While this column is directed at lawyers, it applies equally well to anyone sending or receiving confidential communications via email and expecting those communications to actually be confidential. We think of business email compromise as one of those spear phishing emails that pretend to come from the boss telling you to wire money to China […]
Continue reading → [DISPLAY_ACURAX_ICONS]Merchants want you to believe that HTTPS equals secure. I keep saying that it doesn’t. Here is another story for my side of the argument. First, a little background. If a web site want to support HTTPS (also known as SSL or TLS), they need to have a certificate. The certificate is used as part […]
Continue reading → [DISPLAY_ACURAX_ICONS]Appalachian Regional Healthcare (ARH), which operates two hospitals in West Virginia and nine in Kentucky reported over the weekend that it was the target of a cyberattack that forced staff to revert to paper. No email, no electronic health records, no other electronic systems. Just paper. The hospitals are assessing whether to transfer critically ill […]
Continue reading → [DISPLAY_ACURAX_ICONS]Mailguard is reporting a new phishing scam that uses the old “here is an invoice for you to review” or “here is a purchase order for you to review”. A screenshot of one of the emails is shown below. In both cases, the malware takes advantage of a vulnerability in Word that has been patched, […]
Continue reading → [DISPLAY_ACURAX_ICONS]When is a hack not a hack? When an Israeli company sells it as a feature. The company, NSO Group, sells the software, to governments among others. The software allows the attacker to: Control the camera Listen to the microphone Track the phone’s location Intercept text messages Intercept emails Download the calendar data Download your […]
Continue reading → [DISPLAY_ACURAX_ICONS]It seems like I write one of these every day. Today it is Millennium Hotels and Resorts, an international hotel chain based in Colorado. They are saying customers that used their credit cards at 14 of their hotels between early March and the end of June need to keep an eye on their credit card […]
Continue reading → [DISPLAY_ACURAX_ICONS]