General

SAP has issued a total of 74 notes in the first quarter of 2017. There were 28 notes issued in April. One of them as a critical priority (Hot News) and four of them as a high priority. The note…

SAP has issued a total of 80 notes in the first quarter of 2017. There were 23 notes in January. One of them as a critical priority (Hot News) and two of them as a…

The number of devices connected to the network is multiplying (PC, refrigerators, cars, airplanes, pacemakers …), while cybercriminals develop imaginative formulas to deceive these machines and the people behind these machines. A malware in the…

Cybercriminals have engineered a new scam using corporate mail, which is known as “CEO scam”. An alleged senior manager of the CEO orders a finance worker to make a transfer to a foreign bank account.…

Founded in 1979 and with a 2016 turnover of 4.3B USD and more than 21000 employees, Nemak  specializes in the production of high complex aluminum components for the automotive industry such as cylinder heads, engine…

In his last article, Álvaro Gómez Vieites explains the main aspects of the General Data Protection Regulation (GDPR) approved on April 27, 2016., which is going to  May 25th 2018. Álvaro Gómez is an associate…

Growing businesses face a range of challenges. As a business grows, different problems and opportunities demand different solutions. One of these challenges is user management. The existence of multiple types of systems, with different user…

It is a well-known fact that Segregation of Duties (SOD) is a top contributor for fraud activities and is a key part in achieving Sarbanes Oxley (SOX) Compliance. The challenge of achieving this is typically…

Much has been said about Denial of Service attacks during these last months. The extreme vulnerabilities shown against these kind of attacks (Sony, Spotify..) put back into question the cibersecurity. Denial of service is a…

One of the main cyber security trends in 2017 will be the rise of denial of service attacks. Last week, Thirty-four people, including several teenagers, have been arrested in an international police macro-operation for having caused…

2016 is about to end and it has become a year full of attacks that have compromised both large corporations and individuals 2017 presents itself as a year in which the creation of new `malware’…

Although there is growing awareness of the need to protect personal information online, the precautions taken by individuals remain insufficient. According to the Norton Cyber Security Insights report, 18% of reported cybercrime cases are for…

SAP, in its October security patches communication, has issued a total of 11 security updates, 2 of them as medium priority while the rest as low (9) priority. Among these vulnerabilities, 2 are related with Cross-site Scripting, 1…

It is possible that your company does not have specific software to monitor and analyze the security of the SAP systems, for example, SAP GRC (Governance, Risk and Compliance), but if you are a customer…

After the Netflix phishing, The National Cyber Security Institute (INCIBE), has detected a campaign of fraudulent emails that impersonate the bank Abanca, in order to steal user credentials. The INCIBE recommends to change passwords for…

Starting in NetWeaver 7.01 SP15, SAP ® includes a new tool, with no additional license cost to monitor access to sensitive data. Read Access Logging Restricting access to data is not always feasible, Read Access…

Yahoo has confirmed that they have to face the biggest cyber threat to a company in history, as it was estimated that about 500 million accounts had been compromised The information that was stolen from…

The Information Security standards dictate us that it is mandatory to have a password enabled on your computer, a measure that we know is not 100% sure but it helps to have an extra layer to…

Dropbox, the storage service in the cloud, joins the web services that have suffered large-scale theft of passwords and personal data, as it recently happened to Twitter or LinkedIn. In its official blog, Dropbox tried…

SAP, in its last security patches communication, has issued a total of 13 security updates, 3 of them as high priority while the rest as low (2), and medium priority (8). Among these vulnerabilities, 4…

Kaspersky Lab and Symantec have discovered a new malware called Project Sauron that aims to attack through the espionage of governments, military, telecommunications companies and scientific research centers. This virus steals passwords, addresses, and other data…

According to Gartner, this year, 81,600 million dollars will be invested in systems, products and security solutions, an amount  higher than the 0.6% that is going to experience the total of technology industry. Consulting services and cybersecurity…

In the ‘deep web’ -an internet unfocused that can not be accessed from classics browsers- there is a market that sells all kinds of stolen accounts. Initially,the interest was focused in bank  or PayPal accounts,…

Quadrooter is a new vulnerability of Android devices  that affects all Qualcomm chips, so more than 900 million smartphones and tablets are at risk. The user may unknowingly lose control of the device while a…

In order to reduce the impact, extent and to help victims of the ransomware or data hijacking, Europol has launched an initiative called “No more Ransom” Through a new web, Europol will provide those  new…

The European Parliament and the Council of the European Union approved the 6th of July the directive (EU) 2016/1148, which sets new measures to ensure a high common level of security into networks and information…

“The Ministry of Home Affairs has detected that in the last year the attacks on critical infrastructures of the state  have grown by 106%. (energy, water, communications, transportation and financial entities) This increase is the result of a better…

Inprosec will attend again the SAP GRC Europe event. This event is hosted in Vienna (Austria) SAP GRC (Governance, Risk, and Compliance) is a specialized SAP module which handles all risk types in SAP systems. Used…

The Spanish Internet User Security Office (OSI) reported today  a new malware that encrypts the data contained on the computer .This malware is spreading via an email with a Word file with a macro attached.…