CylancePROTECT® vs. the SWIFT Attacks

It turns out that cybertheft isn’t just for isolated hacking groups any more. Security researchers have tied together a series of attacks on banks in Bangladesh, the Philippines and Vietnam after identifying segments of code used in the 2014 Sony Pictures breach and several 2013 attacks on South Korean companies. All three of these banking attacks are now widely believed by computer security experts to have originated from North Korea.

If the allegations are correct, this marks the first time a nation state (rogue or otherwise) has been involved in a cyberattack for purely financial gain.

To make the situation even more worrying, the attackers also gained access to SWIFT, formerly thought to be the most secure banking system in the world.

In the world of international banking and finance, this is huge (read: scary) news. For the full article click here 

from cyber security caucus http://ift.tt/1Q27Xli
via IFTTT

China, US Hold Talks to Bridge Cybersecurity Differences

Chinese and American officials said Tuesday they’re committed to bridging their differences on cybersecurity and moving to implement recent agreements, as they held talks amid complaints over China-based hacking operations that the U.S. says may have already cost U.S. companies tens of billions of dollars.

Repeated meetings between the sides on cybersecurity indicate the seriousness with which the Obama administration regards the issue, the U.S. ambassador to China, Max Baucus, said at the start of the two-day talks in western Beijing.

U.S. officials have been particularly eager to build on an agreement forged during Chinese President Xi Jinping’s visit to the White House in September that says neither government will support commercial cyber-theft. The deal was viewed by Washington as a diplomatic breakthrough, although U.S. officials have not conclusively determined that it has led to a decline in hacks against U.S. companies.

“We’re here today to ensure implementation of agreements made by the two presidents, commitments that illustrate that we can work through areas of differences to reach areas of cooperation,” Baucus said, referring to the agreement, which he called a “major advancement.” For the full article click here 

from cyber security caucus http://ift.tt/1Xn5STc
via IFTTT

US sees progress in latest round of cyber security talks with China

BEIJING (Reuters) – The United States is pleased to see progress has been made with China on information sharing about cyber threats, a senior US official said on Tuesday (June 14), during the latest round of cyber security talks between the two countries.

Meeting in Beijing, US Department of Homeland Security Undersecretary Suzanne Spaulding said the focus on the talks was to make sure both sides fulfilled commitments made by the two presidents.

“We look forward to discussing the commitments we made with regards to not engaging in IP theft of trade secrets and confidential business information,” she told reporters. “A key element of the agreement is information sharing and establishing mechanisms.” For the full article click here 

from cyber security caucus http://ift.tt/2378dBG
via IFTTT

Cybersecurity law for critical infrastructure welcomed by panel of MEPs

MEPs sitting on the internal market committee have welcomed plans for a new cybersecurity law, which was approved by national ministers in May.

The Network and Information Security (NIS) directive will require “essential services” operators and “digital service providers” to notify the authorities about any cyber “incidents.”

The committee will vote on Tuesday and is expected to give the plan its blessing. The European Parliament as a whole is then likely to follow suit, paving the way for national laws in the next two years.

The law will apply to critical infrastructure including air traffic control, energy networks, and financial systems.

“This piece of legislation will allow countries all across Europe to set up teams of national experts and to work together and cooperate,” said Conservative MEP Vicky Ford. “This has been an incredibly sensitive negotiation, because to make us all more secure we need to work together, but we also need to respect the member states competencies in national security.” For the full article click here 

from cyber security caucus http://ift.tt/2377QXL
via IFTTT

6 useful cybersecurity tips from celebrities

It can be tricky to know exactly which security advice to follow when it comes to tech.

There are lots of different services to store your photos and videos, and celebrities are especially cautious about cybersecurity after hundreds of leaked photos emerged following a hacking campaign targeting celebrity iCloud accounts in 2014.

We’ve collected some cybersecurity advice from well-known names including Paris Hilton and Lindsay Lohan. For the full article click here 

from cyber security caucus http://ift.tt/1Xn5uEg
via IFTTT

What your business can learn from the Government’s cyber-security policy

The UK Government is a global leader in promoting public sector use of cloud technology for example, Transport for London’s contactless payment system was introduced far ahead of similar public transportation networks across the world. However, like all organisations, it is under increasing pressure to generate cost savings, increase efficiencies and improve services, which are a few of the reasons why the Government has decided to embrace cloud computing as a way of combatting cyber-attacks.

In truth, cyber-security related issues now cost British businesses a total of £34 billion a year, according to a joint study undertaken in 2015 by the Centre for Economics and Business Research (Cebr) and Veracode. Nearly £18 billion of that figure is attributed to lost revenue, while £16 billion relates to increased IT spend as a result of breaches. Equally worrying is that 34 percent of cyber-crime aimed at UK organisations relates to intellectual property ‘IP’ theft, a ‘crown jewel’ for many businesses.

It is statistics like these that have led the UK Government to significantly increase its cyber-crime budget. However, the message remains clear, that all organisations, including those in the private sector, must take charge of their own security, through both use of technology and by promoting higher levels of employee awareness. Here are 14 suggestions that everyday businesses can learn from the Government and should consider when creating their own cyber-security protection framework For the full article click here 

from cyber security caucus http://ift.tt/1Xn5O5V
via IFTTT

American ISIS: Analysis of the Orlando Jihadist & Lone-wolf Attacks

ISIS lone wolves are being activated in towns and cities globally for the most potent cyber-physical combination of guerrilla attack ever to be introduced in modern warfare. This new enemy, fueled by extremist ideology, defies traditional profiling attributes such as race, sex, age, education, and nationality and can more easily evade detection by law enforcement.

This report, entitled “American ISIS: Analysis of the Orlando Jihadist & Lone-wolf Attacks,” is an analysis of the June 12, 2016 lone-wolf attack in Orlando, Florida, the largest terrorist attack on American soil since the September 11, 2001 attacks and the largest attack against the LGBTQ+ community in American history.  Authors James Scott (Sr. Fellow, ICIT) and Drew Spaniel (Researcher, ICIT) also discuss how groups like ISIS are targeting and radicalizing susceptible individuals and what, if anything, can be done to curb this disturbing trend.

Source : http://ift.tt/1ZLtP4D

from cyber security caucus http://ift.tt/25Tstfh
via IFTTT