Oktacron - Cyber Security RSS Feeds History

What to do if your antivirus stops you from opening a website | Kaspersky official blog

kaspersky Sep 13, 2021 Products

If you’re sure a site is safe, but your antivirus app is blocking it, you can solve the problem without disabling protection. In the case of Kaspersky Internet Security, Kaspersky Total Security, or Kaspersky Security Cloud, here’s what to do. If Kaspersky blocks a link If you see an “Access show more ...

denied” message, first of all, think about when and how you plan to use the site. If you don’t plan to visit again, then it’s probably simpler (and safer) to allow access just once. You can do so directly in the browser, without even going into the settings. The antivirus utility will not remember your choice and will warn you again next time you visit the site. Click Show details on the warning page. You will see why the antivirus flagged the site and the date it was added to the denylist; If you want to proceed, click Wish to continue. Performing a one-time exclusion If you plan to visit the site frequently, you may prefer to add it to the exclusions list. How to create an exclusions list in Kaspersky Internet Security or Kaspersky Security Cloud Our security solutions scan Web pages and sites to assess their safety. If you need regular access to a site your antivirus app considers unsafe, you can add it to the exclusions list to exempt it from scans permanently (or until you change your mind). Select Protection, then Web Anti-Virus in Kaspersky Internet Security’s (or Kaspersky Security Cloud’s) settings; Configuring Kaspersky Internet Security or Kaspersky Security Cloud Click Advanced Settings; Web Anti-Virus settings in Kaspersky Internet Security or Kaspersky Security Cloud Scroll to the bottom and click Trusted URLs; List of advanced Web Anti-Virus settings in Kaspersky Internet Security or Kaspersky Security Cloud Click Add to add a URL as an exclusion. You can also manage, edit, and, if necessary, delete exclusions in this window; The Add Exclusion window Enter the URL of the site you want to exclude from threat scans; Adding a trusted URL Save your changes; Make sure there is a check mark next to Do not scan web traffic from trusted URLs. Disabling traffic scanning Digging deeper For a more detailed look at your Web antivirus settings, including how to create a list of exclusions in Kaspersky Internet Security, see our Knowledge Base. Users of Kaspersky Security Cloud may also want to read details about our Web page scanning. Conclusion Remember that even popular websites can get hacked and compromised. At the same time, cybercriminals sometimes disguise malicious pages as legitimate Web resources. Safe browsing means staying alert and not thoughtlessly dismissing the occasional security warning. When your antivirus utility signals a threat, we recommend playing it safe and not visiting the site. If you really need to follow a link that may be unsafe, however, then minimize the risk — not by disabling protection, but by adding the site as an exclusion.

County I.T. Supervisor Mined Bitcoin at the Office, Prosecutors Say

cyware Sep 13, 2021 Breaches and Incidents

A Long Island man was charged on Wednesday with using his position as an I.T. supervisor for Suffolk County to mine cryptocurrency from government offices, costing the county thousands of dollars in electricity.

North Korea's Kumsong 121 recently employed social media to launch a cyber attack

cyware Sep 13, 2021 Threat Actors

The North Korean hacker group Kumsong 121 recently launched a cyber attack using social media. Computer and mobile phone users should be wary as North Korean hacking attacks grow more sophisticated.

Network security market growth driven by remote work popularity and security needs

cyware Sep 13, 2021 Trends, Reports, Analysis

Frost & Sullivan’s recent analysis of the Asia-Pacific (APAC) network security (NWS) market finds that the increasing acceptance of remote work and adoption of cloud, the remote workplace, collaboration, and security are driving growth.

REvil ransomware is back in full attack mode and leaking data

cyware Sep 13, 2021 Malware and Vulnerabilities

Since 2019, the REvil ransomware operation, aka Sodinokibi, has been conducting attacks on organizations worldwide where they demand million-dollar ransoms to receive a decryption key and prevent the leaking of stolen files.

LockBit 2.0: Ransomware Attacks Surge After Successful Affiliate Recruitment

cyware Sep 13, 2021 Malware and Vulnerabilities

After a brief slowdown in activity from the LockBit ransomware gang following increased attention from law enforcement, LockBit is back with a new affiliate program, improved payloads and a change in infrastructure.

