Summary Note: This joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect against ransomware. Visit stopransomware.gov to see…
Month: August 2024
Exploits, Global Security News
#StopRansomware: RansomHub Ransomware
Summary Note: This joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect against ransomware. Visit stopransomware.gov to see…
Awareness, Global Security News, PCI DSS
PCI SSC Releases ROC Template for PCI DSS v4.0.1
The PCI Security Standards Council (PCI SSC) has released the PCI Data Security Standard (PCI DSS) Report on Compliance (ROC) Template for v4.0.1 to align with PCI DSS version 4.0.1, to address minor errors, and to reformat the template.
Awareness, Global Security News, PCI DSS
PCI SSC Releases ROC Template for PCI DSS v4.0.1
The PCI Security Standards Council (PCI SSC) has released the PCI Data Security Standard (PCI DSS) Report on Compliance (ROC) Template for v4.0.1 to align with PCI DSS version 4.0.1, to address minor errors, and to reformat the template.
Awareness, Global Security News, PCI DSS
PCI SSC Releases ROC Template for PCI DSS v4.0.1
The PCI Security Standards Council (PCI SSC) has released the PCI Data Security Standard (PCI DSS) Report on Compliance (ROC) Template for v4.0.1 to align with PCI DSS version 4.0.1, to address minor errors, and to reformat the template.
Community Meetings, Europe, Events, Global Security News, Participation
Sneak Peek: 2024 Europe Community Meeting Speakers
The excitement is building as we get closer to this year’s Europe Community Meeting! To add to the anticipation, we’re giving you a sneak peek of some of the amazing sessions that will be featured in Barcelona, 8-10 October. Don’t pass up the chance to collaborate and gain knowledge into the latest developments in payment…
Community Meetings, Europe, Events, Global Security News, Participation
Sneak Peek: 2024 Europe Community Meeting Speakers
The excitement is building as we get closer to this year’s Europe Community Meeting! To add to the anticipation, we’re giving you a sneak peek of some of the amazing sessions that will be featured in Barcelona, 8-10 October. Don’t pass up the chance to collaborate and gain knowledge into the latest developments in payment…
Community Meetings, Europe, Events, Global Security News, Participation
Sneak Peek: 2024 Europe Community Meeting Speakers
The excitement is building as we get closer to this year’s Europe Community Meeting! To add to the anticipation, we’re giving you a sneak peek of some of the amazing sessions that will be featured in Barcelona, 8-10 October. Don’t pass up the chance to collaborate and gain knowledge into the latest developments in payment…
AI, Cybersecurity, Data Breaches, Global Security News, Risk Management
American Radio Relay League Paid $1 Million Ransom
The American Radio Relay League (ARRL), a prominent national association for amateur radio enthusiasts, recently confirmed that it paid a staggering $1 million ransom to cybercriminals. ARRL Hit by Cyber Attack ARRL found itself at the mercy of a sophisticated ransomware attack. Upon realizing the severity of the attack, the ARRL was left with limited…
Data Security, Global Security News
The Complex Landscape of Data Privacy Laws: A Guide for Businesses
If you’re running a business, especially one that handles sensitive customer information, navigating the maze of data privacy laws can feel overwhelming. From federal regulations like GDPR (General Data Protection Regulation) to state-specific rules such as the CCPA (California Consumer Privacy Act), understanding and complying with these laws is crucial for your business. But don’t…
Data Security, Global Security News
Cybersecurity Risks of Rushing into Digital Transformation
Digital transformation is the buzzword of the decade. Businesses are racing to modernize their operations, adopt cloud technologies, and embrace automation. It’s an exciting time, no doubt, but in the rush to stay ahead, have you considered the cybersecurity risks that come with it? While digital transformation offers numerous benefits—efficiency, scalability, and improved customer experiences—rushing…
Exploits, Global Security News
Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations
Summary The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense Cyber Crime Center (DC3) are releasing this joint Cybersecurity Advisory (CSA) to warn network defenders that, as of August 2024, a group of Iran-based cyber actors continues to exploit U.S. and foreign organizations. This includes organizations across…
Community Meetings, Events, Global Security News, North America, Participation
Sneak Peek: 2024 North America Community Meeting Speakers
The excitement is building as we get closer to this year’s North America Community Meeting! To add to the anticipation, we’re giving you a sneak peek of some of the amazing sessions that will be featured in Boston, 10-12 September.
