London (UK): PhishMe Inc. has offered three predictions for the threats it believes UK organisations will battle in 2016:
Phishers will continue to divide and conquer
Phishing has been the number one attack vector for over five years and 2016 will be no different.
The cyberattacks against the Ukrainian electric power industry continue. Background information on this story can be found in our recent publications:
BlackEnergy trojan strikes again: Attacks Ukrainian electric power industry
BlackEnergy by the SSHBearDoor: attacks against Ukrainian news media and electric industry
BlackEnergy and the Ukrainian power outage: What we really know
Recently we discovered a new wave of these attacks, where a number of electricity distribution companies in Ukraine were targeted again following the power outages in December. What’s particularly interesting is that the malware that was used this time is not BlackEnergy, which poses further questions about the perpetrators behind the ongoing operation. The malware is based on a freely-available open-source backdoor – something no one would expect from an alleged state-sponsored malware operator.
Major updates and new features challenge crowd-sourcing start-ups for vulnerability reporting
VC-backed Bug Bounty startups lose their battle to non-profit Open Bug Bounty project?
Over 17,500 websites, including such industry giants as Microsoft, Amazon, LinkedIn, eBay, Apple and BBC fixed security vulnerabilities on their websites reported by XSSPosed researchers.
Launched in June 2014, XSSPosed is a non-profit website designed for security researchers to report and help patching vulnerable websites. Since July 2015, XSSPosed offers Open Bug Bounty coordinated vulnerability disclosure program for any website and to any security researcher.
London (UK): As the Self Assessment Tax Return deadline looms in the UK, PhishMe has warned of phishing messages, purporting to be from HM Revenue and Customs (HMRC) circulating. While the number of campaigns* circulating in 2015 has decreased against previous years, the messages themselves still pose a threat due to their sophisticated and devious nature. It's worth noting a recent deviation is, instead of spreading malware, the scammers are trying to directly spoof individuals into handing over their personal information.
To expose official corruption in Nigeria, re-orientate the psyche of Nigerians and usher in the Nigerian renaissance
Have you got news/articles for us? We welcome news stories and articles from security experts, intelligence analysts, industry players, security correspondents in the main stream media and our numerous readers across the globe.
Vigilance is the brain child of a group of veteran journalists and international scholars who have worked in the mainstream media and distinguished themselves nationally and internationally before veering into security practice.
We have 228 guests and no members online