Author: cnhadmin

The REvil/Sodinokibi ransomware is once again undergoing active development, and its original operators are likely responsible, according to analysis conducted by the Secureworks Counter Threat Unit (CTU), which published its findings on 9 May 2022. The CTU team analysed two samples of REvil submitted to VirusTotal, one towards the end of March, and one at…

Security accreditation and certification body Crest has launched partnerships with cyber training and skills platform Hack The Box and security workforce optimisation specialist Immersive Labs. Both partnerships are designed to help Crest member professionals hone their defensive and offensive security skills, with Hack The Box (HTB) working on test labs tailored to individuals working towards…

Nationwide Building Society has said it is preventing 2000 additional online shopping fraud attempts, following the introduction of technology to comply with Strong Customer Authentication (SCA) regulations. The mutual society said two-thirds of its customers are happy to wait a little longer in exchange for the extra security. SCA rules mean that any online payments…

Three zero-days, including one that is being actively exploited and must be addressed immediately, are among more than 70 vulnerabilities fixed by Microsoft in its May 2022 Patch Tuesday drop. Tracked as CVE-2022-26925, the exploited zero-day is a Windows Local Security Authority (LSA) spoofing vulnerability impacting Windows 7 to 10, and Windows Server 2008 to…

What are the top 10 spyware threats? The top 10 spyware list describes the 10 common spyware threats behind famous spyware attacks and is frequently identified by Webroot’s Spy Audit, a free spyware scanner tool. What is spyware? Spyware is a term that refers to malicious software that is purposely designed to access a computer…

GCHQ director Jeremy Fleming opened the National Cyber Security Centre’s (NCSC’s) flagship annual CyberUK conference today, with a reminder that cyber security issues affect everybody in the UK. CyberUK was cancelled in 2020 and took place virtually last year, but returns for 2022 as an in-person event – although it is also now being livestreamed…

The National Cyber Security Centre (NCSC), alongside the European Union (EU) and US authorities, have formally attributed the 24 February 2022 cyber attack on the systems of Viasat, a satellite networking services provider, to Russian military intelligence, confirming previous speculation that this was the case. The cyber attack, which started approximately an hour prior to…

The UK’s National Cyber Security Centre (NCSC) has published a refreshed set of guidelines to support organisations in migrating their online services and sensitive data into the cloud, setting out the groundwork for what it describes as a “more adaptable approach” to assure technology. Dating back nearly 10 years, although it has been reviewed and…

The Welsh government, alongside the Cardiff Capital Region (CCR) investment body and a consortium of industry partners, is to spend a total of £9.5m on a cyber security innovation hub – to become operational towards the end of 2022 – which it is hoped will help the Welsh cyber sector become a global leader. The…