SecurityTicks

Money-grubbing crooks abuse OAuth – and baffling absence of MFA – to do financial crimes 14/12/2023 at 14:17 By Jessica Lyons Hardcastle Business email compromise, illicit cryptomining, phishing … if it makes a dollar, this lot do it Multiple miscreants are misusing OAuth to automate financially motivated cyber crimes – such as business email compromise […]

React to this headline:

Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing Attacks 14/12/2023 at 14:16 By Threat actors affiliated with the Russian Foreign Intelligence Service (SVR) have targeted unpatched JetBrains TeamCity servers in widespread attacks since September 2023. The activity has been tied to a nation-state group known as APT29, which is also tracked as BlueBravo, Cloaked Ursa,

React to this headline:

Surprise! Email from personal. [email protected] is not going to contain good news 14/12/2023 at 13:07 By Jessica Lyons Hardcastle Internet plod highlight tactics used by cruel Karakurt crime gang Karakurt, a particularly nasty extortion gang that uses “extensive harassment” to pressure victims into handing over millions of dollars in ransom payments after compromising their IT

React to this headline:

Europe inches closer to insisting gig workers are treated as employees 14/12/2023 at 12:03 By Thomas Claburn If it looks like a job, and is supervised like a job, it’ll be classified as a job Millions of contractors for digital platforms – often referred to as gig workers – may soon be classified as employees

React to this headline:

UK government woefully unprepared for ‘catastrophic’ ransomware attack 14/12/2023 at 11:17 By Brandon Vigliarolo Extortionware ‘relentlessly deprioritized’ and even King Charles seems oblivious to danger, scathing report finds The UK has failed to address the threat posed by ransomware, leaving the country at the mercy of a catastrophic ransomware attack that the Joint Committee on

React to this headline:

New Hacker Group ‘GambleForce’ Tageting APAC Firms Using SQL Injection Attacks 14/12/2023 at 10:16 By A previously unknown hacker outfit called GambleForce has been attributed to a series of SQL injection attacks against companies primarily in the Asia-Pacific (APAC) region since at least September 2023. “GambleForce uses a set of basic yet very effective techniques, including SQL

React to this headline:

SAP admits attempt to adapt on-prem security for its cloud flopped 14/12/2023 at 10:02 By Simon Sharwood Software giant learned the hard way that lift-and-shift isn’t easy SAP has revealed that its attempts to create an Endpoint Detection and Response (EDR) tool for its cloud “was abandoned after a year and a half as a

React to this headline:

Microsoft Takes Legal Action to Crack Down on Storm-1152’s Cybercrime Network 14/12/2023 at 09:16 By Microsoft on Wednesday said it obtained a court order to seize infrastructure set up by a group called Storm-1152 that peddled roughly 750 million fraudulent Microsoft accounts and tools through a network of bogus websites and social media pages to

React to this headline:

GM’s Cruise sheds nine execs in the name of safety and integrity 14/12/2023 at 09:02 By Laura Dobberstein Robotaxi firm’s car ran over a woman, then it allegedly misled investigators GM’s self-driving taxi outfit, Cruise, has dismissed nine execs – including its chief operating officer – after staff withheld information regarding an incident in which

React to this headline:

AI security risks: Separating hype from reality 14/12/2023 at 08:15 By By investing in artificial intelligence training and the necessary tools, security professionals can harness the power of AI to enhance their capabilities. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Adobe warns it may face massive fines for subscription cancellation practices 14/12/2023 at 07:47 By Simon Sharwood Otherwise in rude health after posting best-ever results Adobe has revealed it may have to fork out “significant monetary costs or penalties” as a result of a US Federal Trade Commission (FTC) investigation of its subscription cancellation practices.…

React to this headline: