CS Nov-Dec 2022

news
Andy Harris,
Osirium.
PULLING A FAST ONE
US business and media publication
Fast Company being hacked - and
then "obscene and racist" notifications
being sent to Apple users - shows how
vulnerable organisations are to such
incidents. "Attackers are increasingly
using weak, stolen, or otherwise
compromised credentials to breach
organisations," warns Andy Harris, CTO,
Osirium. "Although many businesses
have taken steps in implementing
rigorous password policies, SysAdmin
credentials still need protecting from
abuse. Password education is a good
place to start - and not sharing
credentials is critical, as proven in
the Fast Company breach.
"Sharing passwords negates individual
accountability," adds Harris, "something
that Privileged Access Management
[PAM] can preserve in a way that
Password Vaults cannot."
BITDEFENDER PARTNERS WITH FERRARI
Bitdefender has entered into a multi-year partnership
with Ferrari S.p.A. to become cybersecurity global
partner of Scuderia Ferrari, which is competing in the
FIA Formula 1 World Championship.
As a partner, starting at the Formula 1 Singapore Airlines,
Singapore Grand Prix 2022, Bitdefender will display its
company logo on Ferrari drivers' helmets, as well as on
the F1-75 single-seater driven by Charles Leclerc and
Carlos Sainz, and, from 2023, on racing suits and
team uniforms.
Comments Florin Talpes, Bitdefender co-founder and chief
executive officer: "When every second counts, only the
most advanced cars win races on the track, and only the
most advanced technology has the power to effectively
Ferrari driver Carlos Sainz.
prevent, defend and respond to cyberattacks."
RANSOMWARE ON THE RAMPAGE
Nearly a quarter of businesses surveyed have suffered from
a ransomware attack, with a fifth occurring in the past
12 months. That is according to a latest annual report from
cybersecurity specialist Hornetsecurity. The 2022 Ransomware
Report, which polled more than 2,000 IT leaders, discloses
that 24% have been victims of a ransomware attack, with
one in five (20%) attacks happening in the last year.
States Hornetsecurity CEO Daniel Hofmann: "Our survey
shows that many in the IT community have a false sense of
security. As bad actors develop new techniques, companies
like ours have to do what it takes to come out ahead and
protect businesses around the world."
For more data and insights, go to this link:
https://www.hornetsecurity.com/en/knowledgebase/ransomware/ransomware-attacks-survey-2022
PHISHING SCAM TARGETED WETRANSFER
According to Metro, hackers have been actively adopting
a new phishing scam by disguising malware as WeTransfer
links. The scam involves hackers sending a 'Proof of Payment'
document from WeTransfer, but instead sharing a link
containing malware. Cybersecurity researchers from Cofense
found that hackers distributed a malware called Lampion,
using the misleading links
States Jake Moore, global cyber security advisor at ESET:
"People need to verify the source of attachments, irrespective
of the carrier, and, if they are not expecting it, they should
carry out further due diligence. If the attachment received is
a zip file, people need to be extra cautious."
Daniel Hofmann,
Hornetsecurity.
Jake Moore, ESET.
6
computing security Nov/Dec 2022 @CSMagAndAwards www.computingsecurity.co.uk