email security - Security Ticks

Russian APT Group Caught Hacking Roundcube Email Servers

email security, Nation-State / SecurityTicks

Russian APT Group Caught Hacking Roundcube Email Servers 20/06/2023 at 20:24 By Ryan Naraine A Russian hacking group has been caught hacking into Roundcube servers to spy on government institutions and military entities in Ukraine. The post Russian APT Group Caught Hacking Roundcube Email Servers appeared first on SecurityWeek. This article is an excerpt from […]

React to this headline:

Russian APT Group Caught Hacking Roundcube Email Servers Read More »

Cybercriminals use legitimate websites to obfuscate malicious payloads

cybercrime, Egress, email security, Malware, News, phishing, report, scams, social engineering, threat, threats / SecurityTicks

Cybercriminals use legitimate websites to obfuscate malicious payloads 02/06/2023 at 06:33 By Help Net Security According to Egress, the evolving attack methodologies currently used by cybercriminals are designed to get through traditional perimeter security. “The evolution of phishing emails continues to pose a major threat to organizations, emphasizing the need to enhance defenses to prevent

React to this headline:

Cybercriminals use legitimate websites to obfuscate malicious payloads Read More »

Organizations spend 100 hours battling post-delivery email threats

attacks, Barracuda Networks, cyberattack, cybercrime, cybercriminals, email security, News, spear-phishing / SecurityTicks

Organizations spend 100 hours battling post-delivery email threats 30/05/2023 at 06:11 By Help Net Security Nearly every victim of a spear-phishing attack in the last 12 months saw impacts on their organization, including malware infections, stolen data, and reputational damage, according to Barracuda Networks. Barracuda Networks research finds 24% of organizations studied had at least

React to this headline:

Organizations spend 100 hours battling post-delivery email threats Read More »

Cybercriminals masquerading as MFA vendors

attacks, cybercriminals, email security, MFA, News, phishing, spam, VIPRE Security / SecurityTicks

Cybercriminals masquerading as MFA vendors 26/05/2023 at 07:20 By Help Net Security Cybercriminals are increasingly posing as multi-factor authentication vendors and small businesses are becoming more popular targets, according to VIPRE. Attachment-based malspam is on the rise Financial institutions (48%) are still the most targeted sector by a wide margin. Insider attacks now take on

React to this headline:

Cybercriminals masquerading as MFA vendors Read More »

Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868)

0-day, Barracuda Networks, Don't miss, email security, Hot stuff, News, vulnerability / SecurityTicks

Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) 25/05/2023 at 13:07 By Zeljka Zorz A vulnerability (CVE-2023-2868) in Barracuda Networks’ Email Security Gateway (ESG) appliances has been exploited by attackers, the company has warned. About CVE-2023-2868 CVE-2023-2868 is a critical remote command injection vulnerability affecting only physical Barracuda Email Security Gateway appliances, versions 5.1.3.001

React to this headline:

Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) Read More »

Threat Actor Abuses SuperMailer for Large-scale Phishing Campaign

cybercrime, email security, phishing / SecurityTicks

Threat Actor Abuses SuperMailer for Large-scale Phishing Campaign 23/05/2023 at 21:33 By Kevin Townsend A credential phishing campaign using the legitimate SuperMailer newsletter distribution app has doubled in size each month since January 2023. The post Threat Actor Abuses SuperMailer for Large-scale Phishing Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Threat Actor Abuses SuperMailer for Large-scale Phishing Campaign Read More »

Microsoft: BEC Scammers Use Residential IPs to Evade Detection

BEC, email security, Fraud & Identity Theft / SecurityTicks

Microsoft: BEC Scammers Use Residential IPs to Evade Detection 22/05/2023 at 14:20 By Ionut Arghire BEC scammers use residential IP addresses in attacks to make them seem locally generated and evade detection. The post Microsoft: BEC Scammers Use Residential IPs to Evade Detection appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Microsoft: BEC Scammers Use Residential IPs to Evade Detection Read More »

Malicious links and misaddressed emails slip past security controls

Armorblox, cybercrime, Email, email security, ESG, News, survey, threats / SecurityTicks

Malicious links and misaddressed emails slip past security controls 22/05/2023 at 06:33 By Help Net Security The majority of organizations use six or more communication tools, across channels, with email remaining the channel seen as the most vulnerable to attacks (38%), according to Armorblox. Respondents mentioned multi-channel attacks are gaining momentum and frequency. More than

React to this headline:

Malicious links and misaddressed emails slip past security controls Read More »