level users.
https://www.bleepingcomputer.com/news/security/microsoft-rolls-out-protection-for-critical-accounts-in-office-365/
Hackers Hit COVID-19 Biotech Firm, Cold Storage Giant with Cyberattacks
Law enforcement has been contacted, and Americold is working with outside cybersecurity leaders and its legal counsel to respond to the incident. The disclosure does not detail the type of threat or exploit leveraged in the attack but the company is continuing to recover from the attack, while ensuring its IT infrastructure and customer data is secured.
https://healthitsecurity.com/news/hackers-hit-covid-19-biotech-firm-cold-storage-giant-with-cyberattacks
7 Best Practices for Third-Party Risk Management in the Pharmaceutical Industry
From a logistics view, a growing number of touchpoints between production and consumers, shipments that require refrigeration, packaging coordination, and shipment delays related to third-parties all may increase risk. This risk is compounded by compliance-related issues. [...] If these companies and their third-parties do not comply, the organization becomes subject to costly fines – which can range between $10 million and $1 billion depending on various factors.
https://hitconsultant.net/2020/11/19/best-practices-third-party-risk-management-pharmaceutical/#.X7bcQ-WSlPY
Threats without borders: Brazilian banking trojans go global
In years past, attacking local financial institutions was easy for Brazil-based cybercrime groups, because the attackers were intimately familiar with the regional banking systems as well as the local, Portuguese language. But as these banks have begun to fight back, the attackers have had to make their living elsewhere, say experts, and they’ve largely chosen the path of least resistance.
https://www.scmagazine.com/home/finance/threats-without-borders-brazilian-banking-trojans-go-global/
Business interruption drives 60% of cyber losses: Allianz
When it comes to value, cyberattacks – including distributed denial of service (DDoS), phishing and malware – accounted for the majority of claims analyzed by AGCS (85%). Malicious internal actions accounted for 9% of losses. “Losses from incidents such as DDoS attacks or phishing and ransomware campaigns account for a significant majority of the value of cyber claims today,” Catharina Richter, global head of Allianz’s Cyber Center of Competence said in the statement.
https://www.businessinsurance.com/article/20201119/NEWS06/912337901/Business-interruption-drives-60-of-cyber-losses-Allianz
Cybercriminals Batter Automakers With Ransomware, IP Theft Cyberattacks
Paul Prudhomme, cyber-threat intelligence analyst at IntSights, warned in new Thursday research that automotive cyberattacks are on the rise – whether they’re aimed at intellectual property (IP) theft or bent on delivering ransomware. And, with the ongoing pandemic shaking up both the sales and supply chain across the automotive industry, the risks of cyberthreats are only adding on to an existing pile of problems.
https://threatpost.com/cybercriminals-automakers-ransomware-ip-theft-cyberattacks/161362/
Researchers Warn of Critical Flaw Affecting Industrial Automation Systems
RTA's ENIP stack is one of the widely used industrial automation devices and is billed as the "standard for factory floor I/O applications in North America." "Successful exploitation of this vulnerability could cause a denial-of-service condition, and a buffer overflow may allow remote code execution," the US cybersecurity and infrastructure agency (CISA) said in an advisory.
https://thehackernews.com/2020/11/researchers-warn-of-critical-flaws.html
Cybersecurity depends on the user
President of Check Point Software Technologies in Russia and CIS Vasily Diaghilev has singled out 3 key challenges in the new reality. Firstly, the decision-taking time limit has shortened considerably, — the market proved unprepared for this (unlike in the past, when months were given to elaborate decisions on cyber security, now a mere days are given to do so). Secondly, the criminal groups which had to go online as well, were provided with new financing to “work” in the cyber sphere. Thirdly, user vulnerability went up due to a wide variety of hacking methods.
https://moderndiplomacy.eu/2020/11/19/cybersecurity-depends-on-the-user/
‘Absolute right guy for the job’: New cyber chief takes reins amid the chaos
Wales, CISA’s top career staffer and officially its executive director, became its acting director on Wednesday after Trump fired Krebs for debunking the baseless election-related conspiracy theories that the president and his allies are promoting. At least for now, that debunking continues — the agency “Rumor Control” website that so angered the White House was still operating Wednesday afternoon, although Wales has not continued Krebs’ practice of indirectly trolling the president on Twitter.
