NIST Plans Cybersecurity Framework Update

NIST plans next year to clarify certain provisions in its cybersecurity framework. "Just to be clear, we're not headed toward a version 2.0 right now," Program Manager Matt Barrett explains in an... Read more »

Takeaways From Mumbai Breach, Fraud Summit

Need for Collaboration & Information Sharing, Key Messages at ISMG Event
Collaboration, information sharing and a need to keep security discussions real and grounded are just some of the themes that were reinforced... Read more »

University of Calgary Pays Ransom

Canadian School Shells Out $15,700 to Ransomware AttackersYet another organization has acknowledged it opted to pay cyberattackers after its systems were infected with ransomware, the file-encrypting malware that has become one of... Read more »

Zbot: Cybercrime’s New Super Infrastructure?

Research Report Says Botnet Located Mainly in Ukraine and RussiaResearchers at RiskAnalytics have watched a botnet of compromised computers in the Ukraine and Russia become a growing hive of criminal activity, playing... Read more »

32.8 Million Twitter Credentials May Have Been Leaked

Breach Notification Site LeakedSource Claims Users Were Targeted by MalwareMore than 32.8 million Twitter credentials have been compromised and are being offered for sale on the dark web, claims LeakedSource, a subscription-based... Read more »

Dropbox Confident Amidst Breaches

Company Spokesman: 'It's Important to Vet Breached Data Carefully'Dropbox is keeping a close eye on the latest news reports of big-name, big-data breaches, but says the reported hackers are bluffing when claiming... Read more »

Audio Report: Updates on InfoSec Europe, NIST Framework

In the latest ISMG Security Report, our editors examine the top concerns of security practitioners gathered at Infosecurity Europe, NIST's planned revision of its cybersecurity framework and U.S. government efforts to make... Read more »

Report: Most Phishing Emails Pack Ransomware

Cybercrime alert: In March, 93 percent of all phishing emails studied contained ransomware designed to forcibly encrypt PCs, says PhishMe chief operating officer Jim Hansen. In an interview, he offers insights on... Read more »

Simple Security: How Organizations Fumble the Basics

Many organizations still fail to practice smart web security, warns penetration testing expert Ilia Kolochenko, who notes that 23 percent of all websites still use SSL version 3, despite it leaving them... Read more »

Repeat Partnering Leads to Lower Profits

Working with the same firms over and over again may boost a company's revenue, but it can be costly. Read more »