article thumbnail

Iran-linked group APT33 adds new Tickler malware to its arsenal

Security Affairs

The group continued to carry out password spray attacks targeting the educational sector for infrastructure procurement and focused on the satellite, government, and defense sectors for intelligence gathering. They also leveraged compromised accounts from educational institutions to create additional Azure tenants.

IT 323
article thumbnail

Google announced end-to-end encryption for Gmail web

Security Affairs

Google introduces end-to-end encryption for Gmail web to its Workspace and education customers to protect emails sent using the web client. The IT giant announced that the client-side encryption in Gmail on the web will be available in beta for Google Workspace Enterprise Plus, Education Plus, and Education Standard customers.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GUEST ESSAY: Leveraging DevSecOps to quell cyber risks in a teeming threat landscape

The Last Watchdog

Lack of security awareness and education. Often, employees within organizations lack sufficient security awareness and education. Organizations need to invest in cybersecurity training programs to educate their employees about security best practices. Compliance and regulatory requirements.

Risk 202
article thumbnail

Experts warn of scanning activity for critical SAP SolMan flaw after the release of exploit

Security Affairs

A successful attack exploiting this vulnerability would put an organization’s mission-critical SAP applications, business process and data at risk—impacting cybersecurity and regulatory compliance. Last week, Dmitry Chastuhin released a PoC exploit code for CVE-2020-6207 for educational purposes.

article thumbnail

News alert: AppDirect poll reveals company leaders losing sleep over cyber risks, compliance

The Last Watchdog

The results show that while 92% of IT business leaders believe they’ve made the right security investments and 88% say they meet all compliance requirements, half are kept up at night over their company’s security. Their top areas of concern include cybersecurity risk (58%), information security risk (53%) and compliance risk (39%).

article thumbnail

Happy Compliance Officer Day!

Thales Cloud Protection & Licensing

Happy Compliance Officer Day! Here’s the thing about compliance, most people know that it’s necessary, but it can often be seen as an arduous blocker to doing fun things like cycling on your own - or growing a business in a fast-paced digital economy! In the world of IT, the compliance officer's role is not a glamorous one.

article thumbnail

GUEST ESSAY: The case for network defenders to focus on leading — not lagging — indicators

The Last Watchdog

If targets such as defect density or compliance to scanner policy (i.e. This is exacerbated when factoring in the security and compliance defects that can’t be scanned for, like obtaining consent for privacy laws. The topics are often complex and require contextual education for non-security experts to interpret correctly.

Sales 240