Community Meetings, Events, Global Security News, North America, Participation
Sneak Peek: 2024 North America Community Meeting Speakers
The excitement is building as we get closer to this year’s North America Community Meeting! To add to the anticipation, we’re giving you a sneak peek of some of the amazing sessions that will be featured in Boston, 10-12 September.
Community Meetings, Events, Global Security News, North America, Participation
Sneak Peek: 2024 North America Community Meeting Speakers
The excitement is building as we get closer to this year’s North America Community Meeting! To add to the anticipation, we’re giving you a sneak peek of some of the amazing sessions that will be featured in Boston, 10-12 September.
Awareness, Global Security News, interview, PCI DSS
Now is the Time for Organizations to Adopt the Future-Dated Requirements of PCI DSS v4.x
Merchants around the world use the Payment Card Industry Data Security Standard (PCI DSS) to safeguard payment card data before, during, and after a purchase is made. The standard is intended for all entities involved in payment card processing, including merchants, processors, acquirers, issuers, and service providers. As of 31 March 2024, the PCI Security…
Awareness, Global Security News, interview, PCI DSS
Now is the Time for Organizations to Adopt the Future-Dated Requirements of PCI DSS v4.x
Merchants around the world use the Payment Card Industry Data Security Standard (PCI DSS) to safeguard payment card data before, during, and after a purchase is made. The standard is intended for all entities involved in payment card processing, including merchants, processors, acquirers, issuers, and service providers. As of 31 March 2024, the PCI Security…
Awareness, Global Security News, interview, PCI DSS
Now is the Time for Organizations to Adopt the Future-Dated Requirements of PCI DSS v4.x
Merchants around the world use the Payment Card Industry Data Security Standard (PCI DSS) to safeguard payment card data before, during, and after a purchase is made. The standard is intended for all entities involved in payment card processing, including merchants, processors, acquirers, issuers, and service providers. As of 31 March 2024, the PCI Security…
Global Security News
Implementation Challenges in Privacy-Preserving Federated Learning
In this post, we talk with Dr. Xiaowei Huang and Dr. Yi Dong (University of Liverpool), Dr. Mat Weldon ( United Kingdom (UK) Office of National Statistics (ONS)), and Dr. Michael Fenton (Trūata) who were winners in the UK-US Privacy-Enhancing Technologies ( PETs) Prize Challenges. We discuss implementation challenges of privacy-preserving federated learning (PPFL) –…
Global Security News
Implementation Challenges in Privacy-Preserving Federated Learning
In this post, we talk with Dr. Xiaowei Huang and Dr. Yi Dong (University of Liverpool), Dr. Mat Weldon ( United Kingdom (UK) Office of National Statistics (ONS)), and Dr. Michael Fenton (Trūata) who were winners in the UK-US Privacy-Enhancing Technologies ( PETs) Prize Challenges. We discuss implementation challenges of privacy-preserving federated learning (PPFL) –…
Global Security News, Participation
Welcome to the Newest Associate Participating Organizations
We are pleased to welcome the newest organizations that have joined as Associate Participating Organizations of the PCI Security Standards Council (PCI SSC). These organizations play a crucial role in supporting the evolution of the PCI security standards and programs and promoting the implementation of PCI security standards worldwide to protect payment data. We…
Global Security News, Participation
Welcome to the Newest Associate Participating Organizations
We are pleased to welcome the newest organizations that have joined as Associate Participating Organizations of the PCI Security Standards Council (PCI SSC). These organizations play a crucial role in supporting the evolution of the PCI security standards and programs and promoting the implementation of PCI security standards worldwide to protect payment data. We…
Global Security News, Participation
Welcome to the Newest Associate Participating Organizations
We are pleased to welcome the newest organizations that have joined as Associate Participating Organizations of the PCI Security Standards Council (PCI SSC). These organizations play a crucial role in supporting the evolution of the PCI security standards and programs and promoting the implementation of PCI security standards worldwide to protect payment data. We…
Global Security News, Ransomware
7 Reasons Why It Is Not a Good Idea to Pay Ransom in a Ransomware Attack
Ransomware attacks are among the most prevalent and damaging cybersecurity threats businesses face today. And when your business is under ransomware attack, the temptation to pay the ransom might feel overwhelming—after all, you want to get your data back and resume operations as quickly as possible. But is paying the ransom really the best move?…
Global Security News
Everything You Want to Know About Advanced Persistent Threats (APTs)
