Black Arrow Cyber Consulting
0

Blog

Our weekly Cyber Flash Briefing round up of top open source news and ‘Cyber Tip Tuesday’ videos

Posts tagged cyber crime
Black Arrow Cyber Threat Briefing 03 September 2021

Black Arrow Cyber Threat Briefing 03 September 2021

-Ransomware Attacks Soar 288% in H1 2021

-Ransomware Costs Expected To Reach $265 Billion By 2031

-Brute Force Email Attacks and Account Takeover Attempts Rise 671%, Reaching Unprecedented Levels, Causing Financial And Reputational Damage

-Investigation Into Hacked "Map" Of UK Gun Owners

-Eight US Financial Services Firms Given Six-Figure Fines Over BEC Data Breaches

-Ransomware Has Been A ‘Game Changer’ For Cyber Insurance

-WhatsApp hit with $267 million GDPR fine for bungling user privacy disclosure

-Microsoft Warns About Open Redirect Phishing Campaign

Read More
Black Arrow Adminblack arrow, cyber, cyber security, infosec, information security, ransomware, cyber crime, brute force, hackers, guns, gun owners, financial services, insurance, cyber insurance, third parties, third party, supply chain, microsoft, open redirect, phishing, employees, bec, business email compromise, scammers, insider threats, lockfile, fbi, cisa, smart cities, cofense, passwords, gpus, graphics cards, amd, nvidia, cloud, azure, android, malware, npm, qnap, apple, meltdown, braktooth, bluetooth, cisco, proxytoken, exchange, atlassian, confluence, mozi, iot, botnet, tp-link, voip, cloudflare, ddos, zero trust, t-mobile, china, lockbit
Black Arrow Cyber Threat Briefing 27 August 2021

Black Arrow Cyber Threat Briefing 27 August 2021

-Cyber Crime Losses Triple To £1.3bn In 1h 2021

-New Ransomware Wake-Up Call

-22% Of Cyber Security Incidents In H1 2021 Were Ransomware Attacks

-Key Email Threats And The High Cost Of Business Email Compromise

-Microsoft Warns Thousands Of Cloud Customers Of Exposed Databases

-58% Of IT Leaders Worried Their Business Could Become A Target Of Rising Nation State Attacks

-Cyber Insurance Market Encounters ‘Crisis Moment’ As Ransomware Costs Pile Up

Read More
Black Arrow Adminblack arrow, cyber, cyber security, cyber crime, infosec, information security, gfsc, ransomware, insurance, cyber insurance, email, business email compromise, bec, nation state actors, apt, microsoft, cloud, saas, exchange, proxyshell, phishing, scammers, fraud, malware, linux, vulnerabilities, vishing, mozi, sidewalk, shadowpad, joker malware, pegasus, f5, routers, iot, openssl, rce, vmware, atlassian, confluence, ryzen, amd, cisa, realtek, opda, guernsey, data protection, nokia, t-mobile, cryptocurrencies, insiders, dark web, botnet, ics, scada, cni, nso, razer, fbi
Black Arrow Cyber Threat Briefing 16 July 2021

Black Arrow Cyber Threat Briefing 16 July 2021: 84% Of Orgs Experienced Phishing Or Ransomware Attacks In The Last Year; Phishing continues to be one of the easiest paths for ransomware; Only Half Of Orgs Can Defend Against Ransomware; MI5 Chief Warns Public Of Cyber-Threat From Hostile States Such As China & Russia; Almost All Orgs Suffered Insider Data Breaches; Cyber Crime Costs Orgs Nearly $1.79 Million Per Minute; Sonicwall Releases Urgent Notice About 'Imminent' Ransomware Targeting Firmware; Google Finds Zero-Day Security Flaws In All Your Favourite Browsers

Read More
Black Arrow Admincyber, cyber security, infosec, information security, ransomware, phishing, insider threats, insiders, mi5, terrorism, espionage, cyber crime, data breaches, cve, vulnerabilities, vulnerability management, sonicwall, firmware, google, internet explorer, safari, apple, zero-day, browsers, revil, hellokitty, business email compromise, bec, kaseya, social engineering, propaganda, malware, trickbot, biopass, ios, solarwinds, microsoft, print spooler, printnightmare, china, russia, draytek, morgan stanley, insurance, cyber insurance, magecart, cryptocurrencies, dark web, gfsc, supply chain, rce, zoom, iran, linkedin, user education, israel
Black Arrow Cyber Threat Briefing 25 June 2021

