Security News > 2020 > October

Work from home strategies leave many companies in regulatory limbo
2020-10-27 06:00

Like most American businesses, middle market companies have been forced to rapidly implement a variety of work-from-home strategies to sustain productivity and keep employees safe during the COVID-19 pandemic. When many companies set up work-from-home solutions, they quickly realized that their new environment did not work with the legacy architecture protecting the data.

MDR service essentials: Market trends and what to look for
2020-10-27 05:30

In this interview, he discusses MDR services and the MDR market. What are the essential building blocks of a robust MDR service?

Organizations struggle to obtain quality threat data to guide key security decisions
2020-10-27 05:00

Organizations are often forced to make critical security decisions based on threat data that is not accurate, relevant and fresh, a Neustar report reveals. Just 60% of cybersecurity professionals surveyed indicate that the threat data they receive is both timely and actionable, and only 29% say the data they receive is both extremely accurate and relevant to the threats their organization is facing at that moment.

Link Previews in Chat Apps Pose Privacy, Security Issues: Researchers
2020-10-27 04:42

An analysis of the manner in which popular chat applications handle link previews has revealed several privacy and security issues, including some that still need addressing, security researchers warn. Link previews provide users with information on what a link received in chat would lead them to, regardless of whether it is a file or a web page.

Amazon sacks insiders over data leak, alerts customers
2020-10-27 04:33

Amazon has recently terminated employees responsible for leaking customer data, including their email addresses, to an unaffiliated third-party in violation of company policies. "Did anyone else get a weird email from Amazon about this data breach or was I just targeted solo?" tweeted entrepreneur Zain Jaffer.

78% of Microsoft 365 admins don’t activate MFA
2020-10-27 04:30

On average, 50% of users at enterprises running Microsoft 365 are not managed by default security policies within the platform, according to CoreView. Microsoft 365 administrators fail to implement basic security like MFA. The survey research shows that approximately 78% of Microsoft 365 administrators do not have multi-factor authentication activated.

Cyber risk literacy should be part of every defensive strategy
2020-10-27 04:00

50 geographies were assessed, including the European Union, on the present cyber risk literacy of its population, and the nature of related education and training available to promote and enable future cyber risk literacy. Specifically, the Index measures five key drivers of cyber risk literacy and education: the public's motivation to practice good cybersecurity hygiene; government policies to improve cyber literacy; how well cyber risks are addressed by education systems; how well businesses are raising their employees cyber skills, and the degree to which digital access and skills are shared broadly within the population.

Finnish psychotherapy clinic discloses data breach, victims extorted
2020-10-27 03:30

A large psychotherapy clinic in Finland is under heavy stress after a threat actor asked a ransom for a client database with confidential information stolen in a data breach that likely happened almost two years ago. Psychotherapy Center Vastaamo announced the incident last Wednesday, saying that the extortionist first contacted three of its employees in September, asking for 40 bitcoins not to release stolen patient data.

Google Removes 21 Malicious Android Apps from Play Store
2020-10-27 02:25

Google has stepped in to remove several Android applications from the official Play Store following the disclosure that the apps in question were found to serve intrusive ads. The findings were reported by the Czech cybersecurity firm Avast on Monday, which said the 21 malicious apps were downloaded nearly eight million times from Google's app marketplace.

Imperium RelevantID helps market research and panel orgs combat synthetic identity frauds
2020-10-27 02:00

Imperium announced the release of a significantly upgraded version of its flagship ID-validation tool RelevantID. This major release is designed to help market research and panel organizations combat the rise of highly sophisticated synthetic identity frauds that are becoming increasingly difficult to catch using conventional fraud-detection models. New RelevantID additionally includes FraudProbabilityScore, a machine-learning model that assesses passive and behavioral data, returning an extremely precise fraud assessment that detects fraud, bots, and jumpers/ghost completes in surveys.