Security News > 2021 > September

We cannot afford for healthcare security to be the “lowest-hanging fruit”
2021-09-22 05:00

These chronic security deficiencies leave too many healthcare professionals struggling to keep pace not only with threats, but also with other organizations, creating easy targets for attackers. Security breaches cannot be filled with "Shiny objects".

How do I select a data privacy management solution for my business?
2021-09-22 04:30

To select a suitable data privacy management solution for your business, you need to think about a variety of factors. Modern data governance and privacy isn't just about documentation and compliance, done well it empowers teams with consistent, trusted data and delivers measurable value for the entire organization.

How digital transformation impacted CIO and CTO roles
2021-09-22 04:00

Transposit announced results from a recent research study about the evolving roles of the CIO and CTO, as well as the extent of and attitudes towards adoption of DevOps practices in enterprises. Digital transformation fuels CIO and CTO role convergence.

How Cynet's Response Automation Helps Organizations Mitigate Cyber Threats
2021-09-22 03:38

To help improve this metric and enhance organizations' ability to respond to attacks quickly, many endpoint detection and response and extended detection and response vendors have started including some form of automation in their platforms to reduce the need for manual intervention. More than automating individual components, the Cynet 360 platform offers automation across every phase of incident response - from detection through remediation.

2 million malicious emails bypassed secure email gateways in 12 months
2021-09-22 03:30

Two million malicious emails bypassed traditional email defenses, like secure email gateways, between July 2020-July 2021, according to data from Tessian. In this case, the malicious emails come from a trusted vendor or supplier's legitimate email address, and likely won't be flagged by a secure email gateway as suspicious.

Whole cloud spending to surpass $1.3 trillion by 2025
2021-09-22 03:00

Whole cloud spending to sustain a CAGR of 16.9% by 2025. Dedicated Cloud Services, which includes hosted private cloud services and the fast-emerging Dedicated Cloud Infrastructure-as-a-Service segment, will grow at a faster CAGR of 31.0%, but from a much smaller revenue base of $5 billion in 2021.

Break out your emergency change process and patch this ransomware-friendly bug ASAP, says VMware
2021-09-22 00:45

VMware has disclosed a critical bug in its flagship vSphere and vCenter products and urged users to drop everything and patch it. The worst of the bunch is CVE-2021-22005, described as "An arbitrary file upload vulnerability in the Analytics service" that's part of vCenter Server.

Database containing personal info on 106m people who traveled to Thailand found open to the internet – report
2021-09-21 23:36

A database containing personal information on 106 million international travelers to Thailand was exposed to the public internet this year, a Brit biz claimed this week. According to data from The World Bank, Thailand racked up almost 40 million international arrivals in 2019, a number that was on the rise every year pre-pandemic except for 2014, the year the country experienced a military coup.

US Sanctions Cryptocurrency Exchange SUEX for Aiding Ransomware Gangs
2021-09-21 23:16

The U.S. Treasury Department on Tuesday imposed sanctions on Russian cryptocurrency exchange Suex for helping facilitate and launder transactions from at least eight ransomware variants as part of the government's efforts to crack down on a surge in ransomware incidents and make it difficult for bad actors to profit from such attacks using digital currencies. "Virtual currency exchanges such as SUEX are critical to the profitability of ransomware attacks, which help fund additional cybercriminal activity," the department said in a press release.

Is hacking back effective, or does it just scratch an evolutionary itch?
2021-09-21 21:20

Retribution by hacking back might make you feel better, but experts urge caution and explain why it's a bad idea. In the tech realm, some victims of cyberattacks want to enact revenge by hacking their hackers, a.k.a. the hack back.