The cyberthreat that drives businesses towards cyber risk insurance

Many smaller organizations are turning to cyber risk insurance, both to protect against the cost of a cyber incident and to use the extensive post-incident services that insurers provide. If we were to stop people on the street and ask for words to describe the people involved in the world of cyber, there would, undoubtedly, … More The cyberthreat that drives businesses towards cyber risk insurance

Microsoft says cyber-attack triggered latest outage

A global outage affecting Microsoft products, including Outlook and Minecraft, was resolved after nearly 10 hours. The outage, allegedly caused by a Distributed Denial-of-Service (DDoS) attack and a failure in defense implementation, led to thousands of user reports, writes the BBC*. It comes less than two weeks after a major global outage left around 8.5 … More Microsoft says cyber-attack triggered latest outage

Beware of fake AI tools masking very real malware threats

Ever attuned to the latest trends, cybercriminals distribute malicious tools that pose as ChatGPT, Midjourney and other generative AI assistants. Generative AI (GenAI) is making waves across the world. Its popularity and widespread use has also attracted the attention of cybercriminals, leading to various cyberthreats. Yet much discussion around threats associated with tools like ChatGPT has … More Beware of fake AI tools masking very real malware threats

ESET Research discovers EvilVideo: Telegram app for Android targeted by zero-day exploit sending malicious videos

ESET researchers discovered a zero-day exploit, which targets the Telegram app for Android, that appeared for sale for an unspecified price in an underground forum post from June 2024. Using the exploit to abuse a vulnerability that ESET named “EvilVideo,” attackers could share malicious Android payloads via Telegram channels, groups, and chats, and make them … More ESET Research discovers EvilVideo: Telegram app for Android targeted by zero-day exploit sending malicious videos

Building cyber-resilience: Lessons learned from the CrowdStrike incident

Organizations, including those that weren’t struck by the CrowdStrike incident, should resist the temptation to attribute the IT meltdown to exceptional circumstances. As the dust settles on the cyber-incident caused by CrowdStrike releasing a corrupted update, many businesses will, or should, conduct a thorough post-mortem on how the incident affected their business and what could be … More Building cyber-resilience: Lessons learned from the CrowdStrike incident