Subterms
Getty Images/iStockphoto Google has released a security update for its Google Chrome browser on Windows, Mac and Linux to fix ten security vulnerabilities, some of which could allow remote attackers to crash vulnerable systems. Google has detailed some of the fixes in a Google Chrome release update – although the company is currently withholding full […] More
Getty Images A year is a long time in cybersecurity. Certainly, there are some constants. Ransomware has been a major cybersecurity issue for years, but shows no signs of going away as cyber criminals continue to evolve their attacks. And significant numbers of enterprise networks remain vulnerable, often as a result of security flaws for […] More
Image: Getty Microsoft has released 64 patches addressing security vulnerabilities across its products including 11 flaws that are classed as critical – and six vulnerabilities that are actively being exploited by cyber attackers. The security flaws impact Microsoft products including Windows, Microsoft Azure, Microsoft Exchange Server, Microsoft Office and more, some of which have […] More
Image: Getty Images / Westend1 Almost a third of chief information security officers (CISOs) and IT security managers in the UK and US are considering leaving their current organization, according to new research. Not only that, but a third are planning to quit their jobs within the next six months. Cybersecurity firm BlackFog surveyed over […] More
A recent data breach that hit eight Shangri-La hotels is unlikely to have a large impact on foreign government delegates who attended a high-level defence summit in Singapore, which was held at the hotel. Hackers claiming to have instigated the attack apparently have made contact with the hotel chain. Shangi-La Group said Friday it received an email from senders who claimed responsibility for the data security breach that it announced on September 30. As a precaution, the hotel group said it informed the relevant law enforcement and regulators about the email. It added that more details would be provided when it had more to share. The data breach had affected eight of its hotels, including in Singapore, Taipei, Tokyo, Hong Kong, and Chiang Mai. In an email the hotel chain sent to affected guests, Shangri-La Group’s senior vice president of operations and process transformation Brian Yu said a “sophisticated threat actor” had bypassed the company’s cybersecurity monitoring systems undetected and “illegally accessed the guest databases”. Its investigation determined that the breach had occured between May and July this year, Yu said. The affected databases had contained personal information such as names, phone numbers, and email addresses as well as membership numbers and reservation dates. According to Yu, data such as passport numbers, identification numbers, dates of birth, and credit card numbers were encrypted. ZDNET emailed Shangri-La with questions on how the breach occurred, why it was undetected for four months, and what the hackers had asked for it their email. This article will be updated when the hotel responds. In a statement following the incident, Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) said it was notified about the breach in the evening of September 29. It said personal data of more than 290,000 customers in Hong Kong might have have been compromised in the breach, which affected three local hotels including Kowloon Shangri-La.Expressing disappointment that customers as well as PCPD were only informed more than two months after Shangri-La was aware of the incident, the Hong Kong privacy commissioner said it had commenced a compliance check on the breach.Singapore on Monday said it also was working with the hotel group to improve safeguards. Defence ministers from around the globe, including the US, Japan, and Australia, had gathered at a defence summit held at Shangri-La Singapore in June, during which the hotel’s database already had been infiltrated and the breach undetected. The impact on guests, though, was likely to be “minimal”, said Singapore’s Ministry of Communications and Information (MCI) in a written parliamentary response. “The majority of the Shangri-La hotel guests who attended the 19th Shangri-La Dialogue, especially dignitaries, registered in groups through their embassies without submitting their personal details,” MCI said, adding that some hotel guests who provided their personal particulars had been contacted by the hotel group about the breach. While the impact on the summit was “likely to be minimal”, MCI said Singapore’s Defence Ministry was taking further steps with the summit organiser as well as Shangri-La to “enhance safeguards”. RELATED COVERAGE More
Image: Getty/MoMo Productions Cyber crooks are making almost 1,000 attempts to hack account passwords every single second – and they’re more determined that ever, with the number of attacks on the rise. The figures come from Microsoft’s Digital Defense Report 2022 and are based on analysis of trillions of alerts and signals collected from the […] More
Image: Hinterhaus Productions/GETTY Cloud adoption is not slowing down, but that doesn’t mean 2023 is going to be an easy year for users of on-demand computing services. According to a recent report by tech analyst Gartner, worldwide consumer spending on public cloud services is forecast to grow 20.7% to $591.8 billion in 2023, up from […] More
There is a misconception that all hacking is illegal. However, hacking is simply identifying weaknesses in a device — whether it is a PC, smartphone, or another physical object — and software, including apps, and attempting to exploit them.This could include a computer network, old tech equipment, or a website’s backend control system. Hacking, in itself, doesn’t automatically mean unauthorized entry. There are companies out there that ask for ethical hackers to test their software for weaknesses and will reward them financially for their findings.It is only when a hacker uses their skills for unauthorized and criminal purposes, theft, or destruction that it becomes illegal. This could include breaking into a network to deploy malware or stealing confidential information. More
