Topics In Demand
Notification
New

No notification found.

Express Blog: DSCI Threat Intelligence and Research
Express Blog: DSCI Threat Intelligence and Research

October 5, 2020

2

0

In the current security landscape, there is a growing threat of cyber-attacks. The majority of the attacks occurred through phishing and in most cases have arrived through email attachments or via the target organization’s websites or phone/SMS. Cybercriminals usually launch large spam campaigns, in which thousands of deceptive emails are sent which are presented as “important”, “urgent” and highly targeted. A few of the breaches also occur with the help of stolen or weak credentials and human error. ‘DSCI Threat Intelligence and Research Team’ have observed following cyber threat patterns during last month (Fig.1.):

Also due to ignorance in critical security updates (bug fixes, Sec Feature update, and others), organizations still struggling with minor/ major breaches. For example, recently multiple vulnerabilities (CVE-2020-2243 XSS, CVE-2020-2239: date disclosure vulnerability) were identified in Jenkins Plugins respectively and were asked to patch immediately. Process of patching required to be very agile and automated in the advanced threat landscape.

These days, data breaches are targeting the enterprise with the intent to inflict reputational damage or harm a business function or an individual, or theft of valuable data. In today’s stringent regulatory environment, stolen data can cost organizations heavy penalties, low consumer trust, and huge financial loss.

Cyber Threats

Please visit this link and learn more about recent cyber threats: https://www.dsci.in/blogs/express-blog-dsci-threat-intelligence-and-research/

Recommendations:

For detailed recommendations, please read DSCI Threat Intelligence and Research advisory.


That the contents of third-party articles/blogs published here on the website, and the interpretation of all information in the article/blogs such as data, maps, numbers, opinions etc. displayed in the article/blogs and views or the opinions expressed within the content are solely of the author's; and do not reflect the opinions and beliefs of NASSCOM or its affiliates in any manner. NASSCOM does not take any liability w.r.t. content in any manner and will not be liable in any manner whatsoever for any kind of liability arising out of any act, error or omission. The contents of third-party article/blogs published, are provided solely as convenience; and the presence of these articles/blogs should not, under any circumstances, be considered as an endorsement of the contents by NASSCOM in any manner; and if you chose to access these articles/blogs , you do so at your own risk.


MediaDSCI

© Copyright nasscom. All Rights Reserved.