Black Arrow Cyber Consulting
0

Blog

Our weekly Cyber Flash Briefing round up of top open source news and ‘Cyber Tip Tuesday’ videos

Posts tagged securities and exchange commission
Black Arrow Cyber Threat Briefing 15 March 2024

Black Arrow Cyber Threat Intelligence Briefing 15 March 2024:

-Mind The Gap - Mimecast Report Finds Humans Are Biggest Security Flaw

-Three-Quarters of Cyber Victim Are SMBs - Why SMBs are Becoming More Vulnerable

-Cyber Security Skills Gap and Lack of Boardroom Engagement Invite Hacker Havoc

-UK Government’s Ransomware Failings Leave Country ‘Exposed and Unprepared’

-Data Breaches up 72% to New Record High: Cyber Security Incidents Rank as #1 Global Business Threat in 2024

-Finance Sector Facing Huge Number of Cyber Attacks That Could Leave It On its Knees, Highlights the Need to Build a Robust Security Culture

-Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets

-Independent Cyber Security Audits Are Powerful Tools for Boards

-Navigating Cyber Security in The Era of Mergers

-Phishing Tactics Evolve as Sophisticated Vishing and Image-based Phishing Take World by Storm

Read More
Black Arrow Adminivanti, github, mimecast, sophos, joint committee on the national security strategy, jcnss, identity theft resource center, allianz, lockbit, sec, securities and exchange commission, blackberry, midnight blizzard, kremlin, ibm, notpetya, merck, fcc, ipsos, bianlian, stopcrypt, british library, stanford university, black basta, unitedhealth, equilend, nissan, dropbox, chatgpt, magnet goblin, windows smartscreen, darkgate, remcos, redline, pixpirate, sceiner smart lock, jfsc, 23andme, play, lastpass, tiktok, dora, pci dss 4.0, volt typhoon, alabama, pypi, microsoft sccm, hyper-v, fortinet, fortios, fortiproxy, forticlient, sap, adobe, confluence, qnap, marinemax, cisco, wordpress, amd, intel, japan, wef, world economic forum, sans, cyber solidarity act, cyber resilience act, meta, nsa, switzerland, lithuania, us army, okta, france, french, black arrow cyber, black arrow, threat intelligence, osint, ncsc, national cyber security centre, cpni, mi5, gchq, cert, nca, national crime agency, europol, interpol, enisa, nato, cyber, information security, it security, cyber warfare, russia, north korea, china, iran
Black Arrow Cyber Threat Briefing 02 February 2024

Black Arrow Cyber Threat Intelligence Briefing 02 February 2024:

-The Financial Sector Is Plagued by Increasingly Sophisticated Cyber Attacks That Demand a Defensive Paradigm Shift

-The $10 Billion Cyber Insurance Industry Sees a Dangerous Year in Cyber Crime Ahead. AI, Ransomware, and War are its Biggest Concerns

-Microsoft Says Russian Hackers Used Known Identified Tactics to Breach Senior Exec Emails

-Old Methods, New Tricks: Cyber Criminals Are Still Using Social Engineering to Steal Your Credentials

-UK Government Unveils New Cyber Threat Guidelines as 32% of Firms Suffer Attacks in Past Year

-94% of Organisations Would Pay a Ransom, Despite Having ‘Do Not Pay’ Policies, as 79% Faced an Attack in 2023