https://www.politico.com/news/2020/11/18/cisa-krebs-brandon-wales-437861
CISA joins fight in cyber attacks targeting veterans
So while working for Vietnam Veterans, America, we published this 200 page report. It was covered by your network and virtually every major network out there. And yet, we got crickets from the executive branch all around. The VA said that they were going to respond. It’s been over a year, the VA has had no response. Finally, it was CISA who reached out to Vietnam Veterans Americans and said, hey let’s form a partnership here. We want to help to defend veterans against foreign online interference, and we jumped at the opportunity.
https://federalnewsnetwork.com/cybersecurity/2020/11/cisa-joins-fight-in-cyber-attacks-targeting-veterans/
The UK's new offensive cyber unit takes on organised crime and hostile states
[MI6] - which will provide its "expertise in recruiting and running agents alongside its unique ability to deliver clandestine operational technology". GCHQ said that examples of cyber operations could include interfering with a mobile phone to prevent a terrorist from being able to communicate with their contacts, helping to prevent the internet from being used as a platform for serious crimes, or keeping UK military aircraft safe from targeting by hostile weapons systems.
https://www.zdnet.com/article/new-cyber-force-will-take-the-fight-to-organised-crime-and-hostile-states/
Hacking attacks on government growing more sophisticated, intelligence agency warns
"We certainly do see state actors, but by far and large it's cybercrime, which I would say is getting more and more sophisticated," Scott Jones, head of the Communications Security Establishment (CSE) Canadian Centre for Cyber Security, told CBC News. The motivations for such attacks vary widely, he said. Some criminals play for small stakes — trying to pick off individual government employees for their SIN numbers and passwords, for example.
https://www.cbc.ca/news/politics/hacking-cyber-crime-cse-1.5803881
Chinese Hackers Exploit Zerologon Flaw for Cyberespionage
"Companies in multiple sectors are targeted in this campaign, including those operating in the pharmaceutical and engineering sectors, as well as managed service providers," the report notes. "The scale and sophistication of this attack campaign indicate that it is the work of a large and well-resourced group, with Symantec discovering enough evidence to attribute it to Cicada."
https://www.bankinfosecurity.com/chinese-hackers-exploit-zerologon-flaw-for-cyberespionage-a-15406
US Senate approves deepfake bill to defend against manipulated media
The bill, S.2904, directs the US National Science foundation to support research into "manipulated or synthesized content and information authenticity," specifically the content produced by AI systems known as Generative Adversarial Networks(GANs), such as deepfakes. It also requires the National Institute of Standards and Technology (NIST) to develop ways to measure and assess deepfakes and to investigate public-private partnerships focused on detected synthesized or manipulated content.
https://www.theregister.com/2020/11/19/us_senate_deepfake/
‘The cameras are always on’: Student surveillance and privacy protection in the age of e-learning
The virtual learning environment has already provided educators a clear glimpse into their students’ home lives in ways like never before. As stories emerge about what it means now that school is in the home — such as a teacher raising funds to ensure their students have fire detectors in their home after hearing beeping through student cameras — it raises questions about the larger implications for K-12 schools and concerns about a normalization of surveillance and a changing idea of privacy.
https://www.publicsource.org/the-cameras-are-always-on-student-surveillance-and-privacy-protection-in-the-age-of-e-learning/
Streetlight Spy Cameras Have Led to a Massive Privacy Backlash in San Diego
In 2017, the city of San Diego began installing around 3,000 sensors and hidden cameras into streetlights. The so-called "smart streetlights" were originally approved as an initiative to monitor and mitigate traffic, but quietly became a crime-solving tool for local police and faced public outcry from privacy-concerned residents. Now, what began with local opposition to the controversial technology is driving an effort that could give the city one of the strongest sets of local privacy regulations in the country.
https://www.vice.com/en/article/z3vn83/streetlight-spy-cameras-have-led-to-a-massive-privacy-backlash-in-san-diego
Facebook AI catches 95% of hate speech; company still wants mods back in office
Facebook's software systems get ever better at detecting and blocking hate speech on both the Facebook and Instagram platforms, the company boasted today—but the hardest work still has to be done by people, and many of those people warn that the world's biggest social media company is putting them in unsafe working conditions.
https://arstechnica.com/tech-policy/2020/11/facebook-touts-enforcement-amid-investigations-moderator-complaints/
|
