Cybercrime & Hacking

Companies that choose to outsource their IT operations should be careful. Suspected Chinese hackers have been hitting businesses by breaching their third-party IT service providers. 

Major IT suppliers that specialize in cloud storage, help desk, and application management have become a top target for the hacking group known as APT10, security providers BAE Systems and PwC said in a joint report.

That’s because these suppliers often have direct access to their client’s networks. APT10 has been found stealing intellectual property as part of a global cyberespionage campaign that ramped up last year, PwC said on Monday.

To read this article in full or to leave a comment, please click here

The notorious hackers behind a string of banking heists have left behind a clue that supports a long-suspected link to North Korea, according to security researchers.

The so-called Lazarus Group has been eyed as a possible culprit behind the heists, which included last February’s $81 million theft from Bangladesh’s central bank through the SWIFT transaction software.

However, hackers working for the group recently made a mistake: They failed to wipe the logs from a server the group had hacked in Europe, security firm Kaspersky Lab said on Monday.

To read this article in full or to leave a comment, please click here

Is there really a link between autism and cybercrime? A project launched today intends to find out.

When President Donald Trump proclaimed April 2 to be World Autism Awareness Day – actually it was the ninth annual such day – he cited CDC estimations that “Autism spectrum disorders affect an estimated one out of every 68 children in America.”

It seems Hollywood is trying to show how common autism is; Billy, the blue ranger, in Power Rangers, and Sesame Street’s Muppet Julia are recent characters with autism spectrum disorder which are not portrayed as Rain Man-like savants.

To read this article in full or to leave a comment, please click here

With all of the focus in the business world recently related to hackers, we have tended to overlook a group of potential bad actors who have already penetrated our perimeter security, and have access to our facilities — our employees and contractors. While our security teams usually monitor firewall and intrusion prevention logs, the threat from insiders is, in many cases, completely ignored. 

While some insiders are intent on stealing data or damaging systems for profit or some other motive, many more expose their employers to harm just by making mistakes. Whether intent exists or not, the damage is just as bad. 

To read this article in full or to leave a comment, please click here