-Interpol Arrests More than 30 Cyber Criminals in Global Operation

-Divide and Succeed: Splitting IT and Security Makes Business Sense

-Ransomware Groups Gain Clout with False Attack Claims

-Payment Fraud is Hitting Organisations Harder Than Ever Before

-Chinese Hacking Operations Have Entered a Far More Dangerous Phase, US Warns

Read More
Black Arrow Adminfulton county, vodafone, blackbaud, gartner, pawn storm, meta, draftking, midnight blizzard, cloudflare, reasonlabs, football australia, whitesnake, johnson controls, sec, securities and exchange commission, cyber givernance code of practice, svr, synergia, 23andme, technia corp, europcar, solarwinds, lockbit, alpha, akira, cisco, opentext, phobos, cactus, misbourne, chatgpt, zeus trojan, allakore, pypi, google play, covid-19, e-passport, mercedes-benz, mongodb, miracles software, dhs, keenan, myanmar, nis2, dora, okta, cozy bear, mark zuckerberg, pci dss, wray, exchange online, satya nadella, ivanti, juniper, junos, tor, volt typhoon, black arrow cyber, black arrow, threat intelligence, osint, ncsc, national cyber security centre, cpni, mi5, gchq, cert, nca, national crime agency, europol, interpol, enisa, nato, cyber, information security, it security, cyber warfare, russia, north korea, china, iran, british intelligence, national security, uk national security, military intelligence, mod, ministry of defence, police, law enforcement, ftse 100, ftse100, offshore financial services, fortune 500, fortune500
Black Arrow Cyber Threat Briefing 28th July 2023

Black Arrow Cyber Threat Briefing 28 July 2023:

-Half of UK businesses Struggle to Fill Cyber Security Skills Gap as Companies Encounter Months-long Delays in Filling Critical Security Positions

-Deloitte Joins fellow Big Four MOVEit victims PWC, EY as MOVEit Victims Exceeds 500

-Why Cyber Security Should Be Part of Your ESG Strategy

-Lawyers Take Frontline Role in Business Response to Cyber Attacks

-Organisations Face Record $4.5M Per Data Breach Incident

-Cryptojacking Soars as Cyber Attacks Diversify

-Ransomware Attacks Skyrocket in 2023

-Blocking Access to ChatGPT is a Short-Term Solution to Mitigate AI Risk

-Protect Your Data Like Your Reputation Depends on It (Because it Does)

-Why CISOs Should Get Involved with Cyber Insurance Negotiation

-Companies Must Have Corporate Cyber Security Experts, SEC Says

-Over 400,000 Corporate Credentials Stolen by Info-stealing Malware

Read More
Black Arrow Adminoutlook, metabase bi, apache openmeetings, cve-2023-3519, mysterious elephant, wyden, wuhan earthquake center, ib co, mastadon, novel, booz allen, norton motorcycles, alphapo, axis, anonymous sudan, hotrat, realst, fin8, intel, un security council, price waterhouse cooper, ibm cost of a data breach report, clop, dsit, moveit, pwc, ey, deloitte, cl0p, esg, iso 27001, sophos state of ransomware 2023, gdpr, ibm, cryptojacking, cryptomining, chainalysis, chatgpt, securities and exchange commission, sec, info-stealing, salesforce, google cloud, aws, openai, google ads, nitrogen, coveware, akira, cynthia kaiser, alphv, yahama, dhl, microsoft cloud, microsoft key, knowbe4, linkedin, vec, fraudgpt, meta, whitehouse, decoy dog, rust, lazarus, p2pinfect worm, asyncrat, socksescort, spyhide, mirai botnet, zyxel, anonumous sudan, peleton, defender, capita, virustotal, nato, tampa general hospital, suzuki, breachforums, breach forums database, johns hopkins, macos malware, wormhole, jumpcloud, nhs ambulance trust, opsec, wiz, zenbleed, ubuntu, linux, shadow it, imessage, facetime, openssh, cisa, stanford, amazon, alexa, ryanair, killnet, andorid, beijing, group ib, netscaler, github, google zero-days, cvss 4.0, windows xp, citrix, shadowserver, ivanti, mobileiron, mikrotik, openmeetings, vmware, zen2 processors, python, windows 10, atlassian, bamboo, zimbra, wordpress, flipperzero, google chrome, europol iocta, tetra, black arrow cyber, black arrow, threat intelligence, osint, ncsc, national cyber security centre, cpni, mi5, gchq, cert, nca, national crime agency, europol, interpol, enisa, cyber, information security, it security, cyber warfare, russia, north korea, china, iran
Black Arrow Cyber Threat Briefing 30 June 2023

Black Arrow Cyber Threat Briefing 30 June 2023:

-Zurich Insurance Group Secures Data Leak After Leaving Sensitive Data Publicly Accessible

-Employees Worry Less About Cyber Security Best Practices in the Summer

-Businesses are Ignoring Third-Party Security Risks

-Fear Trumps Anger When It Comes to Data Breaches – Angry Customers Vent, But Fearful Customers Don’t Come Back

