Some 34 percent of companies in the US were breached in the past 12 months, and 74 percent of the victims don’t know how it happened, shows a Bitdefender survey of IT execs
Employees are an optimal entry point for attackers seeking a way in to a company’s weak infrastructure. Cybersecurity and insider threats are two of the highest concerns confessed by CIOs and CISOs. Therefore, user negligence with company networks and devices is the main agent for cyber breaches and data leaks, especially when social engineering techniques are deployed.
The #WannaCry ransomware attack has reached over a quarter of a million computers across over 100 countries. Looking at the “heat map” of attacks it’s obvious that some countries have fared worse than others.
While the world still heals and reals from the torrent of an attack that is WannaCryptor (WannaCry), security experts find themselves bracing for potential new versions and copycats of the unique malware. As we covered in Wormable ransomware strain uses freshly leaked exploit to encrypt data when in a matter of less than 24 hours the WannaCry malware infected more than 230,000 systems in 150 countries. The attack impacted businesses large and small, across many vertical industries, and both the public and private sectors.
To keep up with more rapidly changing business models, the speed of enterprise digital transformation and automation today, security leadership needs to, more than ever, ensure there is a tight coupling between security teams and business leadership.
Ransomware infections impact individual users and businesses, regardless of size or industry, by causing service disruptions, financial loss and, in some cases, permanent loss of valuable data. In 2016, the number of ransomware attacks increased 300 percent from 2015, with over 4,000 attacks detected per day, according to US government statistics. WannaCryptor (WannaCry), the most recent version of ransomware, has targeted businesses in more than 70 countries around the world, with more than 250,000 infected terminals so far.
Update 5/13/3017: Yesterday evening the WannaCryptor (WannaCry) ransomware family infected thousands of computers across the world. In just 24 hours, the number of infections has spiked to 185,000 machines in more than 100 countries. Analysis of the Bitcoin wallets hardcoded into the samples show that the group behind WannaCryptor managed to extort roughly $US 25,000 worth of Bitcoin.
A new family of ransomware called WannaCryptor has started targeting businesses in more than 70 countries around the world. Hospitals, telelcom companies or gas and utilities plants are just some of the verticals that suffered massive disruptions caused by data being held at ransom.
For any businesses that handle data for customers in Europe, taking the General Data Protection Regulation (GDPR) lightly would be a big mistake.
Bitdefender will be attending Citrix Synergy 2017 in Orlando, Florida, at the Orange County Convention Center between May 23–25 where we’ll be showcasing a new and revolutionary data center security solution designed to help businesses prevent advanced attacks.
Intel is expected to soon issue patches that purport to fix an escalation of privilege vulnerability in the Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), as well as the Intel Small Business Technology firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow a remote attacker to gain control of the admin manageability features in these chips.
Total loss caused by email ‘impersonation’ scams (business email compromise and email account compromise), a sophisticated scam targeting small and medium businesses working with foreign suppliers and businesses that regularly pay by wire transfer or individuals that perform wire transfer payments, have reached the $5 billion threshold between from October 2013 to December 2016, according to recent statistics provided by FBI.
The term “traditional security” has gone through much transformation within the past couple of years, with next-gen security solutions arguing that security vendors with decades of experience have been doing security wrong. With machine learning heralded as the future of security, many businesses are left perplexed by a marketing conflict that solves none of their problems.
