On 18th July 2024, India's biggest crypto exchange, WazirX suspended its trading activities after a cyber-attack that drained nearly half of its reserves (close to 230 million USD worth of crypto assets). According to the platform, the breach exploited a vulnerability in the exchange's multi-signature wallet system, compromising the security of stored funds. The [...]
Cyberattacks continue to pose a formidable threat to organisations across the world. In recent times, we have witnessed a surge in high-profile breaches, each one leaving a trail of compromised personal data. Take, for instance, the infamous "Mother of All Breaches" (MOAB) in January 2024, which reportedly exposed over 26 billion sensitive records. More [...]
The 19 July CrowdStrike software update that resulted in a global cyber crash, affecting critical services across various industries, including hospitals, airlines, and financial institutions, has had many people reviewing their privacy and cyber processes. Estimates currently stand at 8.5m computers affected - around 1% of Windows machines worldwide. Unprecedented in its size, the [...]
Costly cyber attack hits UnitedHealth Group Subsidiary Earlier this year, a cyber attack on a UnitedHealth Group subsidiary, Change Healthcare, caused significant disruption and financial loss for one of the largest employers in the US. The attack is reported to have started with hackers exploiting a server which lacked multi-factor authentication. Recently, UnitedHealth Group [...]
Business Email Compromise (BEC) is a type of cyber crime that involves misusing or impersonating a corporate email address to manipulate a company’s employees or contractors. The goal of BEC is normally to trick an employee into transferring funds or sharing sensitive information. BEC attacks are often sophisticated, and exploit email communication systems to [...]
On 27 July 2023, the UK’s National Cyber Security Centre (NCSC) published a new guidance on what is collectively termed ‘Shadow IT’ to assist organisations in implementing appropriate risk management measures on ‘rogue devices and software’. The guidance helps organisations to pinpoint various types of activities that may be considered as ‘shadow IT’ within [...]
Reports about data breaches often focus on the financial impact on businesses. But recent data breaches involving three UK police services and the UK Electoral Commission have highlighted how inadequate data protection can threaten people’s safety—and even their lives. Responding to a freedom of information request on 8 August, the Police Service of Northern [...]
Let’s take a closer look at the latest chatbot ChatGPT and what this could potentially mean for the cybersecurity industry. ChatGPT – the bustling chatbot ChatGPT, the trending conversational agent or chatbot was built by OpenAI. It makes use of a large-scale pre-trained neural network language model known as the GPT (Generative Pre-trained Transformer) [...]
What is Encryption? Encryption is an added security measure. It involves converting human-readable data to ciphertext. This is so that it cannot be read by those who are not the intended recipients of the data. Only those with the key to decrypt the data can convert it back to plaintext. Decryption is the process [...]
Imagine you’re hiring a bodyguard. There are two candidates for the position, and Candidate A has read every security book that there is. Candidate B may not have such an encyclopaedic understanding of the industry, but what he does bring is ten years of proven experience of real security scenarios. Unless Candidate A can [...]
HewardMills Ltd is a company registered in England and Wales | Registered office: 77 Farringdon Road, London EC1M 3JU | Registration number: 11211970 | All rights reserved | © Copyright 2020 – 2024 | Privacy notice
