Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Did Microsoft..
Russia Phishing Attack On Usaid, Other Human Rights Groups
BACKGROUND: In response to today’s Another Nobelium Attack report from Microsoft that threat actors affiliated with Russian intelligence conducted a phishing attack on the US Agency for International Development (USAID) to surveil human rights and other organizations critical of the Russian government, a cybersecurity expert with Gurucul offers perspective. Experts Comments
Implications Of Russian Solarwinds Hackers New Email Attack On Government Agencies
BACKGROUND: It has been reported that the state-backed Russian cyber spies behind the SolarWinds hacking campaign launched a targeted phishing assault on US and foreign government agencies and thinktanks this week using an email marketing account of the US Agency for International Development (USAid), Microsoft has said.
Klarna Privacy Incident Was 'Self-Inflicted Bug'
Klarna has experienced a data privacy incident that it says has affected 90,000 users. Some say they were able to see other users’ private information. Klarna is saying that the incident only compromised “non-sensitive data” as classified by GDPR. Experts Comments
Expert Commentary: Android Apps Exposed Data Of Millions Of Users Through Cloud Authentication Failures
BACKGROUND: Researchers analyzing Android apps have discovered serious cloud misconfigurations leading to the potential exposure of data belonging to over 100 million users.
Experts Comments On GDPR Anniversary
On the third anniversary of the implementation of the GDPR, we can confidently say that the regulation is here to stay. Ultimately, data belongs to people and any technique that reinforces that approach - including encryption, tokenisation, data scrambling, data hiding, anonymization, among others - represents a fundamental step to protect small quantities of data that, when aggregated, becomes information. In this cloud epoch, where data moves between cloud environments, effective data .....
Conti Ransomware Group Leak Irish Patients' Data on Dark Web - Expert Comment
Almost a week after the significant ransomware attack on the Ireland Health Service (HSE) network, the group responsible has started leaking patients’ medical and personal details online. HSE publicly disclosed the attack on Friday, when the organisation announced that it had shut down its IT systems. The attack affected diagnostic services and forced many hospitals to cancel appointments.
Code Signing in the Software Supply Chain – Expert Source | Information Security Buzz
We’re quickly moving toward a reality where everything needs to be signed. Not just the software we buy from third-party vendors, but also the software we build and deploy within our own organizations — everything from PowerShell scripts, Bash scripts, containers, libraries, files, and executables.
NZ District Health Board Attack Slows 5 Hospitals
BACKGROUND: New Zealand’s Waikato District Health Board confirmed on May 18th that it is addressing a “cyber security incident” and was experiencing full outage of its information systems, impacting the district’s hospitals and health services which are currently operating without IT support. An expert with Gurucul offers perspective. Experts Comments
Kill The CAPTCHA: Stop Making Users Account For Your Lack Of Security
BACKGROUND: Earlier this week, Cloudflare drew attention drawn to the ineffectiveness of the CAPTCHA tool that so many of us annoyingly go along with, forcing us to count the number of traffic lights before we can purchase tickets. At the same time, suggestions were made about replacing it with a personal security key. Experts Comments
Elon Musk Impersonators Earn Millions From Crypto-scams - Expert Advise
This latest instance of crypto scamming by fraudsters impersonating Elon Musk is no exception – it’s yet another example of a growing trend. All too often, industry experts are quick to blame consumers for “falling” for scams, or advise how they could have avoided being caught out. This blame game needs to stop. Fraudsters are using more sophisticated methods than ever before, and the onus is now on technology and finance organisations to step up to the challenge. To fight misinformation, .....
DCMS to Focus on Supply Chain Security - Expert Reaction
Concern over supply chain attacks and Nth party risks continue to ripple across the globe, and for good reason. Many are unprepared to manage the threats their ecosystem introduces to their organization -- at a time when dependency on third-party providers is growing. It's encouraging to see the UK Government address this problem and spur organisations to think about supply chain attacks as more than just a security issue, but an operational risk that can impact the physical supply chain .....
Rapid7 Says Source Code Accessed In Codecov Supply Chain Breach
BACKGROUND: Cybersecurity company Rapid7 acknowledged that due to a breach of software supplier Codecov, its source code was accessed by attackers. Hashicorp, Confluent, and Twilio have previously confirmed their code was similarly impacted by the Codecov breach. Experts Comments
U.S. Issues Ransomware Advice For Critical Infrastructure
Does it go far enough? “Given the level of authority these agencies have, it goes about as far as it can. That said, the Government needs to do more. We can criticize critical infrastructure owners for not moving quickly enough to strengthen their cybersecurity postures. But now, as nation-states, ransomware gangs and other cyber criminals get more daring and execute attacks that are impacting civilization, its fair to criticize the government for not doing enough to help protect us .....
