Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign

D-Link and Changing Information Technologies code-signing certificates stolen and abused by highly skilled cyberespionage group focused on East Asia, particularly Taiwan. ESET researchers have discovered a new malware campaign misusing stolen digital certificates. We spotted this malware campaign when our systems marked several files as suspicious. Interestingly, the flagged files were digitally signed using a valid … More Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign

Two Canadian banks warn attackers may have stolen customer data

Simplii Financial and Bank of Montreal are believed to have suffered a twin attack that was soon followed by blackmail threats. Two Canadian banks have announced that cybercriminals may have made off with the data of up to 90,000 of the banks’ customers in apparent security breaches, according to a CBC.ca report. Online bank Simplii Financial … More Two Canadian banks warn attackers may have stolen customer data

GDPR: One rule to rule them all – legally

It’s here! But what are the legal ramifications of the incoming legislation for businesses? There is a certain similarity between J. R. R. Tolkien’s The Lord of the Rings trilogy and General Data Protection Regulation (GDPR) coming to force today, May 25 2018. As weird as it may sound, the regulation puts in place standards identical to those of … More GDPR: One rule to rule them all – legally

£120,000 fine for university after details of 20,000 staff and students exposed in data breach

The University of Greenwich has received a fine of £120,000 because of the substantial damage and substantial distress caused by a security breach that exposed the personal information of 20,000 people. It’s called “Shadow IT”, and it’s a problem that has now cost a British university £120,000 (over US $160,000) following a serious security breach. … More £120,000 fine for university after details of 20,000 staff and students exposed in data breach

Last call for GDPR

With the deadline fast approaching SMBs are reminded of what is required to become compliant. Benjamin Franklin famously once said, “By failing to prepare, you are preparing to fail” – a piece of wisdom that can be applied directly to any discussion on Global Data Protection Regulation (GDPR), a directive coming to force on May … More Last call for GDPR