Black Arrow Cyber Threat Briefing 25 June 2021: BEC Losses Top $1.8B As Tactics Evolve; 30M Dell Devices At Risk For Remote BIOS Attacks, Remote Code Exploits; Bad Employee Behaviours Picked Up During Remote Working Pose Serious Security Risks; Ways Technical Debt Increases Security Risk; Orgs Ill-Equipped To Deal With Growing BYOD Security Threats; Firewall Manufacturer Sees 226.3 Million Ransomware Attack Attempts This Year; Ransomware Criminals Look To Other Hackers To Provide Them With Network Access

Read More
Black Arrow Admincyber, cyber security, information security, infosec, threat, threat report, threat intel, bec, business email compromise, dell, rce, remote code execution, bios, wfh, e, employees, technical debt, byod, risks, healthcare, firewall, sonicwall, ransomware, cyber crime, criminals, clop, dark radiation, worm, wormable, darkside, lockbit, french connection, phishing, smishing, fin7, flubot, containers, google, linux, palo alto, lexmark, printers, tulsa, police, carnival cruises, monero, cryptojacking, cryptocurrencies, law enforcement, dark web, north korea, lazarus, espionage, nato, cloud, doorbells, iot
Black Arrow Cyber Threat Briefing 14 May 2021

Black Arrow Cyber Threat Briefing 14 May 2021: Two Thirds Of CISOs Expect Damaging Cyber Attack In Next 12 Months; Ransomware - Don't Pay, It Just Shows Cyber Criminals That Attacks Work; Most Significant Cyber Attacks 2006-2020; The Shape Of Fraud And Cyber Crime, 10 Things We Learned From 2020; US Pipeline Ransomware Serves As Warning To Persistent Corporate Inertia Over Security; Ransomware Attackers Now Using Triple Extortion Tactics; AXA Pledges To Stop Reimbursing French Ransomware Victims; Cyber Experts Warn Over Online Wine Scams

Read More
Black Arrow Admincyber, cyber security, infosec, information security, threat report, threat intel, ciso, ransomware, fraud, cyber crime, third party, third parties, software, fuel supplies, ot, ics, scada, critical infrastructure, colonial, triple extortion, extortion, axa, france, dystopia, wine, scams, cisa, energy sector, ryuk, students, mtr, privacy, piracy, foreign secretary, darkside, business email compromise, bec, phishing, smishing, ai, coronavirus, covid-19, email, ios, apple, trojan, windows, microsoft, troy hunt, patches, vulnerabilities, vulnerability management, adobe, adobe reader, wifi, frag attack, lemon duck, zero-day, rce, bulletproof hosting, criminals, rapid7, source code, russia, china, ncsc, cozy bear, spying, ddos, university, academia, mobile, gps, mfa, biden, executive order, healthcare, government, bots
Black Arrow Cyber Threat Briefing 07 May 2021

Black Arrow Cyber Threat Briefing 07 May 2021: New Technology Has Enabled Cyber-Crime On An Industrial Scale; Cyber Security Control Failures Listed As Top Emerging Risk; Third Parties Caused Data Breaches At 51% Of Organisations; Apple Devices Under Attack, Update Now; Ransomware Reality Shock - 92% Who Pay Do Not Get Their Data Back; New Vulnerabilities Impact 60% Of Email Servers; Big Rise In Double Extortion Ransomware; Millions At Security Risk From Old Routers; 30% Of All Smartphones Vulnerable To New Bug

Read More
Black Arrow Adminthreat intel, threat report, cyber, cyber security, infosec, information security, cyber crime, criminals, ransomware, third parties, data breaches, kyc, aml, cft, email, exchange, exim, mental health, therapists, smart phones, vulnerabilities, qualcomm, cloud, swiss cloud, babuk, phishing, pingback, android, buer, rust, malware, dell, firmware, pulse vpn, microsoft, python, amazon, fake reviews, iran, china, rootkit, nation state actors, apt, ddos, romance fraud, healthcare, health sector, tesla, flying drone, penetration testing, flash, peleton
Black Arrow Cyber Threat Briefing 19 March 2021

