US Cyber command has issued a warning to fix a known vulnerability in Outlook 2017. Following an active hacking campaign and a favored exploit of hackers, bought to light following the recent US, Iranian hacking exchange. The exploit uses Outlook…
The Australian Prudential Regulatory Body. A regulator who provides oversight of Australian regulated financial entities, covering local and foreign deposit takers, life, health and direct insurers has released a standard (CPS 243), to 1. Clearly define the information security-related roles…
A little out of date (June 19), a large US cloud provider PCM has reported that it was hacked. Highlighting the growing focus on targeting cloud providers. It was not particular good timing as PCM announced that it was in…
Cyber insurance is one risk transfer mechanism. But it won’t protect you from failure to comply to regulation, or the fines of failing to comply. View Original Post
According to US prosecutors Chinese hackers got into a number of large technology providers including HP and IBM. Hacked via a cloud service The US indictment said the hack focused on stealing IP to boost Chinese economic interest. A wealth…
Another US city is up against it with hackers, following a recent ransomware attack. Taking the total paid by Florida municipalities to over $1.1Mn. View Original Post
Well worth a read. Not very often do you get to visualize the Kill Chain. Cybereason, an Israeli – US Cyber security firm has reported what it believes to be a persistent and targeted threat to 10 cell phone carriers…
Northumbria University and De Montfort University have been added to the UK governments list of Centers of Excellence for cyber security research. Taking the list to 17. Full list () View Original Post
Sometimes people are trying to do the best thing, creating a way in to support the organisation. Other times not; but the compromise allowed hackers in to traverse the network. The breach cost NASA 500MB of sensitive data. In addition…
Over at IFSEC today, supporting membership for the Worshipful Company of Security Professionals (WCoSP), Security Institute and CSyP. View Original Post
