The structure of IT security teams varies across different businesses. Of those that have a dedicated in-house security team, many roles are involved – CISO, risk and compliance groups, security ops centre, threat intelligence teams and malware analysis teams to name a few. This complex division of responsibilities may work harmoniously, but what happens when one element fails? In-house security teams involve many roles – CISO, risk and compliance groups, security ops centre, threat intelligence teams and malware analysis teams to name a few. This complex division of responsibilities may work harmoniously, but what happens when one element fails? Scott Dodds of Ultima MSP argues that outsourcing a business's security function to a managed service provider (MSP) could provide the ability to deliver greater compliance and greater efficiency of cyber security solutions. But how easy is it to effectively outsource the security function?

Credential abuse is a major issue facing organisations of all sizes. It affects not only simple login processes but also solutions and technologies such as application programming interfaces (APIs), the deployment of Internet of Things (IoT) devices and machine-to-machine authentication. Cyber criminals and nation-state attackers alike have automated the process of credential abuse while also refining highly targeted attacks. And the problem is getting worse. Credential abuse is a major issue facing organisations of all sizes. Cyber criminals and nation-state attackers alike have automated the process while also refining highly targeted attacks. The problem is getting worse and credential abuse presents itself in many forms. And there are equally as many solutions touted by vendors, all of which have their own challenges and weaknesses. However, there are successful solutions available and tackling the issue just takes a proper awareness of the problem and applying the appropriate technology and training, writes Steve Mansfield-Devine.

Strangely enough, we have a professional photographer to thank for the 3-2-1 back-up strategy that many organisations around the world employ today. Peter Krogh originally shared the concept in his 2009 book, The DAM Book: Digital Asset Management for Photographers . 1 This back-up strategy has helped to prevent data losses for an untold number of organisations. However, in the world of digital, 11 years is a very long time and, arguably, the strategy is now ripe for an update, particularly in the face of the ongoing and growing scourge of ransomware attacks.

KPMG and the Control System Cyber Security Association International – aka (CS)2AI – have released the first of what will become an annual series of reports looking at control system (CS) and operational technology (OT) security.

Cyber criminals are exploiting the spread of Covid-19 in order to carry out fraud and cybercrime, pinpointing aid programmes as easy targets. With the pandemic spreading apace, funds are being issued hastily to provide service and support to local communities. Trust is being exploited by these malevolent actors. Fraud is evolving continuously and the pandemic has given cyber criminals unique opportunitiesto leverage existing attack techniques. Traditional fraud detection solutions are not powerful enough because they are built on relational databases that provide no context for the data. By comparison, graphs not only explain individual data points but also their relationships with one another. This enables even the most complex relationships to be shown in a meaningful way, explains Amy Hodler of Neo4j.

Can an in-depth analysis of elements from cyber attack campaigns teach us something new? The answer is yes. As we've seen all too often, crypto-mining campaigns often initiate a vicious circle that starts by infecting and exploiting the host to seek new targets and infect new victims with the same malware. Can an in-depth analysis of elements from cyber attack campaigns teach us something new? The answer is yes. Based on data from a honeypot, Assaf Morag of Aqua Security examines the mechanisms used to automatically infect a host with crypto-miners and then seek out new vulnerable hosts and infect them as well. He also analyses the IPs of the victims. The conclusions reveal an increasing number of vulnerable IPs and ever-greater sophistication by attackers.