News

  • FBI: Victims lost nearly $7 billion to cybercrime in 2021

    A new report released by the FBI’s Internet Crime Complaint Center (IC3) shows that financial losses due to suspected cybercrime continued to rise sharply over the course of 2021, to a total of $6.9 billion in that year alone, with 847,000 complaints lodged by victims. Five years ago, the same report showed that internet-based crime…

    Read More

  • Prison for New Orleanian who Exploited Patients’ Stolen Data

    Convict bought stolen data and used it to fraudulently obtain at least $200K Read More

    Read More

  • A Parent’s Guide to TikTok

    Finding someone who hasn’t heard of TikTok in 2022 would be quite the achievement. As one of the most popular social media platforms of the moment, it is not only being used by our tweens, teens and even grownups to connect but also as a crucial way to tell important stories amidst a backdrop of…

    Read More

  • Anchore Enterprise software SCM platform adds SBOM capabilities

    Anchore has released the latest version of its software SCM (supply chain management) solution, Anchore Enterprise, adding SBOM (software bill of materials) monitoring as an integral part of the platform.  The new release, Anchore Enterprise 4.0, adds new SBOM capabilities to identify upstream dependencies in source code repositories and monitor for SBOM drift that can…

    Read More

  • US and Canada Collaborate to Tackle Cybercrime

    Neighboring countries meet to discuss how to combat cyber threats bilaterally Read More

    Read More

  • #IMOS22: Leeza Garber Explains How to Hire the Human Element

    Privacy & cybersecurity attorney, Leeza Garber, highlights the importance of hiring for behaviors in cybersecurity Read More

    Read More

  • West Blocks Russia’s Access to Weather Data

    Russia restricted over fears it may launch biological or chemical attack on Ukraine Read More

    Read More

  • AvosLocker ransomware – what you need to know

    AvosLocker is a ransomware-as-a-service (RaaS) gang which first appeared in mid-2021. It has since become notorious for its attacks targeting critical infrastructure in the United States, including the sectors of financial services, critical manufacturing, and government facilities. Read more in my article on the Tripwire State of Security blog. Read More

    Read More

  • Vulnerabilities found in 250 HP printer models

    HP has published various security alerts for more than 250 of its printer models. Hackers should be able to inject malicious code, denial-of-service (DoS) attacks to start and access data. As a countermeasure, the manufacturer recommends firmware updates and configuration changes. Gateway LLMNR protocol The first vulnerability, CVE-2022-3942, is classified as critical with a value of 8.4. According to Heise, attackers can…

    Read More

  • IriusRisk launches Open Threat Model standard to secure software development lifecycle

    IriusRisk has launched a new Open Threat Model (OTM) standard to allow greater connectivity and interoperability between threat modeling and other parts of the software development lifecycle (SDLC). The OTM standard has been published under a Creative Commons license and provides a tool-agnostic way of describing a threat model in a simple to use and…

    Read More