Cyber actors target K-12 distance learning education to cause disruptions and steal data | 2020-12-11

riskacademy — Fri, 11 Dec 2020 05:40:19 +0000

Cyber actors target K-12 distance learning education to cause disruptions and steal data | 2020-12-11 | Security Magazine

Top 9 Cybersecurity Certifications (2020)

riskacademy — Thu, 10 Dec 2020 19:38:27 +0000

Cybersecurity is becoming increasingly crucial for businesses in every sector, and it is especially vital for small- to medium-sized organizations. Cyberattacks continue to become a major problem in the United States and the rest of the globe, often times resulting in customer information being stolen.

Because of this increased risk, cybersecurity certifications are an important tool to prepare against the attacks. The high demand for cybersecurity skills means a top cybersecurity certification will boost one’s resumé.

With so many cybersecurity certifications to choose from, let’s take a look at the top ones on the market:

The Certified Ethical Hacker (CEH) course was developed in order to get you thinking like a hacker, which is crucial to stop one.

The class covers various topics and tools such as hacking technologies that are used against cloud computing technology, mobile platforms and operating systems. It also covers the latest malware and viruses, as well as information security laws and standards.

One of the fundamental aspects of the course is real-time scenarios, where you are exposed to various ways in which hackers breach networks and steal information. You will…

Trike Threat Modeling as a Risk-Management Tool

riskacademy — Thu, 10 Dec 2020 14:36:57 +0000

With everything moving online, it has become necessary for organizations to stay up to date on the latest cybersecurity threats to their organization. A cybersecurity threat is any malicious activity whose intent is to damage or disrupt digital systems. Common cyber threats include computer viruses, data breaches, and Denial of Service attacks. This is where threat modeling, an important component of the Cyber Threat Intelligence program, comes into play. Threat modeling is a risk analysis method where potential threats are identified, enumerated, and countermeasures developed. The primary purpose of threat modeling is to provide a systematic analysis of what needs to be included in the policies formed to mitigate the threat.

Now that you realize the need for it, how does one go about threat modeling? Currently, there exist numerous threat modeling methodologies, each with its pros and cons. These can be combined in order to provide a more complete overlook of the entire system. One of the major keys to an effective risk management policy is the identification of risks relative to business goals and assets.

Why Trike?

Trike is a unified methodology for carrying out security…

COVID, cyber attacks, data fraud top threats for Indian corporates: Study

riskacademy — Wed, 09 Dec 2020 13:31:32 +0000

New Delhi, Dec 9 (PTI) The public health crisis due to the COVID-19 pandemic has emerged as the top threat for Indian corporates, while cyber attacks and data frauds loom equally large, according to a study.

The report, titled ”Excellence in Risk Management India 2020, Spotlight on Resilience: Risk Management During COVID-19”, has been published by global insurance broker Marsh and risk management society RIMS.

While there is great optimism about the ability of organisations to rebound and address future pandemic-related challenges, cyber attacks and data fraud continue to be paramount concerns for risk professionals in India, as per the survey.

Around 63 per cent of the 231 survey respondents — which included C-suite executives and senior risk professionals — identified the continued fallout of COVID-19 among the top three risks facing their organisations.

Cyber attacks (56 per cent), data fraud or theft (36 per cent), failure of critical infrastructure (33 per cent), fiscal crises (31 per cent) and extreme weather events (25 per cent) were highlighted among the other top risks for Indian businesses.

The majority of survey respondents (85 per cent) said the pandemic…

Pandemic, cyber attacks and data fraud remain top risk concerns for India – Asia Insurance Review

riskacademy — Wed, 09 Dec 2020 03:29:25 +0000

Pandemic, cyber attacks and data fraud remain top risk concerns for India Asia Insurance Review

Malwarebytes expands security protection suite for remote workers

riskacademy — Tue, 08 Dec 2020 22:28:03 +0000

Malwarebytes has announced the expansion of its protection suite and industry partnerships to incorporate more features to help protect remote workers.

Innovative additions including Malwarebytes Brute Force Protection and Malwarebytes’ powerful scan and detection engine helped the company to secure the CISO Choice Award for Endpoint Security for the company’s Endpoint Detection and Response product this year.

The company has also announced a partnership with cyber insurance provider, Coalition, to offer a combined solution of best-in-class endpoint security and cyber insurance to protect organisations from cyberthreats.

By detecting and blocking malicious login attempts, Malwarebytes Brute Force Protection stops intrusion attacks targeting Remote Desktop Protocol (RDP) on Windows workstations and servers. Managed through the Malwarebytes Nebula cloud platform, this new feature is integrated into Malwarebytes Endpoint Protection (EP) and Endpoint Detection and Response (EDR) products and provides easy-to-use configuration allowing security teams to get up and running in minutes.

“Brute force attacks are on the rise due to increases in Remote Desktop Protocol usage…

Cyber Risk Is New Threat To Financial Stability – Analysis

riskacademy — Tue, 08 Dec 2020 02:24:33 +0000

Many of us take for granted the ability to withdraw money from our bank account, wire it to family in another country, and pay bills online.Amid the global pandemic, we’ve seen how much digital connection matters to our everyday life. But what if a cyberattack takes the bank down and a remittance doesn’t go through?

As we become increasingly reliant on digital financial services, the number of cyberattacks has tripled over the last decade, and financial services continue to be the most targeted industry. Cybersecurity has clearly become a threat to financial stability.

Given strong financial and technological interconnections, a successful attack on a major financial institution, or on a core system or service used by many, could quickly spread through the entire financial system causing widespread disruption and loss of confidence. Transactions could fail as liquidity is trapped, household and companies could lose access to deposits and payments. Under extreme scenarios, investors and depositors may demand their funds or try to cancel their accounts or other services and products they regularly use.

Hacking tools are now cheaper, simpler and more powerful, allowing…

Key OT Cybersecurity Challenges: Availability, Integrity and Confidentiality

riskacademy — Mon, 07 Dec 2020 11:22:06 +0000

Organisations are still underestimating the risks created by insufficiently secured operational technology (OT).

One current example comes from Germany. According to a report by heise.de, external security testers consider it “likely” that a successful serious cyberattack against the publicly owned water company Berliner Wasserbetriebe could lead to a complete failure of the German capital’s waste water management.

The good news, at least for Germany, is that a combination of engineering standards and legal requirements often prevents many worst-case scenarios from happening. One such regulation requires that utility companies must be able to control their grids manually, if necessary. This is not the case in all European countries. If the legally required basic IT protections are in place, and two-factor authentication and other best practices are used, many potentially damaging incidents can be prevented or at least contained. Germany has a number of guidelines and standards that aim to minimise cybersecurity risks, including a law on basic IT security, ISO 27001, IEC62443 standards and a compendium published by the BSI, Germany’s equivalent to the UK’s National…

Computer security – РИСК-АКАДЕМИЯ – АНО ДПО ИСАР

whoswholegal – Features – Law firms as prime targets for hackers: 7 steps to reducing cyber risks

Cybersecurity Leadership: Fighting Back Against Fraud

Cyber actors target K-12 distance learning education to cause disruptions and steal data | 2020-12-11

Top 9 Cybersecurity Certifications (2020)

Trike Threat Modeling as a Risk-Management Tool

COVID, cyber attacks, data fraud top threats for Indian corporates: Study

Pandemic, cyber attacks and data fraud remain top risk concerns for India – Asia Insurance Review

Malwarebytes expands security protection suite for remote workers

Cyber Risk Is New Threat To Financial Stability – Analysis

Key OT Cybersecurity Challenges: Availability, Integrity and Confidentiality