Ooh boy! Talk about a back-and-forth, he said, she said story! No, we’re not talking about that Supreme Court nomination. Rather, we’re talking about Supermicro. Supermicro manufacturers the type of computer hardware that is used by technology behemoths like Amazon and Apple, as well as government operations such as the Department of Defense and CIA facilities. And it was recently reported by … [Read more...]
October 10, 2018
October 8, 2018
October 8, 2018
PCI DSS: The importance of penetration testing
Often, organisations rely on vulnerability scans to identify their weaknesses. They are told that vulnerability scanning is as good as penetration testing and that it will be enough to meet the compliance requirements of the PCI DSS (Payment Card Industry Data Security Standard). However, scanning and testing perform two different jobs, and the PCI DSS mandates that you conduct both on a regular … [Read more...]
October 2, 2018
Fortnite gamers targeted by data theft malware
The new season of the incredibly popular video game Fortnite is upon us, and so too are the scams. It’s no surprise that con artists would jump on this bandwagon, eager to peddle their fakeouts. Only this time, scammers had something a little more dangerous in mind than your typical low-level surveys and downloads that never actually materialize. Among all the gluttony of scams there hid a … [Read more...]
September 28, 2018
September 28, 2018
How to protect your data from Magecart and other e-commerce attacks
In today’s golden age of online shopping, consumers take to the Internet, punch in a few credit card details, and happily receive products at their doorstep, safe in the knowledge that their online vendor is well-known, vetted, and therefore their website has to be secure, right? Dut did you know that hackers can steal your credit card details with only a few lines of JavaScript? Attacks on … [Read more...]
September 27, 2018
IT Governance Free ISO 27001 and GDPR Webinars. Register today!
Join IT Governance Europe for the upcoming ISO 27001 and GDPR webinars, don’t miss out and register today! Assessing compliance: the ISO 27001 ISMS internal audit 28 September 2018, 2:00–3:15 pm (GMT) Testing and assessing your information security measures is essential to ascertain whether the controls you have implemented are working effectively. Compliance with the international … [Read more...]
September 25, 2018
September 24, 2018
Mobile Menace Monday: SMS phishing attacks target the job market
Recently, a co-worker received an enticing SMS message from ASPXPPZUPS Human Resources. It read: Tired of your old job? Join our team today, work from home and earn $6,200 per month: hire-me-zvcbrvpffy.<hidden>.com. Could it be that our dream job awaits via random text message? On the contrary, this SMS phishing attack could cause nightmares for unsuspecting job hunters. Don’t quit your … [Read more...]
September 22, 2018
Emotet on the rise with heavy spam campaign
The threat landscape is changing once again, now that the ocean of cryptocurrency miners has shrunk to a small lake. Over the last couple months, we’ve seen cybercriminals lean back on tried and true methods of financial theft and extortion, with the rise of a familiar Banking Trojan: Emotet. However, over the last few days, we’ve noticed a large increase in malicious spam spreading … [Read more...]
