A report from PwC found that many companies across the UK are still unprepared for GDPR measures, despite fines for non-compliance doubling in a year. The post Fines for poor data security double in UK appeared first on WeLiveSecurity

Early in 2017, Kevin Townsend invited David Harley and others to comment on vendor hype. Here he expands on his original commentary. The post Testing, marketing, and rummaging in the FUD banks appeared first on WeLiveSecurity

Regardless of how prominent and effective ransomware appears to be, it is not the most dangerous form of malware. The post Botnets overshadowed by ransomware (in media) appeared first on WeLiveSecurity

Welcome to the Ransomware of Things, where all connected devices are at risk of being compromised, locked and held to ransom by cybercriminals. The post Trends 2017: Ransomware of Things appeared first on WeLiveSecurity

The Turla espionage group is still using watering hole techniques to redirect potentially interesting victims to their C&C infrastructure. The post Turla’s watering hole campaign: An updated Firefox extension abusing Instagram appeared first on WeLiveSecurity

Fewer vulnerabilities are being reported, but are we any safer? In this short video, we take a look at why it’s still a problem. The post Trends 2017: Fewer vulnerabilities are being reported, but are we any safer? appeared first on WeLiveSecurity

The OneLogin breach once again highlights the importance of how companies protect their encrypted data. The post OneLogin data breach may have compromised encrypted information appeared first on WeLiveSecurity

Just weeks after one of the largest global ransomware attacks in history, Infosecurity Europe returns for its 22nd installment. The post Infosecurity Europe: 10 interesting talking points appeared first on WeLiveSecurity

ESET has released a decryptor for AESNI ransomware variants, including XData. Victims who still have encrypted files can now download it from ESET’s utilities page. The post ESET releases decryptor for AESNI ransomware variants, including XData appeared first on WeLiveSecurity

Keen to understand what a virtual private network is? You’ve come to the right place. The post What is VPN and how does it work? appeared first on WeLiveSecurity

When it comes to cybersecurity, what type of employee is most likely to cause a data breach? And how can companies protect themselves? The post 3 types of employees that can cause a data breach appeared first on WeLiveSecurity

The ICO says businesses should stop focussing on the consequences of non-compliance and instead be motivated by the advantages of getting GDPR right. The post ICO urges businesses to focus on becoming GDPR compliant appeared first on WeLiveSecurity

Stephen Cobb, a senior security researcher at ESET, talks about one of the biggest cyberattacks of 2017 – WannaCryptor, aka WannaCry with radio and TV personality Marc Saltzman. The post WannaCryptor, aka WannaCry interview with Stephen Cobb and Marc Saltzman appeared first on WeLiveSecurity

A week after the global outbreak of WannaCryptor, also known as WannaCry, another ransomware, known as XData, has been making rounds. The post XData ransomware making rounds amid global WannaCryptor scare appeared first on WeLiveSecurity

Enforcement of GDPR, the General Data Protection Regulation, begins in May of 2018, imposing data privacy and security requirements on many organizations in the US and other countries. Are you impacted? The post Is the world ready for GDPR? Privacy and cybersecurity impacts are far-reaching appeared first on WeLiveSecurity

Zomato has confirmed that it has been communicating with the hacker responsible for stealing the data of around 17 million of its customers. The post Zomato working with ‘ethical hacker’ to improve security appeared first on WeLiveSecurity

ESET have prepared a new Crysis decrypting tool. Victims who still have their encrypted files can now download the decryptor from its utilities page. The post Keys for Crysis released, as decryption efforts of WannaCryptor files continue appeared first on WeLiveSecurity

Cybersecurity is now a worldwide problem. But far too many citizens, businesses and governments are still making the same old, basic errors. The post Ignoring software updates? You’re making one of five basic security mistakes appeared first on WeLiveSecurity

Technology evangelist Marc Saltzman asks: Are you protected against WannaCryptor, aka WannaCry, and other forms of ransomware? The post Are you protected against WannaCryptor and other forms of ransomware? appeared first on WeLiveSecurity

