SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

Global Stories

Almost a third of malware threats previously unknown - HP report
Malware

Almost a third of malware threats previously unknown - HP report

New report reveals that 29% of malware captured was previously unknown due to attackers using packers and obfuscation techniques.

By Shannon Williams • 5 min read • Tue, 23rd Mar 2021
Research reveals increase in critical, low complexity vulnerabilities
IoT Security

Research reveals increase in critical, low complexity vulnerabilities

Critical and low complexity vulnerabilities are on the rise, with over 10,000 logged in 2020, according to a new study by Redscan.

By Shannon Williams • 3 min read • Fri, 19th Feb 2021
2021's Most Wanted: Emotet continues reign as top malware threat
Malware

2021's Most Wanted: Emotet continues reign as top malware threat

The Emotet trojan continues to reign as top malware in January, despite international law enforcement taking control of its infrastructure.

By Shannon Williams • 4 min read • Wed, 17th Feb 2021
Vulnerability disclosures back to expected rates despite COVID-19 disruption
Security vulnerabilities

Vulnerability disclosures back to expected rates despite COVID-19 disruption

Vulnerability disclosures are returning to normal levels, with 2020 on track to surpass 2019, according to a report by Risk Based Security.

By Shannon Williams • 2 min read • Tue, 16th Feb 2021
Sophos unearths origin of prominent cryptominer
Firewalls

Sophos unearths origin of prominent cryptominer

The cryptominer was recently discovered when attackers targeted internet-facing database servers (SQL servers), and the MrbMiner was downloaded and installed.

By Staff Writer • 3 min read • Fri, 22nd Jan 2021
Check Point uncovers live Linux attack, urges users to take action
Distributed Denial of Service

Check Point uncovers live Linux attack, urges users to take action

Ongoing cyber attacks targeting Linux systems have been discovered, with users urged to patch their systems immediately, warns Check Point Research.

By Catherine Knowles • 3 min read • Wed, 20th Jan 2021
Sophos named a Numbering Authority in CVE programme
Firewalls

Sophos named a Numbering Authority in CVE programme

Sophos has become a Numbering Authority in the Common Vulnerabilities and Exposures programme, enabling it to assign CVE identification to its own products.

By Nick Forrester • 3 min read • Tue, 19th Jan 2021
22 billion records exposed from breaches in 2020 — report
Virtual Private Networks

22 billion records exposed from breaches in 2020 — report

The research also found that 35% of the breaches recorded by Tenable were caused by ransomware attacks, while 14% of breaches stemmed from email compromises.

By Staff Writer • 3 min read • Fri, 15th Jan 2021
Emotet remains leading malware in global threat index
Malware

Emotet remains leading malware in global threat index

The malware has impacted 7% of organisations globally, following a spam campaign which targeted more than 100,000 users per day during the holiday season.

By Shannon Williams • 4 min read • Mon, 11th Jan 2021
GitHub hosts more than 56 million developers in 2020
Marketing Technologies

GitHub hosts more than 56 million developers in 2020

GitHub's 2020 State of the Octoverse report reveals the latest trends in developer activity, including top languages and security vulnerabilities.

By Staff Writer • 3 min read • Mon, 7th Dec 2020
Claroty finds four vulnerabilities in Schneider Electric OT device
DataCentre infrastructure

Claroty finds four vulnerabilities in Schneider Electric OT device

Unmitigated vulnerabilities could give an attacker access to the device, enabling the attacker to break encryption, modify code, and run certain commands.

By Staff Writer • 3 min read • Thu, 19th Nov 2020
2020's most wanted malware: Trickbot and Emotet trojans driving spike in ransomware attacks
Malware

2020's most wanted malware: Trickbot and Emotet trojans driving spike in ransomware attacks

Trickbot and Emotet are being used to distribute ransomware against hospitals globally, according to research from Check Point.

By Shannon Williams • 4 min read • Tue, 10th Nov 2020
Securing SAP to ensure better operational security
Cybersecurity

Securing SAP to ensure better operational security

Australian government warns of growing cybercrime threat; organisations' intellectual property and financial information at risk.

By Cameron Sherrard • 2 min read • Thu, 8th Oct 2020
McAfee finds vulnerabilities in 'temi' the videoconferencing robot
Robotics

McAfee finds vulnerabilities in 'temi' the videoconferencing robot

Temi is commonly used in environments including businesses, healthcare, retail, hospitality, and other environments including the home.

By Staff Writer • 3 min read • Tue, 22nd Sep 2020
Malware and email scams targeting employees spread rapidly in Q2
Malware

Malware and email scams targeting employees spread rapidly in Q2

Malware exploiting a decade-old Microsoft Office vulnerability has surged by 400%, according to a study by NordVPN.

By Catherine Knowles • 3 min read • Fri, 18th Sep 2020
OT networks warned of vulnerabilities in CodeMeter software
Internet of Things

OT networks warned of vulnerabilities in CodeMeter software

Manufacturers using Wibu-Systems CodeMeter are urged to update to version 7.10 due to vulnerabilities that could allow attackers to take control of OT networks.

By Staff Writer • 3 min read • Wed, 16th Sep 2020
Ripple20 threat has potential for 'vast exploitation', ExtraHop researchers find
Advanced Persistent Threat Protection

Ripple20 threat has potential for 'vast exploitation', ExtraHop researchers find

One in three IT environments vulnerable to Ripple20 cyber threat, says ExtraHop. Attackers can exploit 19 vulnerabilities in the Treck networking stack.

By Catherine Knowles • 3 min read • Tue, 15th Sep 2020
Ripple20 threat could affect 35% of all IT environments – ExtraHop
Advanced Persistent Threat Protection

Ripple20 threat could affect 35% of all IT environments – ExtraHop

The vulnerabilities have the potential to 'ripple' through complex software supply chains, enabling attackers to steal data or execute code.

By Staff Writer • 2 min read • Mon, 14th Sep 2020
COVID-19 related email threats pose huge risk in 2020
Advanced Persistent Threat Protection

COVID-19 related email threats pose huge risk in 2020

According to the company's annual mid-year roundup report, Trend Micro blocked 8.8 million COVID-19 related threats, nearly 92% of which were email-based.

By Catherine Knowles • 3 min read • Mon, 31st Aug 2020