Security News > 2020 > October

Wi-Fi security: FBI warns of risks of using wireless hotel networks
2020-10-06 15:33

Wi-Fi networks in hotels typically favor guest convenience over strong security practices, says the FBI. As the coronavirus pandemic and lockdown have forced a shift to remote work, many people are working not just from home but from public locations. In a new warning about hotel Wi-Fi, the FBI provides several tips on how to protect yourself when using such a public network.

COVID-19 Clinical Trials Slowed After Ransomware Attack
2020-10-06 15:16

A ransomware attack has hit eResearchTechnology, a medical software company that supplies pharma companies with tools for conducting clinical trials - including trials for COVID-19 vaccines. It hasn't disclosed how many of its customers have been affected by the ransomware attack, or which ransomware strain is responsible.

Onapsis Raises $55 Million in Series D Funding Round
2020-10-06 15:06

Onapsis, a Boston-based company that provides cybersecurity and compliance solutions for mission-critical applications, announced on Tuesday that it has raised $55 million in a Series D funding round. The company on Tuesday also announced support for Salesforce and SuccessFactors, and that it has launched an early access program for the Onapsis Platform for Salesforce and the Onapsis Platform for SuccessFactors.

APT Attack Injects Malware into Windows Error Reporting
2020-10-06 15:00

A campaign that injects malware into the Windows Error Reporting service to evade detection is potentially the work of a Vietnamese APT group, researchers said. The attack, discovered on Sept. 17 by researchers at Malwarebytes Threat Intelligence Team, lures its victims with a phishing campaign that claims to have important information about workers' compensation rights, according to a blog post on Tuesday by researchers Hossein Jazi and Jérôme Segura.

CISA: Emotet increasing attacks on US state, local governments
2020-10-06 14:27

Emotet attacks have targeted multiple state and local governments in the U.S. as part of potentially targeted campaigns that have been ramping up since August, the Cybersecurity and Infrastructure Security Agency said in an alert published today. Since August, the two organizations "Have seen a significant increase in malicious cyber actors targeting state and local governments with Emotet phishing emails."

John McAfee Arrested, Charged With Tax Evasion
2020-10-06 14:21

The United States Department of Justice on Monday unsealed an indictment that charges John David McAfee with tax evasion. An English-American businessman, computer programmer, and political activist, John McAfee founded cybersecurity firm McAfee Associates in 1987 and ran it until 1994.

Unpatched Apple T2 Chip Flaw Plagues Macs
2020-10-06 14:16

A researcher is claiming that Apple devices - with a macOS operating system and a T2 security chip - are open to an exploit that could give bad actors root access. The flaw stems from the T2 chip, which is the second-generation version of Apple's chip that provides bolstered security - including securing its Touch ID feature, as well as providing the foundation for encrypted storage and secure boot capabilities.

BlackBerry announces "industry first" AI-powered unified endpoint security platform
2020-10-06 14:13

BlackBerry has announced a new cybersecurity product that it says is the industry's first AI-powered unified endpoint security system. BlackBerry Cyber Suite consists of four tools that BlackBerry said makes it a preventative security tool, rather than just a detect-and-respond one.

Gone phishing: workplace email security in five steps
2020-10-06 13:50

David Mitchell, Senior Director of Email Product Management at Sophos, shares his top tips to optimize workplace email security. Five steps to secure your organization's email.

How to defend your organization against the surge in ransomware attacks
2020-10-06 13:50

In a blog post published on Tuesday, cyber threat intelligence provider Check Point Research discusses the surge in ransomware attacks and offers advice on how to battle them. Conventional signature-based antivirus protection is always an efficient solution for preventing known attacks and should be implemented in any organization as it protects against a majority of malware attacks.