Are governments and financial regulators to blame for WannaCryptor, aka WannaCry, asks Tony Anscombe in this insightful feature. The post WannaCryptor: Are governments and financial regulators to blame? appeared first on WeLiveSecurity

Cybersecurity genius Reuben Paul demonstrates that connected toys can be used for malicious purposes at the World Forum in The Hague. The post Reuben Paul still at it with connected toys hack appeared first on WeLiveSecurity

The massive campaign that spread the WannaCry ransomware wasn’t the only large-scale infection misusing the EternalBlue and DoublePulsar exploits. The post WannaCryptor wasn’t the first to use EternalBlue: Miners misused it days after Shadow Brokers leak appeared first on WeLiveSecurity

Cybercriminals are reportedly demanding a ransom to prevent them from releasing Pirates of the Caribbean: Dead Men Tell No Tales. The post New Pirates of the Caribbean film ‘stolen by cybercriminals’ appeared first on WeLiveSecurity

In this post, ESET’s Cassius Puodzius addresses what we can learn from WannaCryptor ransomware attack, and what we can expect. The post Check-EternalBlue: Is your PC patched against the WannaCryptor worm vulnerability? appeared first on WeLiveSecurity

Without regular security updates, your endpoint will be left standing alone against an entire army of cybercriminals who see you as easy prey. The post Security updates belong in the limelight, not in the dustbin of history appeared first on WeLiveSecurity

In recent months, we have started to receive various reports about suspicious and malicious registry keys that had been created on users’ equipment. ESET’s Diego Perez explores. The post Malicious registry keys: Reflective injection appeared first on WeLiveSecurity

Ransomware called WannaCryptor spread rapidly around the world today, encrypting files in as many as 100 countries by using the leaked NSA eternalblue SMB exploit. The post Huge ransomware outbreak disrupts IT systems worldwide, WannaCryptor to blame appeared first on WeLiveSecurity

ESET’s Lucas Paus looks at a new WhatsApp scam that is making the rounds. The fraudsters behind it claim that users can get Netflix free for a year. The post New WhatsApp scam: Netflix free for a year appeared first on WeLiveSecurity

This short feature aims to draw attention to some of the key things you should be doing to bolster your tablet security to keep cybercriminals at bay. The post Tablet security: Is it as good as your smartphone? appeared first on WeLiveSecurity

Law firms, PR agencies, newswires, accountants… all manner of firms need to ensure that they are working hard to secure the information entrusted to them by their corporate clients, and keep it out of unauthorised hands. The post Hackers who stole information from law firms and made millions by insider trading, fined $9 million appeared […]

ESET’s Tony Anscombe takes a closer look at the anti-malware industry. The post Anti-trust, EU complaints and the anti-malware industry appeared first on WeLiveSecurity

The Federal Communications Commission in the US has confirmed that it experienced multiple distributed denial-of-service attacks (DDoS) over the weekend. The post FCC confirms DDoS attacks appeared first on WeLiveSecurity

An increasing number of holidaymakers are finding themselves targeted by online fraudsters, according to a new study. The post Holidaymakers warned against increased threat from online fraudsters appeared first on WeLiveSecurity

A quarter of European companies admit they were not aware of GDPR, with more than half unsure of the impact it will have, according to a new survey. The post IDC: 1 in 4 companies have no clue GDPR is coming their way appeared first on WeLiveSecurity

Sednit is back – this time with two more zero-day exploits embedded in a phishing email titled Trump’s_Attack_on_Syria_English.docx. The post Sednit adds two zero-day exploits using ‘Trump’s attack on Syria’ as a decoy appeared first on WeLiveSecurity

ESET’s Stephen Cobb examines how close we are to the kind of jackware technology shown in the latest Fast and Furious film franchise, Fate of the Furious. The post Jackware hits the big screen in #Fast8: Fate of the Furious appeared first on WeLiveSecurity

