Recent News

SailPoint survey finds that younger workers also are more likely to use company email addresses for online shopping and subscriptions.

[Email / envelope with black document and skull icon. Virus, malware, email fraud, e-mail spam, phishing scam, hacker attack concept. Vector illustration]

A new Trust Issues survey found that Gen Z and Millennials should follow the example set by their elders to develop better cyber hygiene habits at work. This SailPoint survey asked 500 U.S. workers...

Attackers will threaten to release confidential data that could affect a company's stock price to pressure them to pay the ransom, says the FBI. [Young Asian male frustrated by ransomware cyber attack]

Ransomware operators will stoop to any tactic necessary to try to force their victims to acquiesce to the ransom demands. One popular tactic is double extortion in which the attackers threaten to publish the stolen data unless the ransom is paid. Now some criminal gangs have devised a...

Attackers will vow to publicly release the stolen data, try to delete any backups and even deploy DDoS attacks to convince victims to give in to the ransom demands, says Sophos.

[ransomware cybercrime]

Cybercriminals who employ ransomware have gotten much bolder in recent years. Beyond stealing sensitive data, such criminals will turn to a variety of tactics to further persuade the victim to pay the ransom. A new report from security firm Sophos look at 10 ways attackers pressure...

- Secure Your RDP Access Responsibly

Most businesses assume they are too small to be targeted by hackers. How would a hacker even find the digital footprint of a small company with only a few IP addresses? Since vast majority of ransomware attacks exploit Remote Desktop Protocol (RDP), the answer is clear: it does not matter how large or small you are, if you are using RDP and not securing it properly, you are being actively targeted. RDP is a common protocol used by businesses of all...

Microsoft's Security Intelligence team has warned that it has been tracking a "massive" phishing campaign that attempts to install a remote access tool onto PCs by tricking users into opening email attachments containing malicious Excel 4.0 macros.

Microsoft said the COVID-19 themed campaign started on May 12, and has so far used several hundreds of unique attachments.

The emails being sent out claim to come from the Johns Hopkins Center bearing the title "WHO COVID-19 SITUATION...

The overwhelming amount of news coverage surrounding the novel coronavirus has created a new danger — phishing attacks looking to exploit public fears about the sometimes-deadly virus.

How does it work? Cybercriminals send emails claiming to be from legitimate organizations with information about the coronavirus.

The email messages might ask you to open an attachment to see the latest statistics. If you click on the attachment or embedded link, you’re likely to download malicious...

The telecommunications industry also saw increased attacks from threat actors such as those from China and North Korea, which targeted the sector for its intellectual property and competitive intelligence.

Malware-free tactics accounted for 51% of attacks in 2019, compared to 40% just the year before, though this figure was significantly driven by a sharp increase of such attacks targeting North America. Some 74% of attacks in the region were malware-free. while such techniques accounted...

Yes, this is one of those end-of-year summaries. And it's a long one, since 2019 has been a disaster in terms of cyber-security news, with one or more major stories breaking on a weekly basis. Below is a summary for the past 10 months of security disasters, organized by month.

January Severe vulnerability in Apple FaceTime - A bug in Apple's FaceTime app let attackers call and self-answer a FaceTime call without any user interaction from the callee, opening the door for secret...

Some organisations are still failing to take basic cybersecurity precautions by not applying critical patches and leaving themselves open to cyberattacks -- even when updates have been available for months.

This poor approach to security and patch management is detailed in Fortinet's Threat Landscape Report for Q2 2017. It highlights network and device hygiene as one of the most neglected areas of cybersecurity today -- a failing that, if rectified, could go a long way to preventing...

What to do with an Attachment in an Email and Browsing the Internet

If the attachment to an email is a ZIP file or you are unsure who or why it was sent, delete the email. If it was important it may get sent again or they will ring you. If it was someone you know who sent the email, RING them and ask whether they sent the email.

If you are still too curious to do the above and you open the zip attachment you may see the contents has an icon of a Word document, a PDF, a JPG or a SCR...