-Over 130 Organisations and Millions of Individuals Believed to Be Impacted by MOVEit Hack, it Keeps Growing

-Widespread BEC Attacks Threaten European Organisations

-Lloyd’s Syndicates Sued Over Cyber Insurance

-95% Fear Inadequate Cloud Security Detection and Response

-The Growing Use of Generative AI and the Security Risks They Pose

-The CISO’s Toolkit Must Include Political Capital Within The C-Suite

-Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers as War Ministers Reliant on Cyber Crime

-SMBs Plagued by Exploits, Trojans and Backdoors

Read More
Black Arrow Adminarcserve, chrome, internet systems consortium, grafana, azure ad, sap, ddosia, powers, charming kitten, phonyc2, muddyc3, huawei, volt typhoon, zoho, monopolgy market, telegram, genworth, diablo iv, earlyrat, npm, pindos, super mario, k-12, clop, fis, putin, uber, siemens, schneider electric, barracuda, zurich, sec, zurich insurance group, moveit, malwarebytes, chatgpt, securities and exchange commission, federal trade commission, siemens electric, pwc, sony, ey, midnight blizzard, lloyds syndicates, university of california, ucla, capita, solarwinds, 3cx, cl0p, notpetya, lockbit, trickbot, conti, esxi, wagner, 8base, manchester university, ernst & young, calpers, singapore, pig-butchering, openai, lastpass, openssh, blacklotus, icedid, thirdeye, anasta, andariel, fluhorse, latitude, jokerspy, robotic falcon, multicloud, letmespy, jp morgan, sachklov, muddywater, powerstar, zyxel, fortinac, vmware aria operations, microsoft teams, muddles libra, mockingjay, outlook, microsoft 365, akira, tesla, twitter, metaverse, stalkerware, black arrow cyber, black arrow, threat intelligence, osint, ncsc, national cyber security centre, cpni, mi5, gchq, cert, nca, national crime agency, europol, interpol, enisa, nato, cyber, information security, it security, cyber warfare, russia, north korea, china, iran
Black Arrow Cyber Threat Briefing 23rd June 2023

Black Arrow Cyber Threat Briefing 23 June 2023:

-How the MOVEit Breach Shows Hackers' Interest in Corporate File Transfer Tools

-Attackers Discovering Exposed Cloud Assets Within Minutes

-Majority of Users Neglect Best Password Practices

-One in Three Workers Susceptible to Phishing

-Ransomware Misconceptions Abound, to the Benefit of Attackers

-Threat Actors Scale and Commoditise Uncommon Tools and Techniques

-Goodbyes are Difficult, IT Offboarding Processes Make Them Harder

-Security Budget Hikes are Missing the Mark, CISOs Say

-Understanding Cyber Resilience: Building a Holistic Approach to Cyber Security

-Emerging Ransomware Group 8Base Releasing Data on SMBs Globally

-Cyber Security Industry Still Fighting to Recruit and Retain Talent

-Financial Firms to Build Resilience in Face of Growing Cyber-Threats

-Fulfilling Expected SEC Requirements for Cyber Security Expertise at Board Level

Read More
Black Arrow Adminmoveit, accelion, fortra, dropbox, wetransfer, proofpoint, github, google workspace, slack, okta, 8base, cbest, knowbe4, sec, dora, infosecurityeurope, pwc, bbc, ba, avast, norton, sophos, cisa, fbi, ey, blackcat, adur, worthing, ups, chatgpt, onlyfans, diicot, condi, 3cx, reddit, capita, western digital, megaupload, asus, zyxel, chrome, trellix, lenovo, securities and exchange commission, rorschach, university of manchester, manchester university, usda, joe biden, rdstealer, mystic stealer, apt37, blacklotus, scarcruft, flea, chameldoh, gravityrat, apple, android, mirai, zeeland, pet feeders, us military, mondelez, sap, telegram, blockchain, influencers, social media, amazon, amazon s3, shadow it, intel, ssh, tsunami botnet, lockbit, killnet, gru, apt28, doj, us department of justice, cadet blizzard, apt15, red eyes, vmware, vmware vrealize, gifshell, wordpress, azure, gigabyte motherboards, triangulation spyware, repojacking, black arrow cyber, black arrow, threat intelligence, osint, ncsc, national cyber security centre, cpni, mi5, gchq, cert, nca, national crime agency, europol, interpol, enisa, nato, cyber, information security, it security, cyber warfare, russia, north korea, china, iran
Black Arrow Cyber Threat Briefing 24 March 2023

