Home

The Resurgence of Data-Entry Phishing Attacks

‘Old School’ email social engineering or data-entry phishing is an attack method that has been on the rise in recent months, notably employed by the Syrian Electronic Army to hack seemingly every major media outlet in the Western hemisphere. Data-Entry phishing emails lure employees into freely giving up their login credentials by taking them to a seemingly legitimate landing page. Attackers then use the credentials to establish a foothold in the network.

: SCOTT GREAUX, VICE PRESIDENT, PHISHME; Viewpoints; Posted On Tuesday, 01 July 2014 02:33

Taiwanese Government targeted in RAT Dropbox attack

In response to the discovery of a recent a remote access trojan (RAT) which is using Dropbox for command and control in a targeted attack against the Taiwanese Government, we have the following comments from Imperva and Tripwire:

: Lucy Harvey; Talking Point; Posted On Tuesday, 01 July 2014 02:25

Employee Relations Institute urges organisations across the UK to adopt professional standards

London: A campaign launched at Westminster last night by the Employee Relations Institute asks UK employers to commit to implementing key workplace standards laid out by the Institute:

: Nathalie Agnew; Industry News; Posted On Tuesday, 01 July 2014 02:16

Failures of Heartbleed Response

How we failed post-Heartbleed

There’s no doubt Heartbleed was one of the most devastating events within cyber security throughout the last decade. Security and IT teams alike rushed to fix the vulnerability and the media frenzied. While the fact that it was so quickly addressed and brought to light was impressive, I was astonished about the fact that a huge amount of websites that were affected by Heartbleed regenerated their certificates with the same private key. If I were to tweet about this, I might have used #facepalm. While I was quite impressed by the mobilization of the internet to address the issue so early on, I was equally stunned by the total failure in the efforts to fix the problem properly.