Email security company Mimecast recently released its Email Security Risk Assessment, and found that email account hijacking is the fastest growing threat vector. Also known as impersonation attacks, email account hijacking allows an attacker to impersonate the person whose account has been compromised. This is the vehicle used in wire transfer fraud, invoice fraud, and other financial frauds. Some of the statistics in the report were enlightening. From ...
A quick Saturday digest of cybersecurity news articles from other sources.From Naked Security – Crypto Coins Robbed at Gunpoint.
Good old fashioned stick-ups still a possibility.
Fake support scams – where the crooks help you “remove” malware you don’t have – are still a real ...
Continue Reading →A guest post by Megan Wells from InvestmentZen.com
Identity theft. Those words are enough to start the heart racing. You think, “How can this be? I do everything possible to protect my private information.” Yes, and the criminals always seem to be one step ahead.
Recent financial industry changes like EMV (chip cards), reduced card-cloning in retail stores and some restaurants, but gas stations’ deadline for conversion is ...
Continue Reading →
On Wednesday, we looked at the built-in password manager provided by Google Smart Lock. Today we will review Apple’s iCloud Keychain. Keychain works automatically with iPhones, iPads, and Macs, and is shared an updated to all your devices automatically. Most of the Apple users I talk to are familiar with Keychain. Keychain works with devices that are using ...
A quick Saturday digest of cybersecurity news articles from other sources.Veteran’s day is a remembrance of all U.S. military veterans – past and present. It is celebrated every November 11th, and has been a federal holiday since 1926.
10/31/2017 08:14 AM EDT Original release date: October 31, 2017
Building resilience in critical infrastructure ...
Continue Reading →People often ask me if it is dangerous to simply open an email, if it is possible to get a malware inflection just by reading an email. My answer has been a qualified “not at this time.” Unfortunately, this is no longer true. It is possible to get a malware installation from the new DDE (Dynamic Data Exchange) exploits reveal by Sophos Labs on October 13 2017. This can be accomplished without an attachment or link if the email is ...
Continue Reading →
Over the last four posts, we have focused on the US-CERT alert, but cybersecurity firm Symantec has actually been working this case since 2011. Their report on Dragonfly can be found on their website. While they are cautous when providing attribution, reading between the lines indicates that Dragonfly is probably a Russian based group, possibly working on behalf ...
Is the U.S. energy sector under attack? The ambitious and sophisticated exploits like this one are usually the work of a nation-state. Who wants to turn off the lights? Last Wednesday we took a look at the US-CERT alert warning about the ongoing cyber-attack against the U.S. electric grid, and on Friday we took a look at many of the tactics, ...
A quick Saturday digest of cybersecurity news articles from other sources.By Richard Branson – Virgin CEO tells how he was almost duped out of $5 Million, and how a close friend of his lost $2 million to scammers.
Late at night on October 29, 1969, today celebrated as ...
Continue Reading →