Hackers Steal Puma Source Code for an Internal Application

cyware Sep 13, 2021 Breaches and Incidents

Hackers have stolen information from sportswear maker Puma and are currently trying to extort the company into paying a ransom demand, threatening to release the stolen files on a dark web portal.

Android malware distributed in Mexico uses Covid-19 to steal financial credentials

cyware Sep 13, 2021 Malware and Vulnerabilities

McAfee Mobile Malware Research Team has identified malware targeting Mexico. It poses as a security banking tool or as a bank application designed to report an out-of-service ATM.

APT-C-36 Updates Its Long-term Spam Campaign Against South American Entities With Commodity RATs

cyware Sep 13, 2021 Threat Actors

APT-C-36 has been known to send phishing emails to various entities in South America using publicly available remote access tools (RATs). Over time, the threat actor switches from one RAT to another.

Ransomware groups continue assault on healthcare orgs as COVID-19 infections increase

cyware Sep 13, 2021 Breaches and Incidents

Ransomware groups have shown no signs of slowing down their assault on hospitals, seemingly ramping up attacks on healthcare institutions as dozens of countries deal with a new wave of COVID-19 infections thanks to the potent Delta variant.

JumpCloud Raises $159M To Aid User And Device Management

cyware Sep 13, 2021 Companies to Watch

JumpCloud, an identity management provider, has closed its Series F round and notched a $2.56 billion valuation to add additional capabilities to its directory platform and drive channel sales.

Singapore moots 'foreign interference' law with powers to issue online platforms take-down order

cyware Sep 13, 2021 Laws, Policy, Regulations

Singapore has mooted new laws that will arm the government with the ability to issue directives to various platforms, including social media and websites, to remove or block access to content deemed part of hostile information campaigns.

What’s Behind the Leaks of Customer Data From Retailer Databases?

cyware Sep 13, 2021 Expert Blogs and Opinion

Retail data breaches involving customer data happen often today. However, they tend to be smaller in size than health care, finance, or government breaches. So, the general public notices them less. Yet, they happen more often than realized.

IoT Attacks Ramps up at 2X Speed

cyware Sep 13, 2021 Trends, Reports, Analysis

According to Kaspersky, the first half of 2021 witnessed 1.5 billion IoT attacks, double the number from the previous year, with a variety of intentions, including mining cryptocurrency and stealing data. Attackers are largely using weak passwords to infect IoT targets. IoT users are recommended to avoid using default passwords and always update devices with the latest firmware.

Hackers Target Golden SAML Tokens for Network Access

cyware Sep 13, 2021 Threat Actors

An APT group spotted targeting the Active Directory server of a victim’s Office365 environment by gaining access to the secret SAML tokens, which generally pass information about users, logins, and attributes between the identity and service providers. Experts suggest implementing additional layers of show more ...

protection for SAML certificates, and in case of compromise, re-issue certificates on the AD FS twice and force re-authentication for all users.

Sodinokibi Ransomware through the Lens of IR and Collaborative Threat Intelligence

cyware Sep 13, 2021 Threat Intel & Info Sharing

Security analysts have used Incident Response (IR) and shared intelligence together for analyzing Sodinokibi ransomware’s behavior and offered a similar collaborative approach to counter threats. IBM researchers have assorted Sodinokibi TTPs from many of its attacks and laid bare its activities in five stages. show more ...

Threat intelligence collected during ransomware investigations could greatly improve analysts’ understanding of ransomware gangs.

BlackMatter Ransomware Hits Medical Technology Giant Olympus

cyware Sep 13, 2021 Malware and Vulnerabilities

Olympus, a leading medical technology company, is investigating a "potential cybersecurity incident" that impacted some of its EMEA (Europe, Middle East, Africa) IT systems last week.

WhatsApp details plans to offer encrypted backups

cyware Sep 13, 2021 Trends, Reports, Analysis

WhatsApp announced on Friday it will be offering its users end-to-end encrypted backups later this year. Users will have a choice for how the encryption key used is stored.

Department of Justice and Constitutional Development of South Africa hit by a ransomware attack

cyware Sep 13, 2021 Malware and Vulnerabilities

A ransomware attack hit the Department of Justice and Constitutional Development of South Africa. Multiple services including email and bail services were impacted by the ransomware attack.