Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

IRS Warns of New Email Scam

Original release date: August 23, 2019

The Internal Revenue Service (IRS) has issued a warning about a new email scam in which malicious cyber actors send unsolicited emails to taxpayers from fake (i.e., spoofed) IRS email addresses. The emails contain a link to a spoofed IRS.gov website that displays fake details about ...

Continue Reading →
24
AUG
0

Computers and Internet, cybersecurity, cyberwar, Internet of Things, Linux, Weekend Update

, , , , , , , , ,

Beware of Scammers Exploiting Recent Events

It seems that every new event brings out a crop of scammers ready to exploit the gullible.  Several recent scams are using the Equifax breach settlement, and the recent mass shootings in El Paso and Dayton to extract money from or deliver malware to their victims.

First, from KnowBe4, we have the details of several scams taking advantage of people attempting to get the $125 settlement payment they may be owed as a result of the Equifax ...

Continue Reading →
9
AUG
0

cybersecurity, News and politics, Phishing, social engineering

Federal Trade Commission Fines Equifax and Facebook

Hot on the heals on each other, Equifax and Facebook have each settled for large fines in unrelated privacy and data breach cases. All I can say is “about time” and “is that all?”

The FTC has fined Facebook $5 billion for data misuse and other issues related to Cambridge Analytica, the European GDPR, the last US Presidential Elections, and the Brexit campaign.  ...

Continue Reading →
7
AUG
1

Computers and Internet, cybersecurity, Facebook, law and policy

Guest Post – Accreditation vs. Certification vs. Registration in the ISO world

Things with ISO standards can get really complicated: there are many ISO management standards – the most popular ones are ISO 9001, ISO 14001, ISO 27001, ISO 22301, ISO 20000, etc. – and there are a multitude of ways to get accredited/certified/registered related to those standards. But, that’s not all – there is a difference if you want to certify your company, or if you want to certify as an individual.

So, ...

Continue Reading →
5
AUG
0

certification, cybersecurity

Lateral Phishing – A New Threat to Business Email

Phishing is getting better and harder to detect.  One new trend is using hijacked business email accounts to pivot further into a business, by using the built in trust of the company’s email domain to send phishing emails that appear to come from coworkers.  These phishing emails from trusted sources are used to hijack other email accounts in the same company.  This ...

Continue Reading →
31
JUL
0

Computers and Internet, cybersecurity, email, multi-factor authentication, passwords, Phishing

Page 35 of 107 «...1020303334353637...»