Poor business decisions can be very costly, especially in cybersecurity, where so-called false positives can have very damaging consequences. The post False positives can be more costly than a malware infection appeared first on WeLiveSecurity

There are big changes happening to the infosec landscape:, says ESET’s Michael Aguilar. It’s therefore time to take note and take action. The post Big changes in the infosec landscape: Time to take note and take action appeared first on WeLiveSecurity

Criminal hackers have struck again and stolen the personal data of 26,000 Debenhams Flowers customers. Here’s what you need to know and do. The post Cybercriminals are saying it with flowers from Debenhams appeared first on WeLiveSecurity

If surveillance, cybersecurity, and privacy are things you think about a lot, you should find The Circle interesting viewing. The post Surveillance, cybersecurity, and the future of privacy in The Circle appeared first on WeLiveSecurity

Gannett Co, which owns a host of media titles across the US, has reportedly suffered a data breach following a phishing attack. The post Gannett Co data breach: 18,000 employees reportedly affected appeared first on WeLiveSecurity

We look at key trends for 2017 within this sector, from password security to the need for security education at all institutions: schools, businesses, governments. The post Security education and social responsibility appeared first on WeLiveSecurity

The modern computer password was introduced to computer science and the wider world in 1960 by Fernando Corbató. We look at its history and impact. The post A short history of the computer password appeared first on WeLiveSecurity

Fingerprint security is growing in prominence, but is the technology behind it really as secure as we think it is? In this feature, we tackle three myths. The post Fingerprint security: Three myths busted appeared first on WeLiveSecurity

Recently, many people received a phishing email from a mailinator.com address that was attached to a malicious Google doc. Beware. The post Beware Google Docs phishing attack appeared first on WeLiveSecurity

Businesses that fall victim to a DDoS attack could lose, on average, as much as $2.5 million in revenue, new research has suggested. The post A DDoS attack could cost businesses as much as $2.5 million appeared first on WeLiveSecurity

Peter Stancik discusses the new Digital Identity Guidelines drafted by NIST, which offers an update on password security. The post No more pointless password requirements appeared first on WeLiveSecurity

Sabrina Pagnotta takes a closer look at what motivates some young people to become cybercriminals. You may be surprised to find out some of the reasons. The post What motivates some young people to become cybercriminals? appeared first on WeLiveSecurity

Cybersecurity should be a priority for educational institutions, says ESET’s Lysa Myers. It’s important to protect students and staff from cybercriminals. The post School’s almost out … Don’t let cybercriminals in appeared first on WeLiveSecurity

A single protective technology means a single point of failure. A company aiming to build reliable and strong cybersecurity defenses should opt for a solution offering multiple complementary technologies. The post A single protective technology means a single point of failure appeared first on WeLiveSecurity

Recently, here at our research lab, we have seen an increase in the number of JS/Chromex.Submelius threats detected, says Camilo Gutiérrez Amaya. The post Fake Chrome extensions inject code into web pages appeared first on WeLiveSecurity

World Day for Safety and Health at Work takes place on April 28th 2017. You should use this as an opportunity to improve your cybersecurity posture. The post Is cybersecurity now as important as health and safety? appeared first on WeLiveSecurity

Two men are facing a prison sentence after admitting their part in the recent TalkTalk data breach. The post Young duo sentenced over role in TalkTalk data breach appeared first on WeLiveSecurity

Consumers have placed a high level of trust in healthcare organizations to keep their data safe, but companies cannot afford to take this for granted. The post Healthcare providers ‘cannot be complacent over data security’ appeared first on WeLiveSecurity

David Harley discusses a scam that has been making the rounds where, it’s reported, cold-calling scammers ask the victim ‘Can you hear me?’. The post Scam calls: Can you hear me, mother? appeared first on WeLiveSecurity

