Traditional MFA is Creating a False Sense of Security
Traditional MFA is Creating a False Sense of Security
Nobody says MFA is 100% will protect you against malicious attackers. It will only slow down the attackers to own your system or your network. If your cybersecurity professional told that to you, refer them to this website to learn more about it.
A report from HYPR and Cybersecurity Insiders, reveals that despite the zero trust initiative, many organizations are still highly exposed to credential attacks due to insufficient multi-factor authentication (MFA) methods and overall lack of urgency after potential exposure. In fact, 64% of those hacked did not enhance or improve their authentication controls following the attack.
continue reading: https://www.helpnetsecurity.com/2022/02/16/insufficient-mfa-methods/
Emotet Now Spreading Through Malicious Excel Files
Hackers are evolving to find new ways to attack, cybersecurity professionals must keep one step ahead to maintain good security posture.
The infamous Emotet malware has switched tactics yet again, in an email campaign propagating through malicious Excel files, researchers have found.
Researchers at Palo Alto Networks Unit 42 have observed a new infection approach for the high-volume malware, which is known to modify and change its attack vectors to avoid detection so it can continue to do its nefarious work, they wrote in a report published online Tuesday
continue reading: https://threatpost.com/emotet-spreading-malicious-excel-files/178444/
BlockFi to Pay SEC, State Regulators $100M in Penalties
An expensive penalty for not disclosing their business to the proper authority.
The U.S. Securities and Exchange Commission has confirmed that BlockFi, a cryptocurrency lending platform based in Jersey City, N.J., has been charged with failing to register its lending product and violating registration provisions. To settle the SEC’s charges, it will pay a $50 million penalty, cease unregistered offers and sales of the product, and comply with the law within 60 days.
continue reading: https://www.bankinfosecurity.com/blockfi-to-pay-sec-state-regulators-100m-in-penalties-a-18514
Trickbot Malware Targeted Customers of 60 High-Profile Companies Since 2020
Continuous education in cyber security will help and prepare you handle this type of attack.
The notorious TrickBot malware is targeting customers of 60 financial and technology companies, including cryptocurrency firms, primarily located in the U.S., even as its operators have updated the botnet with new anti-analysis features.
“TrickBot is a sophisticated and versatile malware with more than 20 modules that can be downloaded and executed on demand,” Check Point researchers Aliaksandr Trafimchuk and Raman Ladutska said in a report published today.
continue reading: https://thehackernews.com/2022/02/trickbot-malware-targeted-customers-of.html
Cyberthreats and Skills Shortages
Over the past two years in particular, the importance of cybersecurity has been globally recognized, and sophisticated cyberattacks have made international headlines. However, a global skills shortage in this sector has been acknowledged as a potential brake on economic recovery following the pandemic, and for CISOs in particular, the lack of qualified and skilled staff to deal with increasingly complex cybersecurity threats creates the perfect storm for business and consumer risk.
continue reading: https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2022/how-to-navigate-the-perfect-storm-cyberthreats-and-skills-shortages
Texas sues Facebook over facial recognition
Texas is suing Facebook over allegations that the social media giant violated Texans’ privacy through the company’s previous use of facial recognition technology, according to a complaint filed Monday.
“Facebook will no longer take advantage of people and their children with the intent to turn a profit at the expense of one’s safety and well-being,” Texas Attorney General Ken Paxton (R) said in a statement. “This is yet another example of Big Tech’s deceitful business practices and it must stop. I will continue to fight for Texans’ privacy and security.”
continue reading: https://thehill.com/policy/technology/594139-texas-alleges-facebooks-facial-recognition-practices-violated-privacy
More CyberSecurity News at https://QUE.com/tag/cybersecurity
