Security News > 2022 > February

MuddyWater hacking group targets Turkey in new campaign
2022-02-01 07:30

The Iranian-backed MuddyWater hacking group is conducting a new malicious campaign targeting private Turkish organizations and governmental institutions. The hacking group has been attributed to attacks against entities in Central and Southwest Asia and numerous public and privately-held organizations from Europe, Asia, and North America in the telecommunications, government, oil, and airline industry sectors.

Review: Group-IB Threat Intelligence & Attribution (TI&A)
2022-02-01 06:30

The product reviewed here is Group-IB's solution offering customer-tailored data on threats and attackers: Threat Intelligence & Attribution. Most of them are only available for Group-IB Threat Intelligence & Attribution customers due to a restricted sharing policy, like the fourth volume of its Hi-Tech Crime Trends 2021/2022 report "Cyberwarfare: state-sponsored operations in cyberspace." The reports differ on several points: topic, depth, and publishing frequency.

How ready are federal agencies for zero trust implementation?
2022-02-01 06:00

More than 70 percent of federal agencies are aggressively adopting zero trust principles, while another 26 percent are adopting where they feel it makes sense, according to a Merlin Cyber and MeriTalk report. The report is based on a survey of more than 150 federal cybersecurity decision makers and explores the priorities, goals and anticipated challenges around the federal government's zero trust implementations.

Top attack trends every organization should build resilience against
2022-02-01 05:30

The report highlights the four top attack trends that every organization should build resilience against: business email compromise, ransomware, supply chain targeting, and cryptojacking. 2022 cybersecurity trends and predictions BEC: This type of attack is still public enemy number one.

Understaffing persistently impacting enterprise privacy teams
2022-02-01 05:00

A research from ISACA explores the latest trends in enterprise privacy - from privacy workforce and privacy by design to privacy challenges and the future of privacy. The report highlights the persistent understaffing that is impacting enterprise privacy teams.

Organizations neglecting Microsoft 365 cybersecurity features
2022-02-01 04:30

Nearly half of organizations are not using the full set of features and applications available in Microsoft 365, a research from Ensono reveals.Since the onset of the pandemic, platforms and tools such as Microsoft 365 have enabled businesses to successfully adapt to the new working world.

IoT in smart cities market to reach $132.2 billion by 2026
2022-02-01 04:15

The global IoT in smart cities market size to grow from $130.6 billion in 2021 to $132.2 billion by 2026, at a Compound Annual Growth Rate of 19.0 % during the forecast period, according to ResearchAndMarkets. The service segment in the IoT in smart cities market to have a higher CAGR. The services segment in the IoT in smart cities market is expected to grow, as major players are focused on offering services.

Infosec products of the month: January 2022
2022-02-01 04:00

Axonius SaaS Management identifies misconfigurations and data security risks. Axonius SaaS Management lets customers address the operational and financial challenges of SaaS asset management, as well as the security and risk gaps, all via a non-intrusive deployment that delivers actionable insights from day one.

eBook: Anomaly Detection in Cybersecurity for Dummies
2022-02-01 03:45

One of the best ways to defend against both internal and external attacks is to integrate anomaly detection, a.k.a. user and entity behavior analytics capabilities, into your security analytics solution. This eBook breaks down the different types of security anomalies and explain what each one looks like.

German Court Rules Websites Embedding Google Fonts Violates GDPR
2022-02-01 03:09

A regional court in the German city of Munich has ordered a website operator to pay €100 in damages for transferring a user's personal data - i.e., IP address - to Google via the search giant's Fonts library without the individual's consent. The unauthorized disclosure of the plaintiff's IP address by the unnamed website to Google constitutes a contravention of the user's privacy rights, the court said, adding the website operator could theoretically combine the gathered information with other third-party data to identify the "Persons behind the IP address."