Heads-Up Cyber Insurance Does Not Pay out for Human Error

Currently, cyber insurance companies do not cover instances of human error. However, the recent WannaCry ransomware attacks have caught the attention of insurance companies around the globe.

Customers have started to file damage claims yet it is a bit too early to see the malware pandemic's impact on the insurance industry.

WannaCry Ransomware Factsheet

What Is Wanacry/Wanacryptor?

WannaCry refers to ransomware that uses worm technology to infiltrate multiple computers across a network. It aims to exploit vulnerabilities in the Windows SMBv1 server to quickly and remotely compromise systems, encrypt files, and spread to other hosts.

Response to WannaCry Ransomware Attack – Update 1

As you may know, on May 12, hackers launched a global ransomware campaign against tens of thousands of corporate and governmental targets. The attack, known as WannaCry (also known as WannaCry, WCry, WanaCrypt, WanaCrypt0r, or Wanna Decrypt0r) is encrypting files and changing the extensions to: .wnry, .wcry, .wncry and .wncrypt, encrypts files on an infected computer and asks the computer's user to pay a ransom in order to regain access.

Read more 1 Comment

Samas Ransomware Deletes Veeam Backups, and Maybe Yours Too

Your Veeam Backups are at Risk - From Samas Ransomware!

Do you feel secure against ransomware attacks because you have all your data assets copied to Veeam backups? Well, this isn't intended to panic you, but that feeling of safety and security has been shattered for businesses small and large by the insidious 'Samas' ransomware.

Read more 1 Comment

Passwords-Workers Say They Will Hand Them Over For Next To Nothing

A cyberattack could cost an organization millions, but an employee within your company might be willing to give an outsider access to sensitive information via their login credentials for under £200. According to a report examining insider threats by Forcepoint, 14 percent of European employees claimed they would sell their work login credentials to an outsider for £200. And the researchers found that, of those who'd sell their credentials to an outsider, nearly half would do it for less.

Aviation Phishing Scams

Phishing scams are a form of social engineering attack, perpetrated by criminal-minded individuals who depend on human interaction to obtain information about an organization, or about data assets stored on computers. Most of these attacks come in the form of emails which seem very respectable and legitimate, and they often claim to be sourced from someone new to the company, or someone researching the company.

Tax Time Guide Protect Personal, Financial, Tax Information and Computers

Are you getting ready to file your business tax by the IRS? It's time to think about safety and data confidentiality.

According to John Koskinen, IRS Commissioner, the Internal Revenue Service does everything in its power to shield taxpayers against criminal-minded individuals bent on identity theft, or other scams that aim to steal information or assets.

WordPress: Content Injection Vulnerability

Recently a Sucuri Firewall Security Team uncovered a vulnerability in WordPress which allows unauthenticated users to make changes to any WordPress page or post within a given site. This was considered to be a content injection vulnerability (or a privilege escalation) which affected the WordPress REST (Representational State Transfer) API, that was added to WordPress version 4.7.0 and enabled by default.