Black Arrow Cyber Threat Briefing 24 March 2023:

-Majority of SMBs Lack Dedicated Cyber Experts and Cyber Incident Response Plans

-Controlling Third-Party Data Risk Should Be a Top Cyber Security Priority

-IT Security Spending to Reach Nearly $300 Billion by 2026

-2023 Cyber Security Maturity Report Reveals Organisational Unpreparedness for Cyber Attacks

-Board Cyber Shortage: Don’t Get Caught Swimming Naked

-Should Your Organisation Be Worried About Insider Threats?

-UK Ransomware Incident Volumes Surge 17% in 2022

-Financial Industry Hit by Rising Ransomware Attacks and BEC

-55 zero-day Flaws Exploited Last Year Show the Importance of Security Risk Management

-Security Researchers Spot $36m BEC Attack

-New Victims Come Forward After Mass Ransomware Attack

-Ransomware Gangs’ Harassment of Victims is Increasing

-Wartime Hacktivism is Spilling Over Into the Financial Services Industry

Read More
Black Arrow Adminsecurities and exchange commission, sec, huntress, financial services information and analysis center, fs-isac, mandiant, google, clop, goanywhere, palo alto networks, lockbit, bianlian, hitachi, oakland, conti, trigona, dirkzwager, ring, ferrari, catb, saks fifth avenue, dole, toronto, dmarc, emotet, chatgpt, mispadu, naplistener, shellbot, scarcruft, samsung, google pixel, fbi, exynos, golang, hinatabot, tesla, ubuntu, macos, pwn2own, bitwarden, cve-2023-23397, killnet, azure, mirai, eufy, tesco, latitude, mastercard, nba, lowes, smb, powderroom, breachforums, fireblocks, bitgo, ethereum, linus tech tips, mitre, bitcoin, aws, okta, bbc, tiktok, metroplitan, meta, pompompurin, openai, mozilla, bard, yorotrooper, winter vivern, palantir, iridium, greek predator, bad magic, d.c. health link, xi, putin, chrome, gmail, operation tainted love, huawei, defender, snipping, netgear, orbi, edge, wordpress, veeam, ecuador, dea, intel, black arrow cyber, black arrow, threat intelligence, osint, ncsc, national cyber security centre, cpni, mi5, gchq, cert. nca, national crime agency, europol, interpol, enisa, nato, cyber, information security, it security
Black Arrow Cyber Threat Briefing 04 March 2022

Black Arrow Cyber Threat Briefing 04 March 2022

-Cyber Criminals Exploit Invasion of Ukraine

-UK Data Watchdog Urges Vigilance Amid Heightened Cyber Threat

-Phishing - Still a Problem, Despite All The Work

-Phishing Attacks Hit All-Time High In December 2021

-Ransomware Infections Top List Of The Most Common Results Of Phishing Attacks

-Social Media Phishing Attacks Are at An All Time High

-Insurance Giant AON Hit by a Cyber Attack

-How Prepared Are Organisations To Face Email-Based Ransomware Attacks?