Black Arrow Cyber Threat Briefing 19 March 2021: Tens Of Thousands Of Microsoft Exchange Customers Under Attack, Targeted By Multiple Hacker Groups; Over $4.2 Billion Officially Lost To Cyber Crime In 2020; Cyber Attacks Multiply On HNWIs; Largest Ransomware Demand Now Stands At $30 Million; 71 Percent Of Office 365 Users Suffer Malicious Account Takeovers; More Than 16 Million Covid-Themed Cyber Attacks Launched In 2020; Cyber Now Key To National Security;

Read More
Black Arrow Admincyber security, cyber, infosec, information security, exchange, hafnium, email, microsoft, threat intel, treat report, cyber crime, organised crime, hnwi, bec, business email compromise, national security, ransomware, mimecast, solarwinds, office 365, covid, scams, takeovers, vulnerabilities, vulnerability management, schools, nurseries, university, academia, phishing, botnet, mirai, iot, smart meters, duckduckgo, browser extensions, privacy, snoopers charter, google, chrome, google chrome, netgear, switches, data breaches, journalists, cni, critical infrastructure, sextortion, nuclear weapons, nuclear deterrent, mega-hacks
Black Arrow Cyber Threat Briefing 05 March 2021

Black Arrow Cyber Threat Briefing 05 March 2021: New Strain Of Ransomware Implements Self-Spreading Capabilities; One In Four People Use Work Passwords For Consumer Websites; Massive Rise In Threats Across Expanding Attack Surfaces; Half of Orgs Concerned Remote Working Puts Them at Greater Risk of Cyber Attacks; Microsoft Patches Four Zero-Day Exchange Server Bugs; A Booming Trade In Bugs Is Undermining Cyber Security; Weaponized Spectre Exploit Discovered; Solarwinds Security Fiasco May Have Started With Simple Password Blunders

Read More
Black Arrow Admincyber, cyber security, information security, infosec, threat report, threat intel, ransomware, ryuk, zero-day, patches, vulnerability management, vulnerabilities, microsoft, exchange, passwords, attack surface, wfh, remote workers, browsers, extensions, schools, spectre, solarwinds, polecat, ecuador, gootkit, qualys, phishing, scams, fraud, obliquerat, rat, remote access trojan, amazon, slack, jailbreak, iphone, mobile, linux, proof of concept, poc, chrome, gab, far-right, singapore airlines, russia, china, apt, cyber crime, supply chain, india, pakistan, lazarus, north korea, nasa, faa, privacy, cyber warfare, nsa, quantum computing
Black Arrow Cyber Threat Briefing 26 February 2021

Black Arrow Cyber Threat Briefing 26 February 2021: Cyber Crime Could Cost The World $10.5 Trillion Annually By 2025; 119,000 Threats Per Minute Detected In 2020; 78% Of Top Security Leaders Say Their Organisations Are Unprepared For A Cyber Attack; Uk Faced Millions Of Cyber Attacks Last Year; New Tier Of APT Actors That Behave More Like Cyber Criminals; US Calls North Korean Hackers ‘World’s Leading Bank Robbers’; Sequoia Capital, One Of Silicon Valley's Most Notable VC Firms, Told Investors It Was Hacked; Poor Hardware Disposal Practices Posing A Risk To Data Security

Read More
Black Arrow Admincyber security, cyber, cyber crime, infosec, information security, uk, threat, threat report, phishing, url, hackers, ransomware, apt, nation state actors, north korea, china, sequoia capital, venture capital, vc, hardware disposal, babuk, underwriters laboratories, microsoft, fedex, nist, google alerts, google, macos, malware, masslogger, ios, vulnerabilities, vulnerability management, rce, vmware, pdf, zero-day, cisco, accellion, clubhouse, cyber crime groups, blockchain, mastercard, visa, brave, tor, cni, scada, ics, gru, russia, nsa, solarwinds, tiktok, privacy, amazon, crowdstrike, sonicwall, non-human workers
Black Arrow Cyber Threat Briefing 19 February 2021

