Andrew Eversden reports: The National Institute of Standards and Technology is asking for public comments on a new report that provides insight into how organizations can integrate cybersecurity into enterprise risk management. The document, titled “NIST-Interagency Report 8286 Integrating Cybersecurity and Enterprise Risk Management,” advises organizations on how to improve the cybersecurity risk information they…
Category: Commentaries and Analyses
COVID-19 Cybersecurity Advice: FTC, NIST, and CISA Release Guidance on Secure Teleworking and Critical Infrastructure Jobs
Ashden Fein, Trisha Anderson, Libbie Canter and Caleb Skeath of Covington & Burling write: In response to the drastic increase of U.S. employees working remotely, the U.S. Federal Trade Commission (“FTC”) and the U.S. National Institute of Standards and Technology (“NIST”) have both issued guidance for employers and employees on best practices for teleworking securely. …
FBI sees rise in fraud schemes related to the coronavirus (COVID-19) pandemic
A public service announcement issued by the FBI on Friday: Scammers are leveraging the COVID-19 pandemic to steal your money, your personal information, or both. Don’t let them. Protect yourself and do your research before clicking on links purporting to provide information on the virus; donating to a charity online or through social media; contributing…
Ransomware attackers pledge to back off attacking medical entities during pandemic
“We’re all in this together” took on new meaning yesterday when a ransomware gang published a statement saying that they were offering their victims (whom they refer to as “partners”) discounts. And in response to an inquiry by Lawrence Abrams of Bleeping Computer, Maze Team also committed to not attacking medical entities during this pandemic…
France warns of new ransomware gang targeting local governments
Catalin Cimpanu reports on a new ransomware threat to local governments. France’s cybersecurity agency sounded the alarm. The alert, issued by France’s CERT team, points to a rising number of attacks carried out with a new version of the Mespinoza ransomware strain, also known as the Pysa ransomware. This ransomware strain was first spotted making victims last…
UK: Covid-19 response forces halt to NHS cyber security checks
Nick Carding reports from the between-a-rock-and-a-hard-place dept.: Security checks to keep the NHS safe from hackers have been delayed to help managers deal with covid-19. The service has also been warrned of attempts to exploit the pandemic by online fraudsters. The six-month delay means NHS trusts do not need to complete a cybersecurity checklist until…