Cybersecurity Starts in the Boardroom
Whatever technical defences you (and I) rely on, there is a probability that the threat actors will find ways to bypass them: Microsoft 365 anti-phishing feature can be bypassed with CSS (bleepingcomputer.com) If the phishing email gets as far as your team member’s inbox, they had better be able to …
Continue reading “Why Cyber Security Awareness Training is Importatnt?”
Following the sabotage on the French rail network on the eve of the Olympic Games in Paris, The Grand Palais Réunion des musées nationaux (Rmn) – the organisation that manages a number of the museums and cultural sites involved in the Olympics – reported that it suffered a ransomware cyber-attack. …
I was reading about the hack of the international telecoms giant AT&T last week, but I noticed the headline of this article about it on the BBC today, that clearly sums up the hack. Hackers steal call records of ‘nearly all’ AT&T customers – BBC It is the ‘nearly all’ …
It is “old news” but threat actors are usually only in it for the money. Consequently to maximise their profits they turn to the tactics of legitimate businesses, with mission statements, support teams, easy terms and now rebranding! SEXi ransomware rebrands to APT INC, continues VMware ESXi attacks – BleepingComputer …
Continue reading “Threat actors treat their crimes as a business”
I had to quote, Simon Sharwood, from The Register, as the headline for this article. He has written an excellent article on how organised threat actors keep records of who they have successfully attacked in the past, so they can go back and try again. Scammers double-dip by offering help …
Continue reading ““Scum keep databases of the people they’ve already skimmed””
