There's been a big rise in ransomware attacks targeting Linux as cyber criminals look to expand their options and exploit an operating system that is often overlooked when businesses think about security. . According to analysis by cybersecurity researchers at Trend Micro , Linux servers are "increasingly coming under fire" from ransomware attacks , with detections up by 75% over the course of the last year as cyber criminals look to expand their attacks beyond Windows operating systems. Linux powers important enterprise IT infrastructure including servers, which makes it an attractive target for ransomware gangs – particularly when a perceived lack of threat to Linux systems compared with Windows means that cybersecurity teams might choose to focus on defending Windows networks against cybercrime. . Incidents of ransomware on Linux systems have escalated by 75%, highlighting vulnerabilities as malicious actors refine their targeting strategies.. Ransomware Attacks, Linux Servers, Cybersecurity Threats, IT Infrastructure, Attack Trends. . Brittany Day
Federal agencies tasked with protecting the personal and financial data of millions of Americans have failed to update their systems or implement basic cybersecurity defenses, according to a recent Senate report. . The June report, titled “Federal Cybersecurity: America’s Data at Risk,” is the product of a subcommittee’s 10-month review of a decades’ worth of inspectors general reports of core government agencies. Eight agencies, including the Department of Homeland Security, the Department of State, the Department of Education and the Social Security Administration, were found to have several vulnerabilities in their cybersecurity systems and practices. “The federal government remains unprepared to confront the dynamic cyber threats of today,” the report reads. “The longstanding cyber vulnerabilities consistently highlighted by Inspectors General illustrate the federal government’s failure to meet basic cybersecurity standards to protect sensitive data.” The link for this article located at Security Today is no longer available. . The recent analysis outlines significant deficiencies within national bodies in bolstering defenses against evolving cyber risks.. Federal Cybersecurity, Cybersecurity Report, Data Protection, Security Failures. . Brittany Day
The nation-backed hacker group behind the TRITON/TRISIS malware attack is increasing its nefarious activity, putting critical infrastructure systems in danger of future cyber attacks, according to Dragos Security. . The group, which the security firm tracks as XENOTIME, not only remains active, but also appears to be widening its scope of potential attacks, Dragos said in a blog posted Thursday. Dragos researchers said they had “moderate confidence” that the XENOTIME group was seeking access to systems and capabilities to carry out a future disruptive—or even destructive—attack. The link for this article located at The Security Ledger is no longer available. . The DARKNET collective intensifies its attention on vital systems employing HEIMDALL malware, signaling escalating cybersecurity threats.. Trisis Malware, Cyber Threats, Critical Infrastructure, Dragos Security. . LinuxSecurity.com Team
On Thursday, JPMorgan Chase (JPMC) updated investors about their recently disclosed data breach in an 8-K filing with the Securities and Exchange Commission. The update comes hours after the financial giant disputed reports from the New York Times that they had experienced an additional security incident, calling the reports false. . The 8-K report says that user contact information, including names, addresses, phone numbers, and email addresses, as well as internal JPMC information relating to such users was compromised. The overall impact includes 76 million households and 7 million small businesses. The link for this article located at CSO Online is no longer available. . The 8-K report says that user contact information, including names, addresses, phone numbers, and em. thursday, jpmorgan, chase, (jpmc), updated, investors, about, their, recently, disclosed. . LinuxSecurity.com Team
According to a recent study by the Messaging Anti-Abuse Working Group (MAAWG) spammers on both sides of the Atlantic are being kept happy by users email behaviour. The MAAWG warning seems necessary as there are clearly more than enough users who click on spam email because it somehow looks interesting, in spite of all the danger signs.. The MAAWG study has, for the first time, been extended to European countries and includes the previous years US-only results for context. According to the group's findings, more than half (57%) of survey adults have responded to spam in such a way that it supports the perpetrators of the spam. This includes opening attachments to an email, forwarding an email or clicking on links. Almost half of this group, 46%, nearly a quarter of the population, said they did so deliberately, to "unsubscribe", out of curiosity, or out an interest in the products on offer. The link for this article located at H Security is no longer available. . Explore MAAWG's findings regarding global email practices and user interactions with spam, improving comprehension of cybersecurity dynamics.. MAAWG Report, Email Security, Spam Engagement. . Anthony Pell
Booming numbers of security researchers are uncovering so many flaws that vendors are finding it almost impossible to patch them all in a reasonable timeframe, the latest SANS report has found. . This paradox is one of a number of findings contained in the Top Cyber Security Risks report, which the organisation now plans to publish twice yearly in association with data provided by customers of partners TippingPoint and Qualys, upgrading the annual reports it has produced for some years. More researchers hunting for flaws should be a good thing, but the report for March to August 2009 suggests that this has created logistical problems for an industry that is still heavily focused on adding features and product enhancement as its main priority. The link for this article located at Network World is no longer available. . As cybersecurity evolves, vendors face challenges from an increasing number of vulnerabilities, making swift patch management even more crucial in today's landscape. Security Flaws,Vulnerability Management,Cybersecurity Challenges. . LinuxSecurity.com Team
A multi-exploit hack pack was responsible for nearly three-fourths of all Web-based attacks during December, a security company said Tuesday. Tagged with the moniker "Q406 Roll-up," the attack kit was behind 70.9% of last month's attacks, reported Atlanta, Ga.-based Exploit Prevention Labs. Up to a dozen different exploits make up the kit, which includes several exploits derived from the proof-of-concept code that researcher HD Moore published in July 2006 during his "Month of Browser Bugs" project. . The link for this article located at Information Week.com is no longer available. . A comprehensive malware suite is accountable for a significant portion of December’s online assaults, exposing critical cybersecurity vulnerabilities.. Hack Kit Trends, Web Exploits, Cyberattack Statistics, Exploit Prevention. . LinuxSecurity.com Team
An independent study by British cyber security firm, mi2g, has found Apple's OS X Server and the Berkely Software Distribution (BSD) open source systems on which it is based, to be the most secure online server operating systems in the world, according to a recent report published . . .. An independent study by British cyber security firm, mi2g, has found Apple's OS X Server and the Berkely Software Distribution (BSD) open source systems on which it is based, to be the most secure online server operating systems in the world, according to a recent report published at . In what may come as a surprise to many, the study also found that open source operating system, Linux, is now the "most-breached" server operating system and that Microsoft's server solution had improved substantially. The study, which was conducted by mi2g's Intelligence Unit, was based on the number of successful attacks against UK government and private server systems in January this year. Together, OS X Server and BSD represented only 3%, Windows 12%, while Linux was most prone to attack at 80%. The link for this article located at IT Web.co.za is no longer available. . A recent analysis shows that Microsoft's Windows Server and Solaris rank highly in security measures, whereas some versions of Unix have experienced notable vulnerabilities.. Apple OS X Server, Linux Server Security, Cybersecurity, Open Source Systems, BSD Study. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.