Security News > 2023 > October

How to Use the Scp Command to Securely Send a File from Your Desktop to a Server
2023-10-13 13:30

Learn how to use the scp command to transfer files securely with this step-by-step tutorial by expert Jack Wallen. If you regularly have to copy files from your desktop to another desktop or server, you might not want to use less secure protocols such as FTP. Fortunately, Secure Shell includes a command that makes copying files to and from a remote machine not only secure but fairly easy.

Equifax scores £11.1M slap on wrist over 2017 mega breach
2023-10-13 12:46

The UK's Financial Conduct Authority has fined Equifax a smidge over £11 million for severe failings that put millions of consumers at risk of financial crime.The two companies involved here are Equifax Ltd and Equifax Inc. There are key differences between the two that are important in fully understanding the case.

Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration
2023-10-13 11:53

The advanced persistent threat (APT) actor known as ToddyCat has been linked to a new set of malicious tools that are designed for data exfiltration, offering a deeper insight into the hacking...

Hacking the High School Grading System
2023-10-13 11:12

Interesting New York Times article about high-school students hacking the grading system. What's not helping? The policies many school districts are adopting that make it nearly impossible for low-performing students to fail-they have a grading floor under them, they know it, and that allows them to game the system.

Ransomware Attacks Double: Are Companies Prepared for 2024's Cyber Threats?
2023-10-13 11:07

Ransomware attacks have only increased in sophistication and capabilities over the past year. From new evasion and anti-analysis techniques to stealthier variants coded in new languages,...

DarkGate Malware Spreading via Messaging Services Posing as PDF Files
2023-10-13 10:36

A piece of malware known as DarkGate has been observed being spread via instant messaging platforms such as Skype and Microsoft Teams. In these attacks, the messaging apps are used to deliver a...

FBI, CISA Warn of Rising AvosLocker Ransomware Attacks Against Critical Infrastructure
2023-10-13 10:25

The AvosLocker ransomware gang has been linked to attacks against critical infrastructure sectors in the U.S., with some of them detected as recently as May 2023. That's according to a new joint...

Quantum risk is real now: How to navigate the evolving data harvesting threat
2023-10-13 04:30

In an era where data security is paramount, the recent revelations about firmware backdoors implanted by Chinese government-backed hackers serve as a stark reminder of the evolving threat landscape. To secure data today from the risks of tomorrow, organizations need to take proactive measures in securing data against quantum risks.

Stronger ransomware protection finally pays off
2023-10-13 04:00

"Our survey is a timely reminder that ransomware protection is key to ongoing success. Organizations cannot afford to become victims -ongoing security awareness training and multi-layered ransomware protection is critical to ensure there are no insurmountable losses," said Daniel Hofmann, CEO of Hornetsecurity. Reassuringly, 93.2% of respondents rank ransomware protection as 'very' to 'extremely' important in terms of IT priorities for their organization, and 87.8% of respondents confirmed they have a disaster recovery plan in place for a ransomware attack.

Introducing the book: Irreducibly Complex Systems
2023-10-13 03:30

Continuous security testing is a new strategy for validating cyber defenses. We buy security products that promise to protect us, like EDR, but how do we know they're working? CST takes the stance that endpoints are the center of your infrastructure universe.