Growing pains: Skills gap meets expanding threat surface
The need to defend a growing threat surface highlights the widening cybersecurity skills gap
Uncategorized
One year later: EternalBlue exploit more popular now than during WannaCryptor outbreak
The infamous outbreak may no longer be causing mayhem worldwide but the threat that enabled it is still very much alive and posing a major threat to unpatched and unprotected systems
Tricks that cybercriminals use to hide in your phone
Malware in the official Google store never stops appearing. For cybercriminals, sneaking their malicious applications into the marketplace of genuine apps is a huge victory.
South Korea moves to ban anonymous cryptocurrency trading
As part of the policy, underage individuals and foreigners without local bank accounts will be barred from trading in virtual currencies. Banks will be required to share information about cryptocurrency exchanges with each other.
Sednit update: How Fancy Bear Spent the Year
Over the past few years the Sednit group has used various techniques to deploy their various components on targets computers. The attack usually starts with an email containing either a malicious link or malicious attachment.
If you download Minecraft mods from Google Play, read on …
ESET researchers have discovered 87 malicious apps on Google Play disguised as mods for Minecraft.
It’s too easy to steal a second-hand connected car
Until more effort is made by vendors to integrate the internet in a safe way into the myriad of devices that surround us, we are going to hear more and more stories of security breaking down like this.
Cybersecurity skills gap: It’s big and it’s bad for security
The cybersecurity skills gap is a big problem for organizations struggling to protect rapidly expanding systems from a growing range of threats. We look at how big and what to do about it.
Este es el top 5 de amenazas para gamers, ¡cuídate de ellas!
Celebra el Día del Gamer jugando en forma segura y protégete de ransomware, keyloggers, falsos cracks y aplicaciones que tienen como blanco a los jugadores.
First Twitter-controlled Android botnet discovered
Detected by ESET as Android/Twitoor, this malware is unique because of its resilience mechanism. Instead of being controlled by a traditional command-and-control server, it receives instructions via tweets.
Is the federal government doing enough to catch and prosecute computer criminals?
With ransomware running rampant we asked Americans if they thought the US federal government was doing enough to catch and prosecute computer criminals.
What the CISSP? 20 years as a Certified Information Systems Security Professional
Reflecting on 20 years of CISSP, the Certified Information Systems Security Professional qualification from (ISC)2, the International Information System Security Certification Consortium.
GDPR Day: countdown to a global privacy and security regimen?
This thing called GDPR will impact data security and privacy policy at many US firms when it takes effect two years from today. Start learning what the EU General Data Protection Regulation means to your business.
Viruses, bulletins, surveys, and gender: hashtag #VB2015
Virus Bulletin 2015 in Prague could be the biggest ever, a great place to discover the latest developments in malware protection and information security, and address issues like the infosec skills gap.
NICE news about the cybersecurity skills shortage (and a call for papers)
The cybersecurity skills gap is a security problem and in the US the National Initiative For Cybersecurity Education (NICE) is seeking to reduce that gap.
Hacking Team and other breaches as security lessons learned
Recent aggressive hacks on companies underline the need for good risk analysis, situational awareness, and incident response. Just ask AshleyMadison, Hacking Team, and Sony Pictures.
Cybersecurity and manufacturers: what the costly Chrysler Jeep hack reveals
As the cost of fixing security mistakes in Jeep Chrysler Dodge vehicles mounts, so does the need for manufacturers to weigh cybersecurity risks in the product development process, alongside features and benefits.
Hackers demo Jeep security hack
Hackers have demonstrated an exploit that can take remote control of a Jeep, to the extent of cutting the transmission and controlling the throttle.
What I learned at Cyber Boot Camp (Instructor Edition)
Teaching computer security to highly motivated students at Cyber Boot Camp reveals a lack of basic computer science education in California Schools.
New Facebook scam promises “shocking video,” but contains only malware
When you see what this Facebook clickbait really links to, your jaw will drop.