SALAMATTEO.COM

ImmuniWeb Welcomes 52 New ImmuniWeb® Certified Professionals

July 6, 2021 After the recent training sessions for our customers and partners, ImmuniWeb has issued 52 certificates to cybersecurity professionals who met the technical and academic requirements. The ImmuniWeb® Certified Professional certificate validates one’s technical knowledge, professional experience and managerial skills required to operate ImmuniWeb® AI Platform and its SaaS products in…

The Rundown on Google’s Cloud Security Foundations Guide

Google recently released the new Cloud Security Foundations Guide. We’re going to take apart Google’s guide and show you what’s worth looking into. First, an introduction. “This comprehensive guide helps you build security into your Google Cloud deployments.” – Google What’s going on: Google Cloud Services are out there, being deployed in the wild, untamed. This guide is Google’s self-proclaimed…

What Is Vishing? An Up-Close Look at Voice Vishing

If you’ve ever received a phone call about your car’s extended warranty, then you’ve gotten a vishing phone call. A February 2021 Business Insider survey reports that 46% of Americans receive daily spam calls on their cell phones What is vishing? The term stands for voice phishing, which is a type of phishing that bad guys use to scam or trick people into providing sensitive personal or payment…

PCI DSS v4.0 Draft Validation Documents

From 28 June to 28 July, PCI SSC stakeholders can participate in a Request for Comments (RFC) on a draft of the PCI DSS v4.0 draft validation documents. As indicated in a recent post on the PCI DSS v4.0 timeline, this RFC was added as a unique opportunity for the industry to provide feedback on drafts of the v4.0 Report on Compliance (ROC) Template and the ROC Attestations of Compliance (AOC).…

Bitcoin cyber attacks surge following rising demand and increasing price of bitcoin

Phishing impersonations and business email compromise (BEC) attacks designed to steal victims’ bitcoin surged by 192% between October 2020 and May 2021, closely following the rising demand and increasing price of bitcoin over the last eight months, according to analysis by Barracuda Networks. Bitcoin themed cyber attacks have typically been used in extortion and ransomware attacks in the past,…

Speed or Security? Don’t Compromise

“Speed is the new currency of business.” Chairman and CEO of Salesforce Marc R. Benioff’s words are especially potent today as many organizations small and large look for ways to speed up production during their shifts to digital.     In software development, speed is a critical factor. Everything from shifting priorities to manual processes and siloed teams can seriously impede deployment…

Should Australian Businesses Pay Ransoms to Cybercriminals?

The Australian Cyber Security Center (ACSC) strongly advises against paying ransoms of any amount to cybercriminals. In some circumstances, these payments could even be illegal. The Australian government is tightening its cybersecurity regulations to align with the United State’s new stance on nation-state threats. As a result, there have been significant changes to how Australian businesses are…

Hacker Blamed for Reality TV Star’s ‘Death’

A reality TV star whose sudden death was reported by several websites says she was the victim of a malicious hacker.  Saaphyri Windsor shot to fame after appearing on American dating gaming show Flavor of Love, which starred Public Enemy rapper Flavor Flav. On Thursday night, after news of her death began circulating on the internet, Windsor announced publicly that she was in fact still drawing…

JSON Web Token attacks and vulnerabilities

For a more general introduction to JSON Web Tokens and the security challenges they bring, see our overview article on JWT security. The JWT format A JSON Web Token consists of a header, payload, and signature in base64url encoding, separated by dots, as follows: HEADER.PAYLOAD.SIGNATURE Let’s take apart the following real…

Bouncing back: how your agency can handle disruption and embrace resilience

Invicti, the company behind Acunetix and Netsparker, has been securing public sector web applications for years, working with prominent agencies such as NIH, DOT, and the United States Armed Forces. As part of GovLoop’s Cyber Resiliency Guide, Bouncing Back: How Your Agency Can Handle Disruption and Embrace Resilience, Ted Rutsch, Invicti Federal Account Executive, discussed the importance of web…

Podcast: Can we fix IoT security?

For many U.S. workers the switch to remote work is a permanent one. That means more high-stakes work is being conducted on self-configured home networks. For others, home networks are simply hosting more devices as smart doorbells, thermostats and refrigerators now connect to the internet. Security experts warn that while the internet of things (IoT) isn’t inherently a bad thing, it does present…

Understanding DDoS Attacks on Mobile Apps and How to be Safe?

Increase in DDoS attacks was one of the popular cybersecurity predictions last year. With the growth of the sharing economy, we’ve definitely seen an increase in the number as well as damage caused. In fact, we’ve got a lot of our customers asking if DDoS attacks on mobile apps are possible. The short answer is definitely yes. But this post is to understand how these attacks on mobile apps work…

NATO Adds Cyber Commitments, Potential Ransomware Response

As President Biden prepared to meet with Russian President Putin this past week in a high-profile summit in Geneva, Switzerland, cyber attacks originating from criminals within Russia were near the top of a list of contentious issues on the agenda. However, there were important events that received minimal media attention that strengthened the U.S. President’s position. President Biden walked…

After Gaza ceasefire, MoleRATs hacking group continues to target Middle Eastern governments

Written by Sean Lyngaas Jun 17, 2021 | CYBERSCOOP Days after Israel and Gaza-based militant group Hamas agreed to a ceasefire in May, Arabic-speaking hackers resumed an effort to break into government networks in the Middle East, according to research published Thursday. The hacking group, known as MoleRATs, sent target organizations a malware-laced PDF claiming to be a report on Hamas members…

IndigoZebra APT Hacking Campaign Targets the Afghan Government

Cybersecurity researchers are warning of ongoing attacks coordinated by a suspected Chinese-speaking threat actor targeting the Afghanistan government as part of an espionage campaign that may have had its provenance as far back as 2014. Israeli cybersecurity firm Check Point Research attributed the intrusions to a hacking group tracked under the moniker “IndigoZebra,” with past activity aimed at…

How to strengthen your mobile security posture through automation?

The constant growth and diversification of cyber threats is making them tedious to manage. When faced with thousands of daily security alerts, cybersecurity teams may not be able to manually respond to each one in an optimal timeframe. This problem is even more accurate on mobile devices, where the number of security events is increased tenfold by the number of endpoints and usages: installation…

How Small Businesses Use Employee Monitoring to Build Trust with Remote Teams and Boost Performance

When you think of employee monitoring, your brain may initially jump to large, controlling corporations patrolling their thousands of workers. In reality, this idea is simply a myth, as small businesses can use employee monitoring to build trust amongst their remote teams, boost productivity, increase operational efficiency and benefit employees in multiple ways. In my personal experience, using…