Out with the old and in with the improved: MFA needs a revamp 2024-01-19 at 08:02 By Help Net Security From AI to ZTA (zero-trust architecture), the technology responsible for protecting your company’s data has evolved immensely. Despite the advances, cybercriminals repeatedly find new and creative ways to gain access to sensitive information. This can […]
Out with the old and in with the improved: MFA needs a revamp Read More »
The right strategy for effective cybersecurity awareness 2024-01-17 at 07:31 By Helga Labus Employees play a significant role in safeguarding organizational assets. With a constantly evolving threat landscape, cybersecurity awareness training is an essential component in creating a good security culture. Why cybersecurity awareness training? 81% of organizations were hit by malware, phishing, and password […]
The right strategy for effective cybersecurity awareness Read More »
Flipping the BEC funnel: Phishing in the age of GenAI 2024-01-15 at 08:02 By Help Net Security For years, phishing was just a numbers game: A malicious actor would slap together an extremely generic (and usually poorly-written) email and fire it out to thousands of recipients in the hope that a few might take the […]
Flipping the BEC funnel: Phishing in the age of GenAI Read More »
The growing challenge of cyber risk in the age of synthetic media 2024-01-09 at 07:01 By Help Net Security As AI tools become more widespread, impersonation and deception have become easier. However, organizations are combating this issue with policies and technological solutions. In this Help Net Security video, Mike Bechtel, Chief Futurist at Deloitte, discusses […]
The growing challenge of cyber risk in the age of synthetic media Read More »
Social engineer reveals effective tricks for real-world intrusions 2024-01-08 at 08:31 By Mirko Zorz In this Help Net Security interview, Jayson E. Street, Chief Adversarial Officer at Secure Yeti, discusses intriguing aspects of social engineering and unconventional methods for gathering target information. Street explores the overlooked threat of physical security and the human tendency to […]
Social engineer reveals effective tricks for real-world intrusions Read More »
Breaking down the state of authentication 2024-01-05 at 07:02 By Help Net Security In this Help Net Security video, Bassam Al-Khalidi, co-CEO of Axiad, discusses the results of Axiad’s recent State of Authentication Survey. Key findings from the survey revealed: – 39% indicated phishing is the most feared cyberattack, while 49% said it is the […]
Breaking down the state of authentication Read More »
Qakbot returns in fresh assault on hospitality sector 18/12/2023 at 15:47 By Helga Labus The Qakbot botnet has been disrupted this summer, but cybercriminals are not ready to give up on the malware: Microsoft’s threat analysts have spotted a new phishing campaign attempting to deliver it to targets in the hospitality industry. Qakbot and its […]
Qakbot returns in fresh assault on hospitality sector Read More »
Digital ops and ops management security predictions for 2024 14/12/2023 at 08:32 By Help Net Security CISOs don’t need a crystal ball – they already know that 2024 will be another tough year, especially with AI at everyone’s mind. Instead of playing catch-up regarding the security of emerging tech like generative AI, organizations will prioritize […]
Digital ops and ops management security predictions for 2024 Read More »
Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaigns 13/12/2023 at 16:46 By Helga Labus Attackers are compromising high-privilege Microsoft accounts and abusing OAuth applications to launch a variety of financially-motivated attacks. Abusing OAuth applications OAuth is an open standard authentication protocol that uses tokens to grant applications access to server resources without […]
Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaigns Read More »
Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws 12/12/2023 at 23:47 By Ryan Naraine Microsoft warns of critical spoofing and remote code execution bugs in the Windows MSHTML Platform and Microsoft Power Platform Connector. The post Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws appeared first on SecurityWeek. This article is […]
Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws Read More »
What custom GPTs mean for the future of phishing 30/11/2023 at 08:03 By Help Net Security OpenAI is putting more power into the hands of users of GenAI, allowing them to create their custom AI agents without writing code. These custom GPTs are the latest leap forward in the rapidly evolving AI landscape, but this […]
What custom GPTs mean for the future of phishing Read More »
Organizations can’t ignore the surge in malicious web links 30/11/2023 at 07:02 By Help Net Security Despite the rising adoption of collaboration and instant messaging software, email remains a significant area of concern regarding cyber attacks, particularly the increasing threat of cybercriminals employing harmful web links in emails, according to Hornetsecurity. Attack techniques used in […]
Organizations can’t ignore the surge in malicious web links Read More »
Okta Broadens Scope of Data Breach: All Customer Support Users Affected 29/11/2023 at 19:01 By Ryan Naraine Okta expands scope of October breach, saying hackers stole names and email addresses of all its customer support system users. The post Okta Broadens Scope of Data Breach: All Customer Support Users Affected appeared first on SecurityWeek. This […]
Okta Broadens Scope of Data Breach: All Customer Support Users Affected Read More »
Okta breach: Hackers stole info on ALL customer support users 29/11/2023 at 14:16 By Zeljka Zorz The scope of the recent breach of the Okta customer support system is much wider than initially established, the company has admitted on Tuesday: the attackers downloaded a report that contained the names and email addresses of all Okta […]
Okta breach: Hackers stole info on ALL customer support users Read More »
Asked to get a banana, a BAYC owner narrowly avoids a fake Forbes scam 27/11/2023 at 10:02 By Cointelegraph By Martin Young Scammers posing as Forbes journalists have been targeting BAYC holders to set up interviews and distract them while they attempt to steal their apes. This article is an excerpt from Cointelegraph.com News View […]
Asked to get a banana, a BAYC owner narrowly avoids a fake Forbes scam Read More »
Nansen phishing emails flood crypto investors’ inboxes 24/11/2023 at 12:02 By Cointelegraph By Arijit Sarkar On Sept. 22, one of Nansen’s third-party vendors suffered a security breach, which exposed the email addresses of 7% of the system’s users. This article is an excerpt from Cointelegraph.com News View Original Source
Nansen phishing emails flood crypto investors’ inboxes Read More »
MFA under fire, attackers undermine trust in security measures 20/11/2023 at 08:31 By Help Net Security In this Help Net Security video, Renée Burton, Head of Threat Intelligence at Infoblox, discusses MFA attacks. MFA adds security to online accounts, but MFA lookalikes are a real threat to consumers and enterprises. Consumers have come to trust […]
MFA under fire, attackers undermine trust in security measures Read More »
Threat Actor Targets ‘Batman: Arkham City’ Gamers using Meterpreter 17/11/2023 at 15:17 By cybleinc CRIL analyzes a modified version of a ‘Batman: Arkham City’ game installer application that deploys Meterpreter on victim’s systems. The post Threat Actor Targets ‘Batman: Arkham City’ Gamers using Meterpreter appeared first on Cyble. This article is an excerpt from Cyble […]
Threat Actor Targets ‘Batman: Arkham City’ Gamers using Meterpreter Read More »
AI disinformation campaigns pose major threat to 2024 elections 17/11/2023 at 08:32 By Help Net Security AI, post-quantum cryptography, zero trust, cryptography research, and election security will shape cybersecurity strategies in the present and for 2024, according to NTT. As the world emerged from the pandemic and continued to adapt to the rapid implementation of […]
AI disinformation campaigns pose major threat to 2024 elections Read More »
OpenSea NFT users report massive email phishing campaign 15/11/2023 at 13:03 By Cointelegraph By Helen Partz OpenSea users have reportedly been targeted with a widespread email phishing campaign, including a fake developer API risk alert and a fake NFT offer. This article is an excerpt from Cointelegraph.com News View Original Source
OpenSea NFT users report massive email phishing campaign Read More »