Elaborate zero-day browser break-out betrayed by unusual behavior
Coinbase chief information security officer Philip Martin this week published an incident report covering the recent attack on the cryptocurrency exchange, revealing a phishing campaign of surprising sophistication.
At some point prior to that, the attackers – a group known to Coinbase as CRYPTO-3 or sometimes HYDSEVEN – compromised or created two email accounts at Cambridge.
Two days before the initial emails went out, they registered a domain to deliver their exploit, Martin said.
After corresponding with the initial set of targets – about 200 – through a series of messages over several weeks, the hackers winnowed their list of prospective victims down to five specific marks.
"Stage one of this attack first identified the operating system and browser, and displayed a convincing error to macOS users who were not currently using Firefox, instructing them to install the latest version from Mozilla," Martin wrote.
CISO - Chief information security officersCISO are the elite professionals in the organization, as they are the top of the class, literally.
In information security, to be a chief info.
security officer is high goal for the aspirants.
As such, in many aspects of information security there’s a position that requires extensive experience, knowledge, expertise, and hands-on skills.
Cyber-security professional profiles are being head-hunted by hiring managers across the industry, making them highly in-demand across domains and job roles.
This sudden rise in Information Security professionals across hiring managers is obvious, it is due to an increase in cyber-attacks and other threats, making smooth functioning of businesses in trouble.
Besides, this sudden increase in cyber attacks is hampering the businesses credibility of enterprises among stakeholders and impacting their ROI in the long run.
This has increased the opportunity for IT professionals to get better rewards in the market for Infosec skills.
And CISSP is one of the elite Cyber Security Certifications all across the globe, certified professionals among the lot are given more opportunities and career scope, making CISSP certification the apt choice at present.
CISSP is highly sought-after cybersecurity credential that all the aspirants and veterans are opting for.
The security elements or someone’s personal computer is important, but the elements needed to efficiently protect and defend a business’s computer network are further reaching and more complicated. It’s the responsibility of every competent CIO or information security professional to understand what’s involved in protecting and securing a business’s information and digital assets.
Data security and privacy concerns have become a major focus on many businesses for both C-suite leaders overseeing strategy and customer experience and IT and data professionals who are responsible for understanding what tactics, techniques, and tools are most likely to help meet the goals of the business. Understanding the major security concerns, and how current trends, software, and other measures can help address them, are key components in creating a solid security strategy. It takes work, then, and the buy-in of several stakeholders and business units to understand and act on the elements of computer security that are important to the success of your business.
What are the elements of computer security that modern IT professionals need to know?
Most experts would agree that modern computer security includes the following.
1. Availability
Availability, as it concerns computer systems, refers to the ability for employees to access information or resources in a specific place and time, as well as in the correct format. It’s important for business leaders to ensure that their computer security elements focus on a systems’ ability to function well enough and consistently enough to ensure that information and data are available and don’t affect user experience. Planning for and protecting against system failure and DDoS attacks, for instance, are crucial in ensuring system availability and an important part of computer systems security.
2. Integrity
One educational website notes that “refers to methods of ensuring that the data is real, accurate and guarded against unauthorized user modification. Data integrity is a major information security component because users must be able to trust information.” One way to increase the reliability and integrity of data is through validation methods like blockchain and other software solutions.
3. Authenticity
This element of computer security is the process that confirms a user’s identity. One method of authenticity assurance in computer security is using login information such as user names and passwords, while other authentication methods include harder to fake details like biometrics details, including fingerprints and retina scans. The right authentication method can help keep your information safe and keep unauthorized parties or systems from accessing it. In addition to the right method of authentication, providing users with excellent systems, security, and privacy training is crucial in ensuring that users don’t engage with any spam or unsecured emails with links and downloads that could jeopardize sensitive company information. Many times, illicit emails can appear legitimate and training is necessary to prevent employees from accidentally enabling unauthorized access.
Read More...
