Data breach settlements are an unfortunate but all-too-frequent side effect of ransomware attacks. When hacks expose sensitive user data, it can lead to a lot of problems. Data is sometimes sold to criminals who can use it for future hacks or to steal money from bank accounts. Stolen data is often used in identity theft,…
We’ve seen the story far too many times. A company gets hit with ransomware, and the hackers start making demands and threats. The victims, panicked, give in to the demands of the attackers, only to be hit with more ransom demands and threats. When designing cyber security defenses, it’s easy to put all your energy…
There’s an old saying which is very relevant when it comes to cybersecurity; hope for the best, plan for the worst. It’s natural to focus on preventing breaches entirely, but strong post-breach defenses can actually be far more effective in reducing the damage done by hackers. Why is post-breach remediation important? Especially when it comes…
We’ve become so dependent on technology that a major ransomware attack can completely shut down many organizations, ranging from small businesses to major corporations. This can leave decision makers scrambling to find out what their options are. This article summarizes all the possible ransomware options and their pros and cons. Ransomware Options: Navigating a Crisis…
Cobalt Strike is an important tool in the cybersecurity arena. It’s an intensive commercial penetration testing toolkit used for different levels of intrusion. Cobalt Strike gives your pen-testers access to a wide range of attack capabilities and can be used to test your entire network for spear-phishing and other unauthorized access attempts. The toolkit emulates…
If you thought drive-by downloads are a thing of the past, you may be surprised by the increasing number of these attacks in 2020. Drive-by downloads have become a prominent threat primarily due to the current increase in pre-packaged kits used by hackers to launch more sophisticated attacks with little technical skill requirements. In fact,…
Google was recently forced to patch a serious cross-site scripting (XSS) vulnerability on your favorite email client, Gmail. The Gmail vulnerability was discovered by an ethical hacker and chief security researcher at Securitum, Michal Bentkowski. The serious vulnerability was found in one of Gmail’s features known as the Accelerated Mobile Pages for Mail (AMP4Email), which…
As working from home becomes the new normal, the increase in cyberattacks is also gaining momentum. It seems that cybercriminals are using every possible opportunity to target remote workers as the weakest link within corporations. 2020 has been anything but an ordinary year, especially for companies that had to scramble to continue business operations without…
It’s the end of the month and you’ve got bills to pay. But instead of waiting in long queues at a nearby bank, you simply logon to your banking portal, receive a 2 Factor Authentication code and pay bills using online banking. But just how safe and secure is it? Let’s discuss it in more…
In January of 2020, the US Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) warned of the resurgence of Emotet attacks. The DHS described Emotet as the “most destructive” form of malware due to its ability to inject other potentially harmful malware into most any organization, especially in the banking and financial industries.…