ESET’s Stephen Cobb looks at whether or not cybercrime and other cybersecurity issues will undermine the digital economy. The post Will cybercrime and other cybersecurity issues undermine the digital economy? appeared first on WeLiveSecurity

The usage of the BitTorrent protocol and Lua modules separates Linux/Shishiga from other types of malware, according to analysis by ESET. The post Linux Shishiga malware using LUA scripts appeared first on WeLiveSecurity

Machine learning alone is not enough to protect endpoints and predicting an attacker’s next moves. Other security solutions and human input are needed. The post Machine learning and math can’t trump smart attackers appeared first on WeLiveSecurity

Russian hacker receives the longest sentence ever handed down for hacking-related charges in the United States. The post US court hits Russian PoS hacker with record 27 year jail sentence appeared first on WeLiveSecurity

A new report suggests young cybercriminals are often motivated by the possibility of notoriety, rather than financial gain. The post Young cybercriminals ‘more motivated by peer respect than financial gain’ appeared first on WeLiveSecurity

Nearly half of all UK businesses have experienced a cybersecurity incident over the last 12 months, according to a new government paper. The post Nearly half of UK businesses experienced a cybersecurity incident in the last 12 months appeared first on WeLiveSecurity

The InterContinental Hotels Group says the implementation of its SPS system helped to minimize the damage caused by a recent data breach. The post InterContinental Hotels Group reveals ‘how it minimized recent malware attack’ appeared first on WeLiveSecurity

ESET researchers have discovered another banking trojan on Google Play targeting Android users – this time disguised as a Flashlight widget. The post Turn the light on and give me your passwords! appeared first on WeLiveSecurity

Machine learning (ML) is routinely cited by post-truth vendors as their biggest selling point, their main advantage. But ML – if it’s done properly – comes with problems and limitations. The post When PR and reality collide: The truth about machine learning in cybersecurity appeared first on WeLiveSecurity

Only 11% of positions in the global cybersecurity workforce are occupied by women. We take a look at why and what is being done to change this. The post Women in cybersecurity: Slowly but surely, change is coming appeared first on WeLiveSecurity

GDPR is coming into play in May 2018, but a lot of companies remain unprepared, which could have implications on how they process data. The post 10 ways to prepare your organization for GDPR appeared first on WeLiveSecurity

ESET researchers have discovered and reported scammers stealing PayPal and Paxful credentials disguised as a tool for YouTube monetization, and a bitcoin trading marketplace. The post Real or virtual currency? Scammers accept both appeared first on WeLiveSecurity

The Internet Society says that current perceptions of data encryption are misguided and need to change for the sake of the digital economy. The post Internet Society: Encryption is key to growing world economy appeared first on WeLiveSecurity

There is no magic in machine learning. It’s a field of computer science that gives computers the ability to find patterns in huge amounts of data. The post Don’t buy the elixir of youth: Machine learning is not magic appeared first on WeLiveSecurity

Welcome to the beginning of a new series of short articles focused on the currents state of AI, all the ins and outs of machine learning, and how it affects cybersecurity. The post Fighting post-truth with reality in cybersecurity appeared first on WeLiveSecurity

A smartphone’s internal sensors may provide cybercriminals with enough information to be able to guess a user PINs and passwords, according to new research by Newcastle University in the UK. The post Smartphone sensors ‘can reveal PINs and passwords’ appeared first on WeLiveSecurity

David Harley and Josep Albors on the evolution of tech support scams and why the current high incidence of reports in Spain are significant. The post Spanish Harmada: More on tech support scams appeared first on WeLiveSecurity

With the recent big screen adaptation of Ghost in the Shell, we thought it would be a good idea to review some of the cybersecurity themes it explores. The post Ghost in the Shell: Fantasy meets reality with cybersecurity themes appeared first on WeLiveSecurity

ISPs have started to monetize customer information quietly while selling them bandwidth. The temptation is strong, as that kind of aggregate data has real value on the secondary market, but what about the customers’ privacy? The post ISP privacy – how much should it cost? appeared first on WeLiveSecurity

