Russian-language cybercrime forum MagBo sells access to hacked websites for as little as 50 cents. (Source: Flashpoint)

Cybercrime Markets Sell Access to Hacked Sites, Databases

Mathew J. Schwartz • September 21, 2018

One mystery with the recently discovered payment card sniffing attacks against such organizations as British Airways and Newegg has been how attackers might have first gained access to the victims' networks. But a number of cybercrime markets sell such access, in some cases for as little as 50 cents.

Business Continuity Management / Disaster Recovery

Police in Europe Tie Card Fraud to People-Smuggling Gang

Latest

Business Email Compromise (BEC)

Business Email Compromises Fuel Procurement Fraud

Nick Holland • September 21, 2018

Business email compromises have been at the center of a number of procurement fraud scams, says Allan Stojanovic, a security architect and analyst at the University of Toronto, who describes the fraud and why it's so difficult to thwart.

Cybersecurity

Defending Against Next-Generation DDoS Attacks

Nick Holland • September 21, 2018

DDoS attacks have increased significantly in scale via IoT botnet attacks. Gary Sockrider of Netscout Arbor discusses best practices for dealing with this significant threat.

Anti-Fraud

Using Machine Data Analysis to Detect Fraud

Nick Holland • September 21, 2018

Connecting the dots between disparate forms of machine data can prove to be valuable in discovering fraud patterns, says Jade Catalano of Splunk, who explains how.

General Data Protection Regulation (GDPR)

When Will GDPR Show Its Teeth?

Nick Holland • September 21, 2018

The latest edition of the ISMG Security Report takes a look at the EU's General Data Protection Regulation, including the outlook for enforcement and common misconceptions about its provisions.

Breach Notification

Canada Prepares for New Breach Notification Era

Tom Field • September 20, 2018

November 1 ushers in a whole new era of breach notification requirements for Canada. What are the new standards, and how prepared are Canadian organizations? Attorney Imran Ahmad shares insights.

Breach Preparedness

Perth Mint Says 3,200 Customers Affected By Data Breach

Jeremy Kirk • September 19, 2018

If you're going to hack, why not go for the gold? That appears to have been the impetus behind an unusual data breach at the government-owned Perth Mint in Western Australia, which says personal details for 3,200 customers stored in an old database were compromised.

Breach Preparedness

New Hacker Exploits and How to Fight Them

Nick Holland • September 19, 2018

Hackers are constantly developing new exploits, and updating defenses is not an easy task. Dan Larson of Crowdstrike discusses some the new techniques hackers are using and how to fight them off.

Fraud

The Need for Security Collaboration

Nick Holland • September 19, 2018

Today's cybercriminals don't operate in silos, so why do companies? Saba Shariff of Symcor discusses techniques for greater collaboration on security.

General Data Protection Regulation (GDPR)

GDPR: The Global Impact on Privacy

Nick Holland • September 19, 2018

Richard Henderson of Infosec Global discusses the impact of the European Union's General Data Protection Regulation and how the law is influencing privacy frameworks globally.

Application Security

Managing Open Source Risks

Nick Holland • September 19, 2018

Open source and third-party components help developers build and deploy applications faster. But with increased speed comes greater risks, says Chris Eng of CA Veracode, who offers insights on mitigating those risks.

General Data Protection Regulation (GDPR)

GDPR Compliance: Common Misconceptions

Marianne Kolbasuk McGee • September 19, 2018

Attorney Elizabeth Harding clears up confusion about certain provisions of the EU's General Data Protection Regulation, including the issue of when organizations need to obtain a European consumer's consent to process their data.

Endpoint Security

Wielding EternalBlue, Hackers Hit Major US Business

Jeremy Kirk • September 17, 2018

Attack code known as EternalBlue, designed to exploit a Windows SMB flaw, continues to work for attackers despite Microsoft having issued patches more than a year ago. One major U.S. business was a recent victim as part of a cryptocurrency-mining malware campaign, a researcher reports.