Security News

You wanna use GCHQ offshoot NCSC's threat intel feeds? Why not, say bosses
2021-11-17 11:15

Britain's National Cyber Security Centre is prepared to share its cyber defence tech and threat intel feeds with British organisations in need of extra help, it said at the launch of its annual review today. You probably don't want the country's DNS being run by GCHQ! Chief techie Ian Levy highlighted the NCSC's Protective DNS service to The Register as one example of good things the cyber defence organisation has done, with the custom DNS resolver service being used by 1,000 NHS supply chain firms to prevent their devices visiting known malicious web domains.

Threat actors offer millions for zero-days, developers talk of exploit-as-a-service
2021-11-17 08:33

While mostly hidden in private conversations, details sometimes emerge about the parallel economy of vulnerability exploits on underground forums, revealing just how fat of a wallet some threat actors have. If it takes too long, developers may lose the chance to make big money because competitors may come up with an exploit variant, dragging down the price.

Threat from Organized Cybercrime Syndicates Is Rising
2021-11-13 00:46

The latest organized crime threat assessment from Europol issues a dire warning about the corrosive effect the rising influence of criminal syndicates is having on both the economy and society of the European Union. "The online environment and online trade provide criminals access to expertise and sophisticated tools enabling criminal activities," The Europol Threat Assessment said.

These are the top-level domains threat actors like the most
2021-11-12 16:04

Out of over a thousand top-level domain choices, cyber-criminals and threat actors prefer a small set of 25, which accounts for 90% of all malicious sites. "First, we only study domains categorized by the Advanced URL Filtering service, and we only consider registered domains. Additionally, we validate whether domains existed the past one year by checking zone files and passive DNS, and by issuing active DNS queries. We do not consider domains that we categorize as parked, insufficient content or unknown for our calculations," explains the research by Palo Alto Networks Unit42.

DDoS attacks were a more serious threat in Q3 2021 than ever before
2021-11-11 05:15

Link11 has released new data from its network on the development of the DDoS threat: The number of attacks remains at a very high level in Q3 2021. While single attack methods are declining, multi-vector attacks are becoming the norm in the DDoS threat landscape.

As the holiday season approaches, threats to supply chain, e-commerce and travel soar
2021-11-11 04:15

As the 2021 holiday season approaches, supply chain and logistics, e-commerce and retail, and the travel industry see predictable increases in consumer and business activity - making them more vulnerable to cyber threats and leaving business, employee and consumer data at risk. In addition to increased consumer spending, the 2021 holiday season sees a significant impact on industries coping with the increase in consumer demands.

Are you less capable of innovation or more vulnerable to threats than you thought?
2021-11-11 04:00

"As we stand at an inflection point in the way the world does business, enterprises have more opportunities than they think to get ahead of the competition and continue improving," said Mike Rulf, CTO of Americas at Syntax. "An honest assessment of capabilities now will only accelerate innovation in the future."

Navigating The Threat Landscape 2021 – From Ransomware to Botnets
2021-11-11 01:30

The Global Threat Landscape Report indicates a drastic rise in sophisticated cyberattacks targeting digital infrastructures, organizations, and individuals in 2021. Organizations struggle to address these threats due to their resource sophistication and their lack of understanding of evolving threat landscapes.

How healthcare organizations and patients are increasingly at risk from cyber threats
2021-11-10 14:00

Research released Wednesday by security provider Armis looks at the ways that hospitals and patients are vulnerable to cyber threats. A full 85% of the healthcare respondents said they've seen an increase in cyber risk over the past 12 months.

New Android Spyware Poses Pegasus-Like Threat
2021-11-10 14:00

Researchers discovered new Android spyware that provides similar capabilities to NSO Group's Pegasus controversial software. PhoneSpy disguises itself as a legitimate application and gives attackers complete access to data stored on a mobile device and grants full control over the targeted device, according to a Zimperium zLabs report published Wednesday.