The Australian government has passed the controversial and mind-bogglingly complex Access and Assistance Bill 2018 into law. The opposition Labor party shelved its plans to improve the scheme and waved it through in response to overwhelming pressure from the Liberal-National Coalition government, desperate to see it made law before Christmas. Since it gives authorities the right to demand access to…
A small subset of professional criminal actors is responsible for the bulk of cybercrime-related damage, employing tools and techniques as sophisticated, targeted and insidious as most nation-state actors, says the State of Cybercrime Report 2018. These sophisticated and capable criminal gangs operate largely outside of the dark web, although they may leverage low-level criminal tools occasionally…
I found a great article in SecurityWeek by Alastair Paterson, the CEO of Digital Shadows. Could not have said it better myself, and he alerted everyone about an attack vector that was even a new one to me: email archives.
A new hacking tool, called L0rdix, has been deemed the latest “universal offering” for attackers targeting Microsoft Windows PCs. The new tool combines data theft and cryptocurrency mining and can avoid malware analysis tools. In a blog post, enSilo researcher Ben Hunter said the tool is relatively new and is available for purchase. There are, however,…
Just a reminder to everyone to be constantly vigilant of fake emails which are trying to obtain your personal information (phishing) or infect you with malware. We cannot emphasise enough, the importance of being both aware and sceptical of emails you receive. A recent example we have seen is this ANZ bank email. If you…
Black Friday and Cyber Monday, which come right after Thanksgiving Day, are two of the most popular days for shopping online, with retailers offering big discounts and deals to capitalize on the holiday season. While many shoppers are on the lookout for Black Friday and Cyber Monday deals, cyber criminals are creating malicious apps to…
Cisco revealed that it had “inadvertently” shipped an in-house exploit code that was used in test scripts as part of its TelePresence Video Communication Server and Expressway Series software. Cisco Systems revealed in a security bulletin Wednesday that it “inadvertently” shipped in-house exploit code that was used in security tests of scripts as part of…
Just about everyone in the security industry has written a set of “rules for online safety” – so I thought it was about time to do the same. There’s plenty of good reasons to think that any quick fix is snake-oil (especially when written by a vendor) and that any article less than 100 pages…
Safeguarding Against Identity Theft in Australia: A Modern Framework for Organisations Identity theft continues to surge as a significant security risk in Australia, affecting millions of citizens every year. The Australian Federal Police categorise identity theft as a rapidly evolving criminal challenge. Given this landscape, it becomes crucial for organisations like ours to remain unceasingly…
The Pirate’s Guide to ‘Privacy by Design’: Navigating the High Seas of Data Protection Ahoy, savvy data wranglers! If ye ever felt like ye were navigating stormy seas when it comes to the treacherous world of privacy, ye’re not alone! Avast, gather around me hearties, because today we talk about the secret treasure map called…
