ISS World's headquarters in Denmark (Photo: ISS World)

Facilities Maintenance Firm Recovering From Malware Attack

Jeremy Kirk • February 21, 2020

ISS World, a global facilities maintenance company based in Denmark, says it's gradually restoring its systems after a malware attack on Monday. The company says it has identified the root cause but has not said if ransomware was involved.

Cybercrime

Joker's Stash Advertises Second Batch of Indian Card Data

Latest

Cyberwarfare / Nation-State Attacks

US, UK Blame Russia for Cyberattack in Country of Georgia

Scott Ferguson • February 21, 2020

U.S. and U.K. officials are blaming the Russian military for launching an October 2019 cyberattack on the country of Georgia that crippled at least 2,000 government, news media and court websites over the course of one day.

Cybercrime

SMS Phishing Campaign Used to Spread Emotet: Report

Ishita Chigilli Palli • February 21, 2020

Mobile banking customers are being targeted by yet another SMS phishing campaign, according to new research from IBM X-Force. This time, however, in addition to trying to steal usernames and credentials, the attackers are also attempting to install Emotet malware.

Business Continuity Management / Disaster Recovery

What to Look for at RSA 2020 Conference

Nick Holland • February 21, 2020

This special edition of the ISMG Security Report offers a preview of top keynote presentations at the RSA 2020 conference, plus a look at important themes and health tips for attendees.

Fraud Management & Cybercrime

Phishing Campaigns Tied to Coronavirus Persist

Apurva Venkat • February 20, 2020

As the coronavirus generates headlines around the world, cybercriminals are continuing to use this public health crisis to spread phishing emails and create malicious domains for a variety of fraud. Here's an update on the latest developments.

Endpoint Security

Amazon's Ring Mandates Two-Factor Authentication

Jeremy Kirk • February 19, 2020

Amazon's Ring is mandating the use of two-factor authentication for all users, a move designed to help stop creepy takeovers of the web-connected home security cameras. A passcode will be sent to a user's email address or by SMS.

Breach Notification

Canadian Government Breaches Exposed Citizens' Data: Report

Akshaya Asokan • February 19, 2020

Data breaches at Canadian government agencies exposed the personal information of approximately 144,000 citizens over a two-year period, according to a news report.

Governance

Coronavirus Update: Tips for Travel

Tom Field • February 19, 2020

Globally, the coronavirus has infected more than 75,000 people and led to over 2,000 deaths. But business travelers should avoid panic, says pandemic expert Regina Phelps, who offers preventive health tips for those headed to international events, such as the RSA 2020 conference.

Endpoint Security

Preview: 12 Top Keynote Sessions at RSA Conference 2020

Mathew J. Schwartz • February 19, 2020

Are you attending the RSA 2020 conference? To help navigate the show, here's a preview of 12 top keynote sessions featuring some of the biggest names in cybersecurity tackling critical subjects, including cryptography, critical infrastructure security, bug bounties and supply chain risks.

General Data Protection Regulation (GDPR)

Plastic Surgery Database Exposed: Researchers

Apurva Venkat • February 18, 2020

An unsecured database belonging to a French technology firm that supplies video and digital equipment to plastic surgery and dermatology clinics exposed content on 900,000 patients, according to a report from two independent security researchers.

Account Takeover

Mobile Banking Users Targeted in SMS Phishing Campaign

Ishita Chigilli Palli • February 18, 2020

Cybercriminals targeted mobile banking users by sending malicious SMS messages to their smartphones as part of a phishing campaign to steal account holders' information, including usernames and passwords, according to the cybersecurity firm Lookout.

Events

RSA Conference 2020 Preview

Tom Field • February 18, 2020

"The Human Element" is the theme of the RSA Conference 2020, but there are plenty of technology-rich topics in store for attendees, including session tracks that focus on election security, open source tools, product security and anti-fraud. Britta Glade, a conference director, previews the event.

Cybercrime

Google Removes 500 Chrome Extensions Tied to Malvertising

Apurva Venkat • February 17, 2020

Google has removed 500 Chrome extensions from its online store after researchers found that attackers were using them to steal browser data, according to a new report from security firm Duo Security. The thefts were part of a malvertising campaign that had been active for at least a year, the researchers say.