Microsoft Teams fixes funny Gifs cyber-attack flaw

A security problem in Microsoft Teams meant cyber-attacks could be initiated via funny Gif images, researchers have revealed.

Like many chat apps, Teams lets colleagues send each other whimsical animated Gif images.

But CyberArk researchers discovered a problem that meant viewing a Gif could let hackers compromise an account and steal data.

Schneier on Hacking Society

How the hacker mindset and skill set could play a role in improving and securing societal systems, according to renowned security technologist Bruce Schneier.

What if security experts could take a crack at fixing the huge and unwieldy US tax code, or ensuring that legislation gets written without inadvertent or deliberate loopholes?

Tips to avoid Zoom hacking when working from home

PEMBROKE PARK, Fla. – Zoombombing: It’s a term you probably didn’t know you had to worry about until recently.

But with social distancing recommendations forcing so many of us to work from home during the coronavirus pandemic, Zoom conference calls have become the latest target for hackers.

“With more Floridians than ever before working from home and holding virtual meetings, a new trend called Zoombombing is emerging,” Florida Attorney General Ashley Moody said in a news release Monday. “Zoombombing occurs when hackers hijack internet video conferences, like those offered by the fast-growing platform Zoom. These hackers often present inappropriate, offensive material or otherwise disrupt the conference.”

UK government issues 2020 Cyber Security Breaches Survey

Cyber-threats are on the rise, according to the UK government. A new report findsthat nearly half of businesses, at 46 percent, in the UK faced cybersecurity breaches or attacks in the last 12 months.

The 2020 Cyber Security Breaches Survey has released by the responsible UK government department, the Department for Digital, Culture, Media and Sport (DCMS).

The report finds that the intensity of the attacks has increased in 2020 compared with previous years. Among the 46 percent of businesses that identify breaches or attacks, more companies experiencing these issues at least once a week in 2020 (32 percent, vs. 22 percent, taking a 2017 benchmark).

The cybersecurity implications of working remotely

The global spread of the COVID-19 coronavirus has had a notable impact on workplaces worldwide, and many organizations are encouraging employees to work from home. What are the cybersecurity implications of this shift?

Having a sizable amount of employees suddenly working remotely can be a major change for organizations and presents numerous problems with regard to cybersecurity.

One issue involves a lack of authentication and authorization. Because people are not seeing each other face-to-face, there is an increased need for two-factor authentication, monitoring access controls and creating strong passwords. There’s also a risk of increased attacks like phishing and malware, especially since employees will now likely receive an unprecedented amount of emails and online requests.

Microsoft Warns Of 'Devastating' Cybersecurity Threat To Windows Users: Here's What You Need To Know

Microsoft's threat protection intelligence team has warned of a "significant and growing" cybersecurity threat that can deliver a devastating payload. The FBI has warned about how high impact a threat ransomware is, and now Microsoft is adding to the voices of vigilance. While ransomware threats such as the newly discovered strain of NetWalker that can inject malicious code right into the Windows 10 explorer executable process are bad enough, they are but the tip of a very worrying cyber-iceberg. The Microsoft threat protection intelligence team has described in comprehensive detail how one type of ransomware attack poses a significant and growing threat, particularly to business users, calling it one of the "most impactful trends in cyberattacks" that we face today. The good news is that despite being able to deploy what Microsoft refers to as devastating payloads, the attacks and the fallout that follows are preventable.

Cyber security experts: Hackers target children’s SS numbers

 For computer hackers looking to steal someone’s identity, there’s nothing better than taking the social security number of a child, say cyber security experts at two area universities.

Excela Health stopped 832 “violent intrusions” by hackers trying to gain access to the social security numbers of children in the last month, Excela Chief Executive John Sphon said recently.

Excela, which has an information systems security professional on its cyber team, said its intrusion software caught the hackers and its detection software reported the largest number originated in Vietnam.