ESET’s Lysa Myers discusses the challenges facing healthcare technology, medical and fitness devices and highlights the need to secure medical devices The post Healthcare challenges: Ransomware and the Internet of Things are the tip of the iceberg appeared first on WeLiveSecurity

Three years ago, Microsoft ended its extended support for Windows XP. Today, almost 8% of desktop users worldwide are still run the operating system. The post It’s time to finally say goodbye to Windows XP. And Vista. Again appeared first on WeLiveSecurity

This article sheds light on the current ecosystem of the Sathurbot backdoor trojan, in particular exposing its use of torrents as a delivery medium and its distributed brute-forcing of weak WordPress administrator accounts. The post Sathurbot: Distributed WordPress password attack appeared first on WeLiveSecurity

Tax identity fraud is a multibillion dollar industry for criminals. ESET’s Lysa Myers explores new measures and offers some top tips on how to tackle this menace. The post Tax identity fraud: Bringing the fight to this menace appeared first on WeLiveSecurity

Millennials and the demands of upcoming GDPR regulations could result in a greater cybersecurity risk for many businesses, new research has suggested. The post Millennials and GDPR ‘pose increased cybersecurity risk to companies’ appeared first on WeLiveSecurity

The IAAF has become the latest organization to fall victim to the cybercriminal gang Sednit. The post IAAF: ‘Fancy Bear’ Sednit behind cyberattack appeared first on WeLiveSecurity

ESET researchers have discovered a malicious app at Google Play tricking its victims into paying €18 ($19) for Adobe Flash Player. The post Don’t pay for what is for free: Malicious Adobe Flash Player app found on Google Play appeared first on WeLiveSecurity

ESET’s Miguel Ángel Mendoza discusses the right to privacy in the digital era, which is an increasingly important issue. The post The right to privacy in the digital era appeared first on WeLiveSecurity

In the digital age, data backup is essential. Find out how you can protect yourself ahead of World Backup Day, which falls on April Fool’s Day. The post Backup your (digital) life appeared first on WeLiveSecurity

Be on your guard if you’re a developer who uses GitHub – someone could be trying to infect your computer with malware. The post Malware campaign targets open source developers on GitHub appeared first on WeLiveSecurity

The Turla espionage group has been targeting various institutions for many years. Recently, ESET found several new versions of Carbon. The post Carbon Paper: Peering into Turla’s second stage backdoor appeared first on WeLiveSecurity

Over a billion data records were compromised globally in 2016, according to Gemalto’s latest Breach Level Index. The post Close to 1.4 billion data records compromised in 2016 appeared first on WeLiveSecurity

In this post, Matías Porolli looks at how to configure an environment with WinDbg and virtual machines in order to debug drivers or code running in Windows kernel space. The post How to configure WinDbg for kernel debugging appeared first on WeLiveSecurity

WikiLeaks’s revelations about security vulnerabilities in Apple products appear to be a damp squib. The post Apple underwhelmed by latest CIA exploits revealed by WikiLeaks appeared first on WeLiveSecurity

Mac OS X is still secure 16 years after its creation, but increasingly being targeted by cybercriminals. No operating system is 100% malware-proof. The post 16 years of Mac OS X: Secure but not invincible to malware appeared first on WeLiveSecurity

The GDPR is the biggest change in data protection laws for 20 years, and comes into effect on May 25th, 2018. We answer some key questions. The post GDPR: A simple explainer appeared first on WeLiveSecurity

The so-called Turkish Crime Family is demanding that Apple pays it a ransom, otherwise it will delete millions of credentials it says it possesses. The post When bad bugs bite: Apple iCloud accounts ‘held hostage’ appeared first on WeLiveSecurity

ESET researchers have discovered 87 malicious apps on Google Play disguised as mods for Minecraft. The post If you download Minecraft mods from Google Play, read on … appeared first on WeLiveSecurity