Security News > 2020 > August

Capital One Fined $80 Million for 2019 Data Breach Affecting 106 Million Users
2020-08-07 05:33

A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal information of more than 100 million credit card applicants of Americans. According to a press release published by the OCC on Thursday, Capital One failed to establish appropriate risk management before migrating its IT operations to a public cloud-based service, which included appropriate design and implementation of certain network security controls, adequate data loss prevention controls, and effective dispositioning of alerts.

August 2020 Patch Tuesday forecast: Planning for the end?
2020-08-07 05:20

The operational lifespan of an operating system version is shrinking, and the model has changed as Microsoft moved to the software-as-a-service model for Windows 10. Double check your applications to ensure compatibility as you make the operating system upgrades on these systems - you only have 2-3 months left!

New infosec products of the week: August 7, 2020
2020-08-07 05:00

Fortinet unveiled the FortiGate 4400F, a firewall capable of securing 5G networks. The FortiGate 4400F is a hyperscale firewall, setting new milestones for Security Compute Ratings to deliver performance, scalability and security in a single appliance.

Open source tool Infection Monkey allows security pros to test their network like never before
2020-08-07 04:30

Guardicore unveiled new capabilities for Infection Monkey, its free, open source breach and attack simulation tool that maps to the MITRE ATT&CK knowledge base and tests network adherence to the Forrester Zero Trust framework. Infection Monkey is a self-propagating testing tool that hundreds of information technology teams from across the world use to test network adherence to the zero trust framework, and find weaknesses in their on-premises and cloud-based data centers.

DDoS attacks in April, May and June 2020 double compared to Q2 2019
2020-08-07 04:00

Findings from Link11's H1 2020 DDoS Report reveal a resurgence in DDoS attacks during the global COVID-19 related lockdowns. The new method of attack was used hundreds of times for DDoS attacks during the COVID-19 pandemic in the second quarter of 2020.

Trump administration labels WeChat, TikTok ‘threats’ to national security, bans transactions with both
2020-08-07 03:32

United States president Donald Trump has issued two executive orders banning Chinese messaging service WeChat and made-in-China-but-only-operating-abroad social network TikTok, and labelling the two a "Threat". Which is five days after the September 15 deadline president Trump has given Microsoft to do a deal to buy some of TikTok.

Trump Administration labels WeChat and Tiktok ‘threats’ to national security and bans transactions with both
2020-08-07 03:32

United States president Donald Trump has issued two executive orders banning Chinese messaging service WeChat and made-in-China-but-only-operating-abroad social network TikTok, and labelling the two a "Threat". Which is five days after the September 15 deadline president Trump has given Microsoft to do a deal to buy some of TikTok.

What are the benefits of automated, cloud-native patch management?
2020-08-07 03:30

Could organizations recoup their share of more than $1 billion per quarter by moving away from legacy solutions to cloud-native patch management and endpoint hardening? A new report from Sedulo Group says yes. The 2020 TCO Study of Microsoft WSUS & SCCM report shows organizations using Microsoft endpoint management for patching and hardening spend nearly 2x as much as organizations using SaaS-based patch management platforms.

Consumers don’t entirely trust smart home tech
2020-08-07 03:00

Smart home tech is marketed to enhance your home and make life easier. To better understand consumers perceptions of the desirability of the smart home, researchers from WMG and Computer Science, University of Warwick have carried out a nationally representative survey of UK consumers designed to measure adoption and acceptability, focusing on awareness, ownership, experience, trust, satisfaction and intention to use.

How COVID-19 Has Changed Business Cybersecurity Priorities Forever
2020-08-07 01:30

With that in mind, here are some of the ways that COVID-19 has reshaped the threat landscape and where the new cybersecurity priorities lay. Whereas IT organizations had been moving toward reliance on highly-trained cybersecurity experts to defend their pre-pandemic networks, they will now have to make sure all employees know how to keep business data and systems safe from inappropriate access no matter where they're working.