Newsletter

On-Demand Webinar Now Available! 

Is your organization struggling to find the most resource-effective way to manage the increased demand for compliance and security? Do you have multiple compliance requirements and don't understand where they overlap and which ones to start with? Or is it that you are simply overwhelmed by the descriptive nature of compliance and need help with prescriptive guidance that prioritizes the requirements?

View our most recently recorded webinar and learn the most strategic, long-term and resource-effective ways to manage today's increased demand for compliance and security 

View the Webinar Now! 

Is Patching a double-edged sword?

Sometimes you can’t win. Patching, and the right time and process for doing so, is very much a case in point.

Patching used to need more planning and manual intervention, but as internet access has improved, many manufacturers now provide built-in Updater Services. 

Microsoft have taken this further, resorting to patch-guerilla tactics: Ambush Updates. They know what’s best for you, and if you won’t restart your PC then they will. Usually, this will always be when it’s least convenient for you, such is Murphy’s Law.

Read more »

Hackers steal $14M from Cosmos Bank ATM Attack

Cyber thieves managed to walk away with $13.5 million (944 million rupees) from India’s Cosmos Bank after making illegal withdrawals at ATMs across 28 countries over the past weekend.

According to Reuters, after conducting a malware attack on the bank’s ATM server, the criminals stole Cosmos’ customer data and used cloned cards to withdraw 805 million rupees in 14,849 transactions in only a two hour time period. Aside from the thousands of ATM withdrawals, the hackers also managed to transfer 139 million rupees to a Hong Kong-based company’s account. 

Read more »

NIST Small business cybersecurity act signed into law

The NIST Small Business Cybersecurity Act introduced by U.S. Rep. Dan Webster in March 2017 was signed into law by President Donald Trump on Tuesday to help small businesses effectively manage cybersecurity.

The law directs NIST and other federal agencies to “disseminate clear and concise guidance to help small business identify, assess, manage, and reduce their cybersecurity risks.” The guidance is based on the existing NIST Cybersecurity Framework and its implementation is voluntary by small businesses.

Read more »

understanding the basic cis controls: CSC 1-6

As data breaches continue to increase in severity and scale, more than ever organizations need to ensure they have the basic security controls in place to keep their data safe from attack.

In response to today’s growing threat landscape, the SANS Institute, together with the Center for Internet Security (CIS) have developed the 20 CIS Controls (CSC) to give organizations clarity on what really needs to be focused on in terms of security best practices.

Read more »

Cheddars scratch kitchen breach hits 500K customers

The payment card information belonging to over half a million Cheddar’s Scratch Kitchen customers has been compromised after an unauthorized intrusion was spotted by a third party.

Parent company Darden Restaurants was notified by federal authorities, claiming an attacker swiped 567,000 payment card numbers after compromising a legacy POS system. Customers who visited Cheddars in 23 states between November 3, 2017, and January 2, 2018, could have had their payment information compromised.

Read more »

Leading U.S. healthcare provider hit by phishing attack

One of the leading U.S. healthcare organizations (HCO) has revealed that a phishing attack in September 2017 may have led to the compromise of highly sensitive data belonging to nearly half a million patients.

Augusta University Health, based out of Georgia, claimed to be notified by investigators on July 31 that an attack last September on a member of the hospitals' staff may have given hackers access to data belonging to 417,000 patients. The HCO suffered a second phishing attack on July 11; the incident is still being investigated, however, Augusta said it was “smaller in scope”.

Read more »