Black Arrow Cyber Threat Briefing 19 February 2021: Masslogger Swipes Outlook & Chrome Credentials; Phishers trick LinkedIn users; Solarwinds Attack ‘Largest And Most Sophisticated Attack’ Ever; Ransomware gangs are running riot, paying them off doesn’t help; Most security bugs in the wild are years old; Hacker Claims Files Stolen from Prominent Law Firm; 100+ Financial Services Firms Targeted in Ransom DDoS Attacks in 2020; 14 million alleged Amazon and eBay account details sold online; Think backups will protect you from ransomware? What do you think gets attacked first?

Read More
Black Arrow Admincyber, cyber security, information security, infosec, cyber crime, masslogger, outlook, google chrome, phishing, linkedin, solarwinds, russia, nsa, microsoft, ransomware, vulnerabilities, vulnerability management, jones day, legal sector, law firms, backups, ddos, financial services, amazon, ebay, stolen credentials, kia, conti, egregor, ngrok, linux, watchdog, apple, malware, trickbot, android, mobile, mobile malware, openssl, wordpress, malvertising, macos, telegram, scotland, dark web, jokers stash, yandex, insiders, supply chain, france, sandworm, north korea, lazarus, clubhouse, china, spy pixels, privacy, vpn
Black Arrow Cyber Threat Briefing 22 January 2021

Black Arrow Cyber Threat Briefing 22 January 2021: Ransomware Biggest Cyber Concern; Ransomware Payments Grew 311% In 2020; Cyber Security Spending To Soar In 2021; Ransomware Provides The Perfect Cover For Other Attacks; Gdpr Fines Skyrocket As Eu Gets Tough On Data Breaches; Popular Pdf Reader Has Database Of 77 Miliion Users Leaked Online; Malware Incidents On Remote Devices Increase

Read More
Black Arrow Admincyber, cyber security, threat intel, threat report, ransomware, solarwinds, spending, budgets, criminals, cyber crime, SEPA, pdf, pdf reader, nitro, gdpr, fines, malware, remote workers, remote devices, phishing, macs, apple, signal, telegram, vulnerabilities, SAP, dnspooq, dns, dnsmasq, cisco, sd-wan, botnet, freakout, health, data breach, breaches, ubiquiti, iot, rdp, windows, cloud, aviation, privacy, vishing, ms defender, pixlr
Black Arrow Cyber Threat Briefing 08 January 2021

Black Arrow Cyber Threat Briefing 08 January 2021: Ryuk gang estimated to have made more than $150 million from ransomware; China's hackers move to ransomware; Amid hardened security, attackers seek softer targets; Hackney Council files leaked online after cyber attack; PayPal users targeted in new SMS phishing campaign; the rise of cyber-mercenaries; Declutter Your Devices to Reduce Security Risks

Read More
Black Arrow Admincyber crime, cyber security, information security, infosec, ryuk, threat report, ransomware, china, apt, apt27, solarwinds, hackney, council, paypal, phishing, sms, smishing, class action, lawsuit, mercenaries, declutter, mobile, babuk, facebook, ads, north korea, rokrat, trojan, malware, google, android, vpn, vodafone, gaming, t-mobile, british airways, nation state actors, espionage, ddos, telegram, whatsapp, chrome, google chrome, fbi, maritime
Black Arrow Cyber Threat Briefing 31 December 2020

Black Arrow Cyber Threat Briefing 31 December 2020: SolarWinds hack may be much worse than originally feared; Threat actor selling 368.8 million records from 26 data breaches; The Worst Hacks of 2020; Nasty Strain of malware is back and hits 100K recipients per day; Ransomware in 2020: A Banner Year for Extortion; Russia’s global hacking efforts are going to unwind in 2021

Read More
Black Arrow Admincyber, infosec, information security, cyber security, russia, cyber crime, data breach, hacks, malware, emotet, fbi, iot, windows, microsoft, kawasaki, finland, india, citrix, surveillance, brexit, deepfakes, t-mobile, dns, zero-day, solarwinds
Black Arrow Cyber Threat Briefing 25 December 2020

