SBS CyberSecurity - In The Wild 171

In The Wild - CyberSecurity Newsletter Welcome to the 171st issue of In The Wild, SBS’ weekly CyberSecurity newsletter. The objective of this newsletter is to share threat intelligence, news articles that are relevant, new and updated guidance, and other information to help you make better cybersecurity decisions. Follow SBS CyberSecurity on Social Media for more articles, stories, news, and resources!           Below, you will find some of the latest-and-greatest news stories, articles, videos, and links from the past week in cybersecurity. Some of the following stories have been shared by consultants, others by the SBS Institute, and others yet simply been found in the far corners of the Internet. We hope you find the following stories relevant, interesting, and – most of all – useful. Enjoy. [VIRTUAL CONFERENCE] CyberRiskNOW - Incident Response Edition SBS Educational Resources SBS’ latest virtual conference is designed to provide interactive training on evolving cybersecurity threats and how your organization can build a strong Incident Response Plan that helps protect against these threats. CyberRiskNOW: Incident Response Edition will identify components of a comprehensive Incident Response Plan that enables your organization to identify, protect, detect, respond to, and recover from today’s modern cyber attacks, as well as minimize your risk from these real-world threats. This seminar will also walk you through the anatomy of a modern cyberattack, show you around the Dark Web and how cybercrime-as-a-service works, provide you with security suggestions for Office 365, and discuss how to implement the most impactful controls to mitigate your cyber risk. Read Here »   Ransomware Hit ATM Giant Diebold Nixdorf Krebs on Security Diebold Nixdorf, a major provider of automatic teller machines (ATMs) and payment technology to banks and retailers, recently suffered a ransomware attack that disrupted some operations. The company says the hackers never touched its ATMs or customer networks, and that the intrusion only affected its corporate network. Read Here »   Attacks on Banks Spike 238% During COVID-19 Crisis Infosecurity Magazine Attacks on financial institutions spiked by a massive 238% from the beginning of February to the end of April, as cyber-criminals took advantage of peaks in the COVID-19 news cycle, according to VMware Carbon Black. The company’s third annual Modern Bank Heists report revealed that over a quarter (27%) of attacks so far this year have targeted either the healthcare or financial sectors. Read Here »   Paying Ransom Doubles the Cost of Ransomware Attack: Research CISO Magazine Cybersecurity firm Sophos recently announced the findings of its global survey “The State of Ransomware 2020,” which revealed that paying ransom for data decryption post a ransomware attack is far more expensive. The research said that the total cost of recovery from a ransomware attack almost doubles when organizations pay ransom to cybercriminals. It was found that the average cost of addressing the impact of ransomware attack was more than $730,000, which included business downtime, lost orders, and operational costs. However, the average cost increased to $1.4 million when organizations agreed to pay the ransom. Read Here »   Do you know which SBS Institute Certification Programs are coming up? Check out the Certification Calendar and share with your clients. Find Out Here! » DHS, CISA, and FBI Share List of Top 10 Most Exploited Vulnerabilities ZDNet Two US cyber-security agencies published this week a list of the top 10 most commonly exploited software vulnerabilities across the last four years, between 2016 and 2019. The report, authored by the Department of Homeland Security Cybersecurity and Infrastructure Security Agency (DHS CISA) and the Federal Bureau of Investigation (FBI), urges organizations in the public and private sector to apply necessary updates in order to prevent the most common forms of attacks encountered today. Read Here »   Texas Courts Hit by Ransomware, Network Disabled to Limit Spread Bleeping Computer The Texas court system was hit by ransomware on Friday night, May 8th, which led to the branch network including websites and servers being disabled to block the malware from spreading to other systems. “On Friday, May 8th, the Office of Court Administration (OCA), the information technology (IT) provider for the appellate courts and state judicial agencies within the Texas Judicial Branch, identified a serious security event in the branch network, which was later determined to be a ransomware attack,” a statement published today on the site of the Texas Judicial Branch says. Read Here »   The Definitive Cyber Security Statistics Guide for 2020 The SSL Store Last year, we published our first comprehensive list of cyber security statistics for our readers on Hashed Out. The article was such a hit that we wanted to make this an annual project that we publish with updated cybersecurity stats each year. This way, you know right away where you can turn for all of your cyber security data needs. This year, we wanted to up the ante and increased the number of cybersecurity statistics we report from 80 to 122. Since we’re using the most current information available — most of the data comes from 2019 and 2020 reports, studies, and news reports. Read Here »   7 Sacrifices You Must Make if You Want to be Successful Medium Your biggest hurdle in life? Loss aversion. You’re wired to focus more on what you stand to lose than what you stand to gain. This is why becoming successful is so difficult. Achieving the outcomes you want is often more about what you’re willing to give up as opposed to what you’re willing to do. If it weren’t for the need to make sacrifices, well then, we’d all be successful. Alas, this isn’t how the world works. Either you make the sacrifices, or you don’t. Then, you see what happens with your life after that. Read Here » 10 Other Interesting Links From This Week There were too many fantastic reads from this past weeks’ worth of cybersecurity and technology news, so here are a few additional quick-hit links for your reading pleasure:       Krebs on Security: US Secret Service: “Massive Fraud” Against State Unemployment Insurance Programs       Bleeping Computer: Zoom global outage preventing meetings, video, and audio       Bleeping Computer: Windows 10 quietly got a built-in network sniffer, how to use       Bleeping Computer: ProLock Ransomware teams up with QakBot trojan for network access       The Hacker News: Effective Business Continuity Plans Require CISOs to Rethink WAN Connectivity       ZDNet: On the three-year anniversary of WannaCry, US exposes new North Korean malware       ZDNet: Package delivery giant Pitney Bowes confirms second ransomware attack in 7 months       SC Magazine: What is the Zero Trust and 5 considerations for building a Zero Trust IT environment       Wired: Thunderbolt Flaws Expose Millions of PCs to Hands-On Hacking       Forbes: Hackers Publish First 169 Trump ‘Dirty Laundry’ Emails After Being Branded Cyber-Terrorists