Emotet – rising star of next-gen cyber attacks 13th December 2018 Emotet has been named as one of the next-generation malware stars of 2018 in the Malwarebytes report, ‘Under the Radar – The Future of Undetected Malware’. Emotet has been terrorising systems worldwide for much of the year, with large campaigns reported in both Q1…
Wizard Cyber becomes a CiSP approved member 7th December 2018 Wizard Cyber is now an industry member of the UK Government Cyber Security Information Sharing Partnership (CiSP). Managed by the National Cyber Security Centre, CiSP is a joint industry and government initiative that aims to increase the situational awareness of cyber threats. It is also…
Marriott Hotels cyber attack affects 500 million guests 3rd December 2018 The giant Marriott Hotels chain has confirmed a data security incident that may have resulted in the loss of confidential information of up to 500 million guests. In a remarkably low-key news announcement, the company confirmed that the security breach of its Starwood reservation…
Cyber security audits require more than penetration tests 29th November 2018 Cyber security service providers will always recommend penetration testing to their new customers. While they are an essential part of a cyber security audit process, penetration tests are often misunderstood both by those who buy them and sometimes by those who deliver them. …
Patch management essential but still difficult to achieve 28th November 2018 Effective and well-managed patch management has always been an essential element of any cyber security programme. The Gartner report, ‘Focus on the Biggest Security Threats” estimated that 99.96 of all cyber threats in 2017 were based on known software vulnerabilities. Despite their importance, many…
Ransomware uses RDP attack for more targeted approach 23rd November 2018 Ransomware cyber attacks are moving on from their indiscriminate wide-scale deployment in the last two years to a more targeted approach in 2018. The NCSC Advisory Report: Ongoing threat to organisations from ransomware, confirms that this type of cyber attack was previously profitable because…
Can you trust free VPN services? 21st November 2018 Research by Metric Labs Top10VPN has confirmed that over 50% of the most popular free personal VPN (Virtual Private Network) services are run by secretive companies based in China. With unacceptable privacy policies and a lack of accountability, the report strongly advises individuals not to trust these…
Tesco Bank suffer the largest ever FCA fine for cyber attack 16th November 2018 Tesco Personal Finance plc (Tesco Bank) has been fined £16,400,000 by the Financial Conduct Authority (FCA) for failing to exercise due skill, care and diligence in protecting its personal current account holders against a cyber attack in 2016. Deficient cyber…
DNS gives hackers global access to all internet devices 16th November 2018 The Domain Name System (DNS) has been an essential component of the functionality of the Internet since 1985. This remarkable technology enables internet services and the World Wide Web to be globally available to billions of users. DNS acts as the ‘internet phone…
Why is DDoS attack a major cyber threat? 8th November 2018 Distributed denial-of-service (DDoS) cyber attacks remain a significant threat to any organisation that uses a web site or web application to deliver its services. The Arbor Networks 2018 Worldwide Infrastructure Security Report confirms that a total of 7.5 million DDoS attacks were executed in…
16% of top 50 UK law firms don’t have secure website 2nd November 2018 A recent survey by Trustify has indicated that 16% of the top 50 law firms in the UK do not have a secure website. Commenting on the survey report, Rachel Moloney from The Lawyer, added that over 10 per cent of…
How secure are your web applications? 31st October 2018 Web applications and web sites deliver accessible and powerful services to consumers and businesses throughout the world. At the heart of modern banking, e-commerce and cloud-based IT provision, they are an attractive and easy target for cyber criminals. In common with all software, web applications contain…
The rise of fileless malware attack 16th October 2018 The first half of 2018 has seen a 94% increase in the number of fileless cyber attacks on global companies who use the endpoint detection and response (EDR) services of SentinelOne. The latest SentinelOne Enterprise Risk Index Report identifies that fileless attacks using PowerShell increased to…
Supply chain cyber security is a priority for law firms 11th October 2018 Cyber security risks associated with the use of third-party suppliers by law firms have been highlighted as a major concern by the UK National Cyber Security Centre. The recent NCSC Cyber Threat Assessment for the UK Legal Sector report confirms that supply…
Private equity firms must measure their portfolio cyber security posture 12th September 2018 Cyber security is increasingly on the agenda of board meetings for successful investment management and private equity companies in the UK. General Partners must ensure they have effective cyber security measures in place in their own firm. They must also have visibility…
Personal data for sale on the Dark Web? 4th September 2018 With the almost daily news of large-scale data privacy breaches resulting from cyber attack, individuals and business owners are increasingly asking, ‘Has my personal data already left the building?’. The scale of personal data theft remains staggering. This is illustrated by T-Mobile announcing that…
