Hamilton employee mistakenly sends email blast with all names and addresses visible
The carbon-based units are again responsible for a huge breach of security controls at an organization. This time it was an employee of the City of Hamilton, who hit an email ‘send’ button too fast on a message to 450 residents who had registered to vote by mail in the upcoming municipal election. Unfortunately, the
Cyber Security Today, Week in Review for Friday, Oct. 14, 2022
This episode features a discussion on Ontario’s new requirement that many employers have to tell staff about electronic monitoring in the workplace, and updated Canadian ransomwa
Why call police after a cyber attack? Because they’re waiting for you
‘Your tax dollars pay our salary’ notes a member of a police cyber
Sidebar: When you want to call police about a cyber incident
The alert from the head of IT is alarming: There’s been a breach of security controls. The incident recovery (IR) plan kicks in – you do have one, right? – and the IR team will ponder a number of questions, including whether the police be called, and if so, which force? To help managers of
Cyber Security Today, Oct. 14, 2022 – The Emotet botnet has improved, phony Google Translate pages used for phishing, fake COVID scams in the US continue, and more
This episode reports on Emotet, new phishing scams and a heat scanner that researchers say can deduce your passwords from
Magniber ransomware targets Windows users via fake security updates
Magniber ransomware is targeting Windows home users via fake security updates promoted on malicious websites. The security update contains a malicious file that contains JavaScript, which can trigger a complicated infection with the file-encrypting malware. Researchers found that ransomware operators in January used Chrome and Edge browser updates to push malicious Windows application package files […]
New auth bypass bug targets FortiGate firewalls and FortiProxy web proxies
A Fortinet vulnerability in FortiGate firewalls and FortiProxy web proxies could allow a threat actor to perform unauthorized actions on vulnerable devices. Fortinet has issued security updates to fix the vulnerability and has urged customers in private alert to disable remote management interfaces on affected devices “with utmost urgency.” The bug, a critical bug traced […]
Fast Company Executive Board members’ data not stolen in cyberattack
Fast Company, an American business magazine, has confirmed that the personal information of its board members was not stolen in a cyberattack that forced the company to shut down its website.
AI tools fail to reduce hiring bias
After a two-year study, researchers concluded that artificially intelligent hiring tools do not minimize partiality or enhance variations. In 2020, an international survey of 500 human resources professionals was conducted by a human resources panel, and nearly a quarter used AI to harness talent in the form of automation. According to Dr Kerry Mackereth, a […]
Meta’s new virtual reality headset can track users’ eyes and faces for targeted advertising
Meta Quest Pro, Meta’s new virtual reality headset, is a sleek device with enhanced hardware, advanced features and cameras that point inwards to track users’ eyes and faces for targeted advertising. The Quest Pro will not only tell Meta what users are interested in but also track their eyes and gives the company unprecedented insight […]