Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

December 2019

Visa Reports PoS Attacks Targeting North American Gas Stations

According to Visa, cybercrime groups have targeted North American gas stations with point-of-sale (PoS) malware. In the summer of 2019, three separate attacks were detected, but only two of the attacks impacted the PoS systems of fuel dispenser merchants. Despite this, Visa believes that these businesses will become an increasingly attractive target for criminal groups.

City of New Orleans Suffering from Last Week's Ransomware Attack

The City of New Orleans suffered a major cyber attack last Friday that left a string of public services impacted over the weekend, forcing the city's Mayor, LaToya Cantrell, to declare a state of emergency. City workers were forced to unplug machines on Friday morning after the attack was detected. In a press conference hosted that after, city officials claimed that there was no official network compromise.

Cybersecurity Certification Program for US Defense Contractors Expected in 2020

The US Department of Defense (DoD) is planning to roll out a new cybersecurity certification program for its contractors in an effort to better protect its supply chain from cyber threats. Ellen Lord, the undersecretary of defense for acquisition and sustainment, said this new cybersecurity maturity model certification (CMMC) program will play a critical role in ensuring that the organizations looking to score DoD contracts meet rigorous cybersecurity requirements.

UK Card Fraud Accounts for Half of All Losses Across Europe

New findings from FICO claim that UK card fraud accounts for over half of all losses across Europe. The firm's new European Fraud Map reveals that UK card fraud losses hit over £671 in 2018, representing a 19% increase from the losses accumulated in 2017. UK card fraud losses amount to almost half of the £1.6 billion in total losses recorded across the 19 countries in the European interactive map, including Ukraine, Russia, and Turkey.

American Gunmaker Smith & Wesson Hacked in Magecart Attack

The website of Smith & Wesson was targeted by digital skimmers last week as they planted malicious code designed to steal customer payment card information. According to Sanguine Security, the attackers planted a payment skimmer on the Smith & Wesson online store on Wednesday, November 27, during the busy Black Friday holiday shopping weekend. The firm claims that as of Monday, December 2 that the skimming code is still active.