Posts

Showing posts with the label dark web

Achieving PCI DSS Compliant Firewalls within a Small Business

Image
The most important and integral part of any data security begins with having firewalls installed in the environment. Not just that, installing firewalls is an essential requirement of the Payment Card Industry Data Security Standard (PCI DSS ). However, simply installing a firewall on the network perimeter will not make your organization PCI DSS compliant. PCI DSS draws out specific requirements pertinent to firewalls under requirement 1 and its sub-requirements on how firewalls should be installed, updated, maintained along with other firewall rules. Elaborating more on this, we have explained in this article basic PCI DSS firewall requirements, and the need for small businesses to install firewalls. But before getting into the details of it, let us first understand the meaning of a PCI DSS compliant firewall. What is a PCI DSS Compliant Firewall? Firewalls are used to segment or isolate networks and are an essential component to   limit cyber threats and protect internal networks...

Cyber Security Roundup for February 2021

Image
A roundup of UK focused Cyber and Information Security News, Blog Posts, Reports and general Threat Intelligence from the previous calendar month, January 2021. Throughout January further details about the scale and sophistication of SolarWinds suspected nation-state hack came to light. A growing number of cybersecurity vendors like CrowdStrike, Fidelis, FireEye, Malwarebytes, Palo Alto Networks, Qualys and Mimecast all confirming as being targeted in the supply-chain espionage attack. The  finger of suspicion is pointing directly at Russia, with the Russian backed hacking group APT29 'Fancy Bear' cited as the culprits by many security researchers and intelligence analysts. US Secretary of State Mike Pompeo and Attorney General Bill Barr both publically stated they believe Moscow are behind the attack, as did the chairs of the Senate and House of Representatives' intelligence committees.  US government investigators and Microsoft have uncovered additional evidence, con...

Book Review: Crime Dot Com, From Viruses to Vote Rigging, How Hacking Went Global

Image
I had the great delight of reading Geoff White’s new book, “ Crime Dot Com: From Viruses to Vote Rigging, How Hacking Went Global ”, I thoroughly recommend it. The book is superbly researched and written, the author’s storytelling investigative journalist style not only lifts the lid on the murky underground world of cybercrime but shines a light on the ingenuity, persistence and ever-increasing global scale of sophisticated cybercriminal enterprises. Crime Dot Com: From Viruses to Vote Rigging, How Hacking Went Global In Crime Dot Com Geoff takes the reader on a global historic tour of the shadowy cybercriminal underworld, from the humble beginnings with a rare interview with the elusive creator of the ‘Love Bug’ email worm, which caused havoc and panic back in 2000, right up to the modern-day alarming phenomenal of elections hacking by nation-state actors. The book tells the tales of the most notorious hacks in recent history, explaining how they were successfully planned a...

Twitter Hack & Scam

Image
What Happened? Twitter confirmed 130 celebrity Twitter accounts were targeted in the cyberattack  on Wednesday 15th July, with 45 successfully compromised. The hacked Twitter accounts included high profile individuals such as  Barack Obama, Elon Musk, Kanye West, Bill Gates, Jeff Bezos, Warren Buffett, Kim Kardashian, and Joe Biden. Their accounts were used to send a tweet to scam Bitcoin out of their millions of followers. Scam Social Engineering Tweet sent from Bill Gates' Twitter Account Twitter quickly reacted to the hack by taking an unprecedented step of temporarily preventing all verified users from tweeting, including yours truly;  I was trying to warn people about the attack but my tweets were repeatedly prevented from posting. Before the scam tweets were taken down m ore than £80,000 ($100,000) was sent to the scam Tweet's advertised Bitcoin address. T he FBI is investigating the incident. How the Twitter Accounts were Compromised Twitter said ha...

How Much is Your Data Worth on the Dark Web?

You may not know much about the dark web, but it may know things about you. What is the Dark Web? The dark web is a part of the internet that is not visible to search engines. What makes the dark web, dark? it allows users to anonymise their identity by hiding their IP addresses. This makes those using the dark web nearly impossible to identify. Only 4% of the internet is available to the general public, which means a vast 96% of the internet is made up of the deep web. It’s important to note here, that the dark web is just a small section of the internet but it’s a powerful small sector. How much are your bank details worth? The dark web is full of stolen personal bank credentials. It’s common to see MasterCard, Visa, and American Express credentials on the dark web from a variety of different countries. Credit card data in the US, UK, Canada and Australia increased in price anywhere from 33% to 83% in the time from 2015 to 2018. The average price for a UK Visa or Mastercard ...

Cyber Security Roundup for April 2019

Image
The UK government controversially gave a green light to Huawei get involved with the building of the UK's 5G networks , although the Chinese tech giant role will be limited to non-sensitive areas of the network, such as providing antennas. This decision made by Theresa May came days after US intelligence announced Huawei was Chinese state funded , and amidst reports historical backdoors in Huawei products, stoking up the Huawei political and security row even further this month, and has resulted in the UK Defence Secretary, Gavin Williamson, being sacked.  Defence Secretary Gavin Williamson sacked over Huawei leak Daily Telegraph publishes details of a meeting about using the Chinese telecoms firm to help build the UK's 5G network Huawei row: Inquiry to be held into National Security Council leak Is Huawei a Threat to UK National Security? What's the greater risk to UK 5G, Huawei backdoors or DDoS? Backdoors found in Huawei-supplied Vodafone e...