Privacy by Design to become an ISO standard next month
The standard, to be known as ISO 31700, can mesh with organizations that follow the ISO 2700 standard for IT security
Ontario liquor board dealing with cyber incident
The Ontario agency that sells alcoholic beverages is still dealing with an undescribed cyber incident, over 16 hours after its website was taken offline. The Liquor Control Board of Ontario tweeted that it is responding to a cybersecurity incident affecting LCBO.com and its mobile app. In-store sales of liquor and wine are unaffected. With roughly
Threat actor trying to exploit old Windows weakness
What’s called the Bring Your Own Vulnerable Driver tactic is still being used to compromise Windows, s
Vidar info-stealing malware spreads via 1,300 domains impersonating AnyDesk site
Attackers are spreading Vidar information stealing malware using 1,300 domains impersonating AnyDesk official site. The malicious activity was uncovered by SEKOLA threat analyst crep1x. Crep1x shared the complete list of the malicious hostnames all of which linked to the same IP address of 185.149.120[.]9. The malicious hostnames include typosquats for AnyDesk, MSI Afterburner, 7-ZIP, Blender, […]
Cyber Security Today, Jan. 11, 2023 – Debate on ransomware attacks dropping continues, beware of long-hidden backdoors and lots of patches released
This episode includes news on a ransomware survey of IT leaders, hidden backdoors, ransom notes with DDoS attacks and a summary of the late
CISA mandates agencies to patch two privilege escalation flaws
The Cybersecurity and Infrastructure Security Agency (CISA) gave all Federal Civilian Executive Branch Agencies (FCEB) three weeks until January 31st to address two security flaws and block potential attacks. The two flaws include a Microsoft Exchange elevation of privileges flaw tracked as CVE-2022-41080 and a privilege escalation zero-day tracked as CVE-2023-21674. CVE-2022-41080 can be paired […]
U.K. Government considers the possibility of “digital pound”
The economic secretary to the Treasury, Andrew Griffith has confirmed that the U.K. government is considering introducing a national cryptocurrency or “digital pound.” Griffith told the Treasury Select Committee that a public consultation on the attributes of a digital pound would come into effect in the coming weeks. Since countries across the world are already […]
Companies slack on security as ransomware attack decreases
According to a report from privileged access management company Delinea, ransomware attacks are decreasing. Only 25% of organizations suffered a ransomware attack in 2022, a significant decline from 64% in 2021. However, the decline is pushing organizations to reduce their security precautions. Findings from the report shows that about 56% of organizations with 100 or […]
Court approves Binance.US bid to buy Voyager
The proposed deal by bankrupt crypto lender Voyager to sell some of its assets to Binance US is one step closer to becoming a reality after U.S. District Judge Michael Wiles of the bankruptcy court granted Voyager permission to enter into an asset purchase agreement with Binance.US. Voyager Digital received preliminary court approval for a […]
Southwest Airlines promotes senior staffs
Southwest Airlines has publicly announced five leadership changes across some of its departments just days after announcing that the company’s service meltdown last month will cost up to $825 million. Contrary to popular belief that staffs would be fired, these changes, which take effect immediately, represent phase two of the organizational structure work that began […]
