Evidenced by the high-profile breaches of SolarWinds and Microsoft Exchange Server, cybercriminals are targeting weak links in the software supply chain and compromising code with dramatic effect. According to a report by the Identity Theft Resource Center (ITRC), there was a 42% rise in the number of supply chain attacks in the first quarter of 2021 compared to Q4 2020. However, while […]
Tag: Cybersecurity Awareness Month
Anyone paying attention to the security industry of the past decade can tell you that the way we implement and carry out our tactical security programs is very different today than it used to be. Technology has brought massive changes into the physical security space, with smart cameras replacing eyeballs for surveillance, our cell phones […]
The arrival of Cybersecurity Awareness Month every October prompts discussion of best practice, and briefly raises the profile of security professionals. However, major attacks on organizations such as SolarWinds and Kaseya, and breaches of financial giants such as Morgan Stanley (caught up in the security problems of file-sharing company Accellion), should serve as a reminder […]
Ransomware is a term that has entered popular speech as it has echoed across the front pages of newspapers and the internet. While most people might not understand exactly how ransomware works, or how it might be launched by a “Zero Day” exploit, they understand it locks the holder out of computers that store highly […]
On Oct. 8, President Joe Biden signed into law S.1917, the K-12 Cybersecurity Act of 2021. The bipartisan legislation—authored by U.S. Sen. Gary Peters, D-MI, Chairman of the Homeland Security and Governmental Affairs Committee—aims to enhance cybersecurity assistance to K-12 educational institutions across the country.
Phishing attacks have ramped up since the start of the pandemic with the majority of workforces transitioned to a remote setting. Spear phishing has particularly seen an increase and can be even more harmful due to its targeted approach. Hackers target and personalize messages to a specific individual, group, or organization in a spear phishing […]
The Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the National Cyber Security Alliance (NCSA), has kicked off the 18th annual Cybersecurity Awareness Month. This year’s theme for the month-long campaign is “Do Your Part. #BeCyberSmart.” Throughout October, CISA and NCSA will participate in a number of events, social media engagements, and other outreach to encourage […]