Black Arrow Cyber Threat Briefing 25 December 2020: The Cyber Threat Is Real and Growing; Ransomware Attacks Surge in Q3; In 2021 there will be a cyber attack every 11 seconds; The West has suffered a massive cyber breach and it's hard to overstate how bad it is; Big tech companies including Intel, Nvidia, and Cisco were all infected during the SolarWinds hack

Read More
Black Arrow Admincyber, cyber security, cyber crime, infosec, information security, threats, ransomware, solarwinds, intel, nvidia, cisco, victims, malware, tcp, iot, microsoft, chrome, microsoft edge, windows, zero-day, signal, data breach, dark web, jokers stash, nsa, cloudflare, ddos, c19, privacy, surveillance, al jazeera, insurance
Black Arrow Cyber Threat Briefing 11 December 2020

Black Arrow Cyber Threat Briefing 11 December 2020: Cyber crime costs the world more than $1 trillion, 50% increase from 2018; One of the world's largest security firms breached; Chinese Breakthrough in Quantum Computing a Warning for Security Teams; Ransom payouts hit record-highs, surging 178% in a year; Ransomware Set to Continue to Evolve

Read More
Black Arrow Admincyber, cyber security, cyber crime, infosec, information security, fireeye, china, quantum computing, ransomware, passwords, foxconn, netgain, schools, academia, malwareless, malware, spearphishing, adobe, iot, microsoft, social media, windows 10, medical devices, android, mobile malware, vulnerabilities, vulnerability management, wormable, vmware, nsa, hmrc, data breach, security tools, offensive, embraer, paypay, norway, russia, apt28, apt, advanced persistent threats, bank, insiders, insider threats, experian, smart devices, 5g, finland, sophos
Black Arrow Cyber Threat Briefing 27 November 2020

Black Arrow Cyber Threat Briefing 27 November 2020: Hundreds of C-level executives’ credentials available for $100 to $1500; Bluetooth Attack Can Steal a Tesla Model X in Minutes; Three members of TMT cybercrime group arrested in Nigeria; Cyber criminals make £2.5m raid on law firms in lockdown; Hackers post athletes’ naked photos online

Read More
Black Arrow Adminthreat report, threat intel, open source, osint, cyber, cyber crime, cyber security, infosec, information security, c-suite, boards, bluetooth, tesla, tmt, hackers, nudes, manchester united, egregor, ransomware, sopra steria, godaddy, scams, google, malware, wordpress, wapdropper, lightbot, trickbot, iot, doorbells, vmware, mobileiron, github, google chrome, microsoft, kerberos, sophos, privacy
Black Arrow Cyber Threat Briefing 20 November 2020

Black Arrow Cyber Threat Briefing 20 November 2020

Welcome to this week’s Black Arrow Cyber Threat Briefing – a weekly digest, collated and curated by our cyber experts to provide senior and middle management with an easy to digest round up of the most notable threats, vulnerabilities and cyber related news from the last week.

Read More
Black Arrow Admincyber, cyber crime, cyber security, infosec, information security, passwords, ransomware, sme, wfh, capcom, managed, office 365, microsoft, adult sites, lazarus, china, apt, malware, iam, aws, cloud, windows, bluekeep, vulnerabilities, cisco, kerberos, scans, rce, webex, animal jam, parents, crown prosecution service, cps, macos, big sur, surveillance, privacy, vpn, firewall, nation state actors, liability, cyber physical systems, ics, sophos, verizon, espionage
Black Arrow Cyber Threat Briefing 06 November 2020

Cyber Threat Briefing 06 November 2020

Read More
Black Arrow Admincyber, cyber security, infosec, information security, ransomware, emotet, campari, hackney, mattel, criminals, cyber crime, bec, business email compromise, office 365, bbc, phishing, us cyber command, russia, malware, iot, zero-day, windows, cobalt strike, adobe, adobe acrobat, oracle, solaris, cisco, marriott, ico, fines, databases, financial services, akamai, proofpoint, deloitte, insider threats