Cybercrime

The NCSC’s refreshed cyber security guidance for larger organisations places particular emphasis on cloud, home working and ransomware

https://www.computerweekly.com/news/252500582/NCSC-cyber-guidance-targets-cloud-and-home-working

SolarWinds CEO tells NCSC’s CyberUK conference he is exploring the possibility of collaborating with other companies on collective cyber action against attacks backed by nation states

https://www.computerweekly.com/news/252500566/SolarWinds-CEO-calls-for-collective-action-against-state-attacks

The NCSC responded to a surge in online scams last year as it moved to protect both the general public and critical national services during the pandemic

https://www.computerweekly.com/news/252500457/NCSC-Active-Cyber-Defence-blocks-surge-of-pandemic-scams

New intelligence from UK and US cyber agencies suggests that APT29, or Cozy Bear, has been switching up its tactics

https://www.computerweekly.com/news/252500409/NCSC-CISA-publish-new-information-on-Russias-Cozy-Bear

Security experts at Black Hat Asia 2021 discuss the state of ransomware and supply chain attacks, two of the most common attack vectors that offer high returns for threat actors

https://www.computerweekly.com/news/252500389/Ransomware-supply-chain-attacks-show-no-sign-of-abating

A recent incident at an undisclosed customer sheds new light on how malicious actors exploit unpatched Microsoft Exchange servers

https://www.computerweekly.com/news/252500236/Sophos-How-timely-intervention-stopped-a-ProxyLogon-attack

Compromise of Merseyrail employee data seems to have begun after a key email account was hacked

Office 365 compromise likely led to Merseyrail ransomware attack (computerweekly.com)

We give a broad overview and insight into the discussions held at our quarterly Cyber Coordination Group meetings, with the aim of sharing the valuable insights found in these groups to the wider financial sector.

https://www.fca.org.uk/publications/research/insights-cyber-coordination-groups-2020

Sophos’ latest study finds that ransomware attacks are proving increasingly disruptive to their victims’ finances

https://www.computerweekly.com/news/252499796/Total-cost-of-ransomware-attack-heading-towards-2m

The Telegram instant messaging service is being used by malicious actors to manage a remote access trojan called ToxicEye

ToxicEye malware exploits Telegram messaging service (computerweekly.com)