Expert Commentary - Ofcom Warn People Not to Trust Caller ID
Following the breaking news story which found the UK telecoms regulator is warning the public not to trust caller ID on their phones as it tries to help stop people from becoming victims of fraud. A director at Ofcom, says caller ID should not be used as a means of verifying a caller’s identification. Fraudsters are increasingly changing their caller ID to disguise their identity, known as number spoofing. Experts Comments
Breached Online Ordering Platforms Expose Hundreds Of Restaurants
BACKGROUND: Breached online food ordering platforms have exposed hundreds of restaurants, according to researchers. Experts Comments
Experian Leaked Consumer Credit Scores – Expert Commentary | Information Security Buzz
BACKGROUND: Brian Krebs’ report that Experian API Exposed Credit Scores of Most Americans says: “Experian just fixed a weakness with a partner website that let anyone look up the credit score of tens of millions of Americans just by supplying their name and mailing address… Experian says it has plugged the data leak, but the researcher who reported the finding says he fears the same weakness may be present at countless other lending websites that work with the credit bureau.” Experts Comments
World Wide Web Anniversary Today - Expert Commentary
When Tim Berners-Lee utilised the internet to launch the World Wide Web (WWW) in the public domain 28 years ago today, he could not have foreseen the broadscale adoption and use of either, or the software-based reality of the world today. Core business applications were rapidly transitioning to SaaS-based solutions like Salesforce, Microsoft Office 365, Zoom, Slack and other vertical-specific applications even before the pandemic. The shutdowns of the past year have accelerated this .....
Illegal Football Streaming Sites are Absolutely Riddled with Dangerous Malware
Illegal football streaming sites are absolutely riddled with dangerous malware. In fact, analysis of illegal websites used by hundreds of thousands to stream football matches worldwide has revealed fans are putting themselves at considerable risk. According to a report from cybersecurity firm Webroot, almost all (92%) illegal football streaming websites contain some form of malicious content, from malware and phishing lures to social engineering scams. Experts Comments
Government Must Act to Choke Bitcoin Ransom Payouts Says Experts
Government officials and private sector stakeholders are proposing bitcoin regulation that hampers the ability of cybercriminals to receive cryptocurrency payment for ransomware attacks. Experts Comments
Microsoft Discloses Vulnerabilities in OT and IoT Devices
Last night, Microsoft disclosed more than 25 critical memory allocation vulnerabilities in OT and IoT devices that could enable an attacker to bypass security controls and execute malicious code or cause a system to crash in industrial, medical, and enterprise networks. Experts Comments
77% of Q1 Ransomware Attacks Threaten Exfiltration – Experts Reaction | Information Security Buzz
RDP is a great technology, but because of its power, attackers have been leveraging it heavily as an entry point into corporate networks for attacks such as ransomware. While the issue at the surface looks to be with RDP itself, it's actually about how networks are architected - flat networks with minimal segmentation and those that focus on perimeter-based security will always be victims of these types of attacks. Networks have since evolved to become hyper-connected with a proliferation of .....
16 Percent of Mobile Devices are Infected with Malware in Emerging Markets, Expert Weighs in
Android is the predominant mobile operating system worldwide, but the fragmentation of different operating systems and devices spanning back over a decade has resulted in an insurmountable challenge based on the sheer numbers of users in these markets. Android devices have made mobile technology accessible to the populations of these countries given the low price point of legacy models. Today, almost everyone has a mobile carrier subscription or pay-as-you-go connection. We have the freedom .....
Memphis-based First Horizon Bank Discloses Data Breach, Customers Lose Close to $1 Million
BACKGROUND: First Horizon Bank in Memphis, Tenn., has disclosed that a number of online customer bank accounts were targeted by a data security breach. The $87.5 billion-asset company said that an unauthorized party obtained login credentials from an unknown source and exploited a vulnerability in third-party security software to gain access to less than 200 accounts, obtaining “less than $1 million” from some of the accounts. Experts Comments
Security Expert Re: New Vulnerability Found in Linux Kernel
BACKGROUND: Cisco Talus discovered an information-disclosure security vulnerability in the Linux kernel, which can be exploited to expose information in the kernel stack memory of vulnerable devices. Experts Comments
Users Flocking To Telegram May Face Toxic Trojan
Over the past three months, users of the popular messaging app Telegram have seen over 130 attacks using a new multi-functional remote access trojan (RAT) dubbed ‘ToxicEye’, according to recently released research. Following controversial changes to privacy settings from Facebook’s WhatsApp, cloud-based IM platform Telegram has enjoyed a surge in popularity, becoming the most downloaded app worldwide for January 2021 with more than 63 million installs.
Experts Advise on World Password Day
A global survey conducted by Gartner found that 88% of business organizations mandated or encouraged employees to work from home (WFH) as a result of the COVID-19 pandemic. With millions of workers around the world now having to access their organization’s data remotely, data protection was put under increased pressure. For many, the answer was to employ a strong password -- oftentimes, requesting that employees do so employing a random mix of no less than 15 characters. Undeniably, this was .....
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Did
Contact Did, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack