There is never a good time for the information systems of one of the world’s largest hosted services providers to go down, but in this case, at least it wasn’t April 6th. One of the Dutch firm Wolters Kluwer’s big services is CCH, the online tax software that many accounting firms, large and small, use. […]
Continue reading → [DISPLAY_ACURAX_ICONS]Hackers Wiping Github and Other Repos Hackers are attacking repositories of users on Github, Gitlab and Bitbucket, leaving a ransom note that says pay up if you want your software back. The ransom isn’t much – around $500, – which may cause people to pay up rather than trying to recover the data, which I […]
Continue reading → [DISPLAY_ACURAX_ICONS]This time the attack is against an eCommerce platform, PrismWeb, that is used by College bookstores. The attack is similar to other attacks, in the the hackers somehow got into the company’s system and inserted a tiny bit of Javascript that steals credit card data – very similar to Magecart that is affecting sites from […]
Continue reading → [DISPLAY_ACURAX_ICONS]One good thing about breach notification laws – we tend to find out more information about what actually happened. Last month Citrix announced that hackers broke into their network and stole documents – corporate secrets. They said they found out when the FBI came to tell them (that probably was not fun to admit). Security […]
Continue reading → [DISPLAY_ACURAX_ICONS]Stories – and only stories – abound about whether the Ruskies have infiltrated the US power grid – years ago. The government is not going to tell the truth for fear of scaring the crap out of people. On March 5th a “cyber event” interrupted the power grid in parts of the western United States. […]
Continue reading → [DISPLAY_ACURAX_ICONS]The fourth annual benchmark on cyber resilience authored by Larry Ponemon and paid for by IBM shows that 77% of the organizations surveyed do not have a cybersecurity incident response program applied consistently across the organization. Does your organization have an effective, trained and tested cybersecurity incident response program (CSISP) that works across all parts […]
Continue reading → [DISPLAY_ACURAX_ICONS]