Security News

SAFE Security raises $33M to help organizations improve risk analysis and prevent data breaches
2021-07-22 23:00

This funding will fuel SAFE Security's expansion into the U.S. market as the Company pioneers a new category - Cybersecurity and Digital Business Risk Quantification to help organizations improve risk analysis and prevent data breaches. The SAFE Security platform helps quantify this risk assessment across people, processes and technology with a 'SAFE score' to help leaders make informed decisions about cyber investments and priorities.

Microsoft finds Netgear router bugs enabling corporate breaches
2021-06-30 18:14

Attackers could use critical firmware vulnerabilities discovered by Microsoft in some NETGEAR router models as a stepping stone to move laterally within enterprise networks. They allow unauthenticated attackers to access unpatched routers' management pages via authentication bypass, gain access to secrets stored on the device, and derive saved router credentials using a cryptographic side-channel attack.

S3 Ep36: Trickbot coder busted, passwords cracked, and breaches judged [Podcast]
2021-06-10 19:59

Alleged malware coder from the Trickbot gang arrested. 5500 passwords cracked and salaries stolen by "Credential stuffing" crook.

Billions of passwords leaked online from past data breaches
2021-06-09 14:09

A list of leaked passwords discovered on a hacker forum may be one of the largest such collections of all time. A 100GB text file leaked by a user on a popular hacker forum contains 8.4 billion passwords, likely gathered from past data breaches, tech news site CyberNews said on Monday.

Most mobile finance apps vulnerable to data breaches
2021-06-09 03:30

77% of financial apps have at least one serious vulnerability that could lead to a data breach, an Intertrust report reveals. This report comes at a time where finance mobile app usage has rapidly accelerated, with the number of user sessions in finance apps increasing by up to 49% over the first half of 2020.

Billions of Compromised Records and Counting: Why the Application Layer is Still the Front Door for Data Breaches
2021-06-08 13:00

Research finds that nearly 50% of data breaches over the past several years originated at the web application layer. Each part of the software development lifecycle interacts with a variety of data stores to enable real-time results and improved user functionality, setting up potential data security hazards.

Unauthorized access accounts for 43% of all breaches globally
2021-06-08 04:30

Researchers also found unauthorized access was the leading cause of breaches for the third consecutive year, increasing year-over-year for the past two years, accounting for 43% of all breaches in 2020. Correspondingly, the total number of breaches increased and while the number of 100-million plus record "Mega-breaches" dropped, cybercriminals broadened their attack surfaces to include organizations of all sizes and across industries to seize valuable assets.

Japanese government agencies suffer data breaches after Fujitsu hack
2021-05-27 07:21

Offices of multiple Japanese agencies were breached via Fujitsu's "ProjectWEB" information sharing tool. Fujitsu also said that attackers had gained unauthorized access to projects that used ProjectWEB, and stolen proprietary data.

85% of breaches involve the human element
2021-05-17 04:30

The Verizon report examines more breaches than ever before, and sheds light on how the most common forms of cyber attacks affected the international security landscape during the global pandemic. This year's report saw 5,258 breaches from 83 contributors across the globe, a third more breaches analyzed than last year.

Organizations using Microsoft 365 experience more breaches, with more severe impacts
2021-05-13 04:00

Additional insights 93% of organizations who use Microsoft 365 report suffering negative impacts following an email data breach, compared to 84% of organizations who do not use Microsoft 365. 15% of organizations using Microsoft 365 have suffered over 500 data breaches in the last year, compared to just 4% of organizations not using it.