Ransomware runs rampant in 2017, Verizon report finds

Social engineering attacks that involve pretexting nearly tripled on an annual basis while phishing simulations show that curiosity gets the better of 4% of people. Ransomware takes the cake as the most prevalent type of malicious software in Verizon’s latest Data Breach Investigations Report (DBIR). The US-based telecommunications company analyzed input from 67 organizations and examined more … More Ransomware runs rampant in 2017, Verizon report finds

Firms using WebEx at risk of poisoned Flash attacks

Companies should check they are running latest version of WebEx, and beware attacks via the road less travelled. A critical vulnerability has been found in Cisco’s WebEx conferencing software – widely used by businesses – that could be exploited by an attacker to spread malware directly to other meeting participants, tricking them into executing it … More Firms using WebEx at risk of poisoned Flash attacks

Rough patch, or how to shut the window of (unpatched) opportunity

Simply throwing more staff at the patching problem won’t cut it, a study suggests. To paraphrase English novelist Jane Austen, it is a fact universally acknowledged that organizations must act with alacrity when it comes to applying software patches to their systems. A number of recent notorious incidents – think the WannaCryptor malware outbreak or the breach … More Rough patch, or how to shut the window of (unpatched) opportunity

Fake or not fake – that is the question

An interview with ESET’s Lukáš Štefanko on the thin line between what deserves the name “security app” and what can be called fake. ESET’s analysis of shady apps pretending to be security – or “antivirus” – apps that were discovered on Google Play left some questions unanswered. Lukáš Štefanko, who did the research, speaks about its wider … More Fake or not fake – that is the question

Anti-cybercrime successes in the first quarter of 2018, part 2

The long arm of the law caught up with a number of cybercriminals in the first three months of this year. Picking up where we left off in Part 1, we continue to comb through headlines in order to bring another instalment in our rundown of some of the recent law enforcement actions in its struggle … More Anti-cybercrime successes in the first quarter of 2018, part 2