Advanced Persistent Threats (APTs) are among the most dangerous and complex cyberattacks. APTs are not your run-of-the-mill cyberattacks—they’re sophisticated, targeted, and designed to remain undetected for extended periods. But what exactly are APTs, and how can you protect your business from them? What Are Advanced Persistent Threats (APTs)? An Advanced Persistent Threat (APT) is a…
Awareness, Community Meetings, Europe, Global Security News, interview
Coffee with the Council Podcast: Meet This Year’s Europe and Asia-Pacific Community Meeting Keynote Speaker, Dr Bruce McCabe
Welcome to our podcast series Coffee with the Council. I’m Alicia Malone, Senior Manager of Public Relations for the PCI Security Standards Council. Today, I am so excited to bring you a sneak peek interview with PCI SSC’s Europe and Asia-Pacific Community Meeting keynote speaker, Dr Bruce McCabe, Global Futurist. Bruce has explored emerging technologies…
Awareness, Community Meetings, Europe, Global Security News, interview
Coffee with the Council Podcast: Meet This Year’s Europe and Asia-Pacific Community Meeting Keynote Speaker, Dr Bruce McCabe
Welcome to our podcast series Coffee with the Council. I’m Alicia Malone, Senior Manager of Public Relations for the PCI Security Standards Council. Today, I am so excited to bring you a sneak peek interview with PCI SSC’s Europe and Asia-Pacific Community Meeting keynote speaker, Dr Bruce McCabe, Global Futurist. Bruce has explored emerging technologies…
Awareness, Community Meetings, Europe, Global Security News, interview
Coffee with the Council Podcast: Meet This Year’s Europe and Asia-Pacific Community Meeting Keynote Speaker, Dr Bruce McCabe
Welcome to our podcast series Coffee with the Council. I’m Alicia Malone, Senior Manager of Public Relations for the PCI Security Standards Council. Today, I am so excited to bring you a sneak peek interview with PCI SSC’s Europe and Asia-Pacific Community Meeting keynote speaker, Dr Bruce McCabe, Global Futurist. Bruce has explored emerging technologies…
Global Security News
Email Security Best Practices: A Guide for Your Business
Email is the lifeblood of business communication, but it’s also a prime target for cyber threats. If your email security isn’t airtight, you’re leaving the door wide open to cybercriminals who are more than eager to exploit any vulnerability. The good news? Protecting your email doesn’t have to be complicated. With the right practices in…
Global Security News
The Cost of Cybercrime: How Much Could It Impact Your Business?
The cost of cybercrime is more than just a line item in your budget—it’s a potential threat to your entire business. If you’re running a business, especially one that relies heavily on digital infrastructure, you need to be aware of just how damaging a cyberattack can be. And it’s not just the financial loss that…
Global Security News
Gotta cache ’em all: bending the rules of web cache exploitation
Through the years, we have seen many attacks exploiting web caches to hijack sensitive information or store malicious payloads. However, as CDNs became more popular, new discrepancies between propriet
Global Security News
Splitting the email atom: exploiting parsers to bypass access controls
Some websites parse email addresses to extract the domain and infer which organisation the owner belongs to. This pattern makes email-address parser discrepancies critical. Predicting which domain an
Global Security News
Listen to the whispers: web timing attacks that actually work
Websites are riddled with timing oracles eager to divulge their innermost secrets. It’s time we started listening to them. In this paper, I’ll unleash novel attack concepts to coax out server secrets
Exploits, Global Security News
How to Secure Banking Apps
Securing banking applications is crucial for banking institutions to protect financial data and maintain customer trust. Cybercriminals continuously evolve their tactics, making it essential for banks to stay ahead of potential threats. Here are some essential tips to boost the security of your banking applications. Understand the Threat Landscape Before diving into security measures, it’s…
Global Security News, Ransomware
Building a Ransomware Response Plan for Your Law Firm
Ransomware is a type of malicious software that encrypts your data, rendering it inaccessible until a ransom is paid. Law firms, with their treasure trove of confidential client information, are especially vulnerable to ransomware attacks. The consequences of an attack can be devastating, from financial losses to reputational damage. Here’s a step-by-step guide on how…
Global Security News, North America
Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
Executive Summary The Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team assessment (RTA) at the request of a critical infrastructure organization. During RTAs, CISA’s red team simulates real-world malicious cyber operations to assess an organization’s cybersecurity detection and response capabilities. In coordination with the assessed organization, CISA is releasing this Cybersecurity Advisory to…