Internet Security Week – Issue 112

In the 112th edition of Internet Security Week , ransomware attacks are focusing on small and medium-sized businesses, 7 government agencies that have already been attacked by hackers, what to do if you suffer a third-party vendor breach, and much more.

News

Ransomware attacks have been prioritizing small and medium-sized businesses, study indicates

Security firm OpenText has released the BrightCloud Threat Report 2022, a survey that highlights key data and trends affecting businesses large and small worldwide in 2021, as well as individuals in the new hybrid and interconnected world—leading to threats like ransomware and phishing increasingly affecting smaller businesses.

By Dácio Castelo Branco on Canaltech

Report points to record number of zero days in 2021

WatchGuard's latest Internet Security Report of 2021 brings a warning to network and security managers: the detection volume in the October/December quarter was the highest in three years, with a total that exceeded the previous quarter by 39%. Advanced threats increased by 33%, indicating the highest level of zero-day threats ever recorded.

In CISO Advisor

Learn how to reduce losses and damages from data leaks without relying on luck.

Today, we aim to demonstrate that, compared to large corporations, small and medium-sized businesses have much to lose from security incidents, especially when data breaches occur.

By Kelvin Zimmer on Lumiun Blog

Where's the security? 7 government agencies that have been attacked by hackers

Brazilian public agencies at various levels, from municipal to federal, have been facing threats from cybercriminals in recent years. The most recent case is the TRF-3 (Federal Regional Court of the 3rd Region), which suffered a hacker attack in the early hours of March 30th and only began testing to resume its online services on the 11th.

By Abinoan Santiago in Uol

What to do if you experience a third-party vendor breach

In today's interconnected business landscape, companies of all sizes outsource many of their operations. This also means giving third-party vendors access to some or all of their data, including application programming interface (API) keys, confidential customer information, and other sensitive data.

By Carlos Rodrigues in IT Inside

What can we learn from 2021, a year marked by numerous data breaches?

In 2021, Brazil was the 6th most affected country by data breaches, according to a survey by Surfshark, a company that provides online privacy and security tools. The situation was no different in the business world. In the first half of 2021 alone, at least 69 Brazilian institutions were targeted by data breaches and hijacking attacks, according to data from Apura Cyber Intelligence.

By Luiz Ricardo de Castilho in Jornal Jurid

Cyberwarfare and ransomware are a concern for the public sector, but there are ways to protect yourself

In news reports around the world, we see cyberattacks and data leaks occurring frequently, with varying targets and scales. More recently, with the war between Russia and Ukraine, a new threat has emerged: cyberwarfare, which worries the public sector and governments worldwide with the fear that the conflict will take on global dimensions.

By Bruno Assaf in Security Report

With 5% of the IT budget, cybersecurity challenges companies

In 2020 alone, 38% of Brazilian companies were attacked by ransomware, and many of them lack the skills to deal with increasingly advanced security measures. Experts say that, in addition to increased investment, solutions that protect both operational and human resources are crucial.

In IP News

Spam campaign distributes password-stealing malware to corporate users

A spam campaign is being used to spread the META malware across corporate networks, targeting passwords saved in browsers or those that provide access to cryptocurrency wallets. The mass spread, however, is not particularly bold, using the already tried-and-true technique of attached Excel documents, with criminals posing as business partners and requesting confirmation of financial transfers.

By Felipe Demartini on Canaltech

The response to a ransomware attack

We constantly see companies suffering some kind of cyberattack, which often ends up causing sleepless nights for everyone working in the information technology privacy and protection field. A step-by-step guide can help improve these professionals' sleep.

By Caíque Barqueta in CISO Advisor