Infosecurity News

Nigeria Suspends Official Charged with Defrauding US
Governor’s aide suspended following arrest over unemployment benefits fraud

HMRC Investing Heavily in Cybersecurity Training for Staff, Official Figures Show
The Art of Hacking was the most popular course for HMRC security staff

Web App Bugs Drove Multiple Breaches Per Firm in 2020
Barracuda Networks claims bad bots are the main challenge

Exchange Server Attackers Launched Scans Within Five Minutes of Disclosure
Cheap cloud services support threat actor efforts

Colonial CEO Reportedly Confirms $4.4 Million Ransom Payment
Firm speaks out about attack

#RSAC: The Security Risks of Cryptocurrency
While it's not likely that cryptocurrency will replace the US dollar as a reserve currency in the short term, RSA Conference session details cryptocurrency security risks and mitigations

#RSAC: The Lasting Impact of the COVID Pandemic on Privacy
A year of lockdown, remote work and remote learning could well be the spark that helps to define a new era of user privacy, according to a panel of experts at the RSA Conference

#RSAC: SolarWinds CEO Provides New Details into Attack and Response
Sudhakar Ramakrishna gives details of investigations into the supply chain attack

UHS Data Breach Lawsuit Proceeds
Data breach lawsuit against healthcare provider gets the go-ahead but only for one patient

Splunk to Acquire TruSTAR
California tech company Splunk announces plan to snap up cloud-native security firm

DarkSide Gang Retires on $90m
Wallet containing Bitcoin worth over $90m is reportedly ransomware gang’s ill-gotten gains

#DTX: Security Pros Must Focus on Human Behaviors to Address Cyber-challenges
There's more the industry can do to prevent social engineering attacks and scams

Regulator Fines QR Code Provider Which Spammed Customers
St Albans company sent 84,000 nuisance emails

RDP Hijacked for Lateral Movement in 69% of Attacks
Sophos report warns that dwell time is up to 11 days

Recruiter’s Cloud Snafu Exposes 20,000 CVs and ID Documents
Misconfigured AWS bucket again to blame

#RSAC: Solving the Ransomware Scourge Requires a Coordinated Effort
What is the current state of ransomware and what needs to be done to stop it? A panel of experts at the RSA Conference has a few ideas

#RSAC: Does the US Need a National Breach Reporting Law?
Panelists at the RSA Conference 2021, including the FBI and US Department of Justice, make a case for a national standard for data breach reporting

#RSAC: Anne Neuberger Sets Out Biden Administration’s Plan to Modernize US Cyber-defenses
Anne Neuberger outlines three areas of focus for the Biden administration to enhance the US's cybersecurity

#RSAC: McAfee CTO Calls for Risk Decisions Based on Science Not Headlines
McAfee senior vice president and CTO, Steve Grobman, took to the virtual stage at RSA Conference on May 18 with a call to action: reconsider the perception of risk by looking at data, not headlines

Q1 2021 Sees 2.9 Million DDoS Attacks Launched
DDoS attacks in Q1 2021 up 31% YoY, according to new research