-The Most Impersonated Brands in Phishing Attacks

-As War Escalates In Europe, It’s ‘Shields Up’ For The Cyber Security Industry

-2022 May Be The Year Cyber Crime Returns Its Focus To Consumers

-Kaspersky Neutral Stance In Doubt As It Shields Kremlin

Read More
Black Arrow Adminremcos, agent tesla, wizard spider, malware-as-a-service, bitdefender, ico, information commissioners office, john edwards, moscow, ukraine, apwg, abnormal security, crane hassold, egress, social media, vade, facebook, aon, sec, securities and exchange commission, phishalarm, reposify, reasonlabs, gazprom, kaspersky, kaspersky lab, eugene kaspersky, kremlin, bridgestone, toyota, nvidia, conti, axis, trickbot, emotet, teabot, sharkbot, lawyers, samsung, credit suisse, log4j, log4shell, tcp middlebox, foxblade, icann, ghostwriter, isaacwiper, wipers, cisco, expressway, telepresence cgroups, firefox, voipmonitor, gitlab, karma, proxyshell, salt security, microsoft teams, black arrow, black arrow cyber, cyber experts, cyber consulting, cyber investigators, cyber, cyber security, infosec, information security, threat intel, threat intelligence, threat report, business risk, business risks, cyber risk management, risk management, cyber risk assessment, risk assessment, cyber incident response, cyber incident response team, cyber emergency response, computer incident response, computer emergency response, emergency response, subject matter experts, it security, trusted adviser, trusted partner, vciso, virtual chief information security officer, viso, information security officer, security executive on demand, security as a service, security on demand, cyber security strategy, cyber strategy, british intelligence, national security, uk national security, military intelligence, mod, ministry of defence, police, law enforcement, ftse 100, ftse100, offshore financial services, gfsc, guernsey financial services commission, fortune 500, fortune500, ncsc, national cyber security centre, cpni, mi5, gchq, cert, cert-uk, cert.gg, cyber guernsey, guernsey cyber, nca, national crime agency, europol, interpol, enisa, nato, cisa, fbi, nsa, cia, dhs, odpa, office of the data protection authority, sme, smb, small business, medium sized business, accounting, law firms, legal sector, academia, education, schools, retail, maritime, aviation, aerospace, transport, defence, defense, defence contractor, cni, scada, ics, industrial control systems, operational technology, ot, healthcare, medical, pharma, pharmaceuticals, pci-dss, payment card, payment card industry, estate agents, estate agency, child safety, parental controls, regulated firms, financial services, critical infrastructure, executives, executive, insiders, insider threat, staff, users, end users, senior executives, c-suite, boards, human element, human centric security, human centric, weakest link, boardroom, board room, ciso, ceo, cto, cio, nist, cyber essentials, cyber essentials plus, iso 27001, iso27001, cap1753, cap 1753, caa, civil aviation authority, fraud investigations, forensics, cyber forensics, forensic investigations, expert witness, technical investigations, apt, china, russia, iran, north korea, nation state actors, ransomware, bec, business email compromise, email, social engineering, phishing, spear-phishing, whaling, credentials, credential stuffing, extortion, blackmail, denial of service, ddos, botnet, cryptomining, cryptojacking, rootkits, rootkit, shadow it, remote code execution, rce, zero-day, malware, vulnerability, vulnerabilities, vulnerability management, patch management, patching, insurance, cyber insurance, incident response, incident response plan, disaster recovery, disaster recovery plan, drp, business continuity, business continuity planning, business continuity plan, training, education and awareness training, awareness, exercising, exercise, proctored exercise, facilitated exercise, simulations, gap analysis, cyber gap analysis, board upskilling, senior executive cyber risk and governance, senior executive cyber risk and governance workshops, technical assessment, technical analysis, penetration testing, pentesting, physical penetration testing, tas, targeted attack simulations, iso 27001 iso27001, iasme, iasme governance, technical IT security, hackers, criminals, cyber criminals, cyber warfare, espionage, cyber espionage, fraudsters, fraud, scammers, scams, scam, organised crime, criminal actor, criminal actors, terrorism, terrorists, cyber terrorists, cyber terrorism, supply chain, third parties, mssp, msp, apple, mac, macos, ios, iphone, android, microsoft, windows, cloud, dark web, databases, external it, internal it, encryption, cryptocurrencies, iot, ai, endpoint protection, antivirus, antimalware, wfh, work from home, dns, email gateway, gdpr, online, open source, attack surface, andorra, anguilla, antigua and barbuda, aruba, bahamas, barbados, bermuda, british virgin islands, bvi, cayman islands, channel islands, ci, cyprus, dominica, dublin, dutch antilles, gibraltar, grenada, guernsey, isle of man, jersey, liechtenstein, london, luxembourg, malta, monaco, netherlands antilles, philippines, st kitts and nevis, st lucia, st vincent and grenadines, switzerland, turks and caicos islands, scotland, edinburgh, glasgow, bristol, southampton, portsmouth, exeter, europe, offshore, south west, south east, uk, england, great britain, british isles