El Diario del CISO El Diario del CISO (THE CISO JOURNAL) EDICIÓN 2/19

EL DIARIO DEL CISO (THE CISO JOURNAL) Pensando y Trabajando por un Líder de Seguridad Digital Fileless Infection Steals Creds with Bank Trojan - Infosecurity Magazine A new variant of the password-stealing Ursnif bank Trojan has been found in the wild delivering fileless infections while remaining undetected, according to Cisco Talos Intelligence. Airbus Says Staff Caught in Data Breach Digital Growth Exposes Firms to Complexity and Threats Execs Remain Weak Link in Cybersecurity Chain FDD Finds Trump’s Cyber Policies Are Sensible Global Ransomware Attack Could Cost $193 Billion Iran APT Group Targets Foreign Embassies Kwik-Fit in Trouble After IT Systems Go Down Matrix Ransomware: A Threat to Low-Hanging Fruit Most IT Pros Share and Reuse Passwords: Report New UK Fraud Rules Set to Empower Victims Report: Majority of Small UK Businesses ‘Ignoring GDPR Risks’ Third-Party Breaches Plague Multiple Industries UK Government Pledges Skills and IoT Funding US Launches Major Effort to Disrupt North Korean botnet White Hat Ball 2019 Raises £193,000 for NSPCC’s Childline Service Critical FaceTime bug turns iPhones, Macs into eavesdropping tools - Help Net Security A shocking and easily exploitable FaceTime bug allows people to listen in on other users of Apple devices by simply calling them through the service. $1.7 billion in cryptocurrency was stolen and scammed in 2018 Emotet: A veritable Swiss Army knife of malicious capabilities Employees report 23,000 phishing incidents annually, costing $4.3 million to investigate ENISA outlines top cyber threats and trends in 2018 Enterprises are struggling with cloud complexity and security Facebook plans to integrate WhatsApp, Messenger and Instagram Global IT spending to reach $3.8 trillion in 2019, up 3.2% from 2018 How privacy and security concerns affect password practices How to know when you're ready for a fractional CISO Industry reactions to Data Privacy Day 2019 Is your organization ready for the data explosion? Safeguarding your data from human error and phishing attacks with the cloud The biggest cybersecurity challenge? Communicating threats internally What steps consumers need to take to protect themselves online Japan to Hunt Down Citizens’ Insecure IoT Devices Creating a Security Culture & Solving the Human Problem Japan will carry out a “survey” of 200 million deployed IoT devices, with white-hats trying to log into internet-discoverable devices using default credentials. People are the biggest weakness to security breaches; people can also be your organization's biggest defense. 2019 Already Marred By Slew of Data Breach Incidents 2019 and Beyond: The (Expanded) RSAC Advisory Board Weighs in on What’s Next: Pt. 2 Airbus Data Takes Flight; and Billions of Credentials Dumped on Dark Web Attackers Can Track Kids' Locations via Connected Watches Chafer APT Takes Aim at Diplomats in Iran with Improved Custom Malware Cybercriminals Aim for the Super Bowl Goal Posts Houzz Urges Password Resets After Data Breach Prepare to Defend Your Network Against Swarm-as-a-Service TheMoon Rises Again, With a Botnet-as-a-Service Threat Credential-Sniffing Phishing Attacks Erupted in 2018 Threatpost News Wrap Podcast For Feb. 1 3 Ways Companies Mess Up GDPR Compliance the Most 8 Cybersecurity Myths Debunked Airbus Employee Info Exposed in Data Breach FaceTime Bug an AppSec Fail Iran Ups its Traditional Cyber Espionage Tradecraft Japan Authorizes IoT Hacking Justice Dept. Alerting Victims of North Korean ... Massive DDoS Attack Generates 500 Million Packets ... Rubrik Data Leak is Another Cloud Misconfiguration ... US Law Enforcement Shuts Down Massive Marketplace ... Why Privacy Is Hard Work Israel blocks Iran cyber-attacks 'daily': Netanyahu - ET CISO Russia hit by new wave of ransomware spam Prime Minister Benjamin Netanyahu on Tuesday accused arch- foe Iran of regularly launching cyber-attacks on Israe January 2019 has seen an uptick in detections of malicious JavaScript email attachments with Russian users hit by a large wave of ransomware- spreading spam. Airbus reports breach into its systems after cyber attack Cyber attacks outpacing physical terror attacks Data privacy day: Here’s all you need to know about risks and remedies of 'Indian Data Protection bill' European heavyweights Airbus, Altran targeted by cyberattacks Hacks and facts: 10 things you didn't know about data privacy Potential global cyber attack could cause $85 bln-$193 bln worth of damage - report U.S. citizen leaks data on 14,200 people in Singapore with HIV ‘We’re coming for you’, global police tell DDoS attack buyers “Love you” malspam gets a makeover for massive Japan-targeted campaign Cybercrime black markets: Dark web services and their prices Four new caches of stolen logins put Collection #1 in the shade Japan to probe citizens’ IoT gadgets in the name of security Russia hit by new wave of ransomware spam Bankinfosecurity Information-management Aetna Fined Yet Again for Exposing HIV Information Airbus Hacked: Aircraft Giant Discloses Data Breach Bangladesh Bank Sues to Recover Funds After Cyber Heist Privacy: Several States Consider New Laws Stolen RDP Credentials Live On After xDedic Takedown Yahoo's Proposed Data Breach Lawsuit Settlement: Rejected How organizations need to react to new data privacy challenges Pentagon's cybersecurity found unable to stay ahead of attackers Perceptions and reality of cyber defenses differ widely, study reveals Shortages of talent, training haunt cybersecurity efforts The search for key tech talent will get harder and more costly in 2019

El Diario del CISO El Diario del CISO (THE CISO JOURNAL) EDICIÓN 2/19 | Page 5