News
-
"Identity-Based Attacks Soared in Past Year: Report"CrowdStrike recently released its 2023 Threat Hunting Report, warning that threat actors have doubled down on identity-based attacks over the past year. The new report is based on data collected over 12 months between July 1, 2022, and June 30,… -
"Over 200 Million Brits Have Data Compromised in Four Years"According to security researchers at Imperva, UK organizations lost billions in data breaches between 2019 and 2022, with hundreds of millions of their customers suffering compromise of their personal information. The researchers studied 99,490…
-
"Protecting Your Self-Driving Car - And Your Privacy - From Cyberhackers in the Age of AI"As cars become increasingly equipped with computerized components, they become more vulnerable to cyberattacks and privacy leaks. Ethical hackers, also known as white hat hackers, have already demonstrated attacks on computerized car technology. The…
-
"LOLBAS in the Wild: 11 Living-Off-The-Land Binaries That Could Be Used for Malicious Purposes"Researchers have found 11 living-off-the-land binaries and scripts (LOLBAS) that threat actors could exploit to conduct post-exploitation activities. Nir Chako, a security researcher at Pentera, describes LOLBAS as an attack technique involving using…
-
"Hackers Increasingly Abuse Cloudflare Tunnels for Stealthy Connections"There has been a rise in the abuse of the legitimate Cloudflare Tunnels feature by hackers to establish stealthy HTTPS connections from compromised devices, circumvent firewalls, and maintain long-term persistence. In January 2023, Phylum reported that…
-
"Managing Human Cyber Risks Matters Now More Than Ever"As Artificial Intelligence (AI) increases the sophistication and scope of phishing, vishing, and smishing attacks, understanding and managing human cyber risks have become increasingly important, according to a report by the SANS Institute. The report…
-
"Mallox Ransomware Group Revamps Malware Variants, Evasion Tactics"The Mallox ransomware group is intensifying its targeted attacks on organizations with vulnerable SQL servers. It has recently emerged with a new variant and various additional malware tools to achieve persistence and circumvent detection. In June 2021,…
-
"How an 8-Character Password Could Be Cracked in Just a Few Minutes"Security experts continue to encourage using strong and complex passwords to protect online accounts and data from cybercriminals. "Complex" passwords typically require lowercase and uppercase letters, numbers, and special symbols. However, according to…
-
"Smart Devices: Putting a Premium on Peace of Mind"At least one smart device vulnerable to cyberattacks, such as smart TVs, robot vacuums, and more, is present in two out of every five homes worldwide. Such devices will soon come with a label that helps consumers determine whether the device is secure…
-
"Hackers Exploit Vulnerability to Target Johns Hopkins"Baltimore-based Johns Hopkins University and Health System are notifying patients that some of their protected health information may have been compromised due to hackers targeting a software vulnerability in MOVEit Transfer. According to a breach…
-
"Spyware Maker LetMeSpy Shuts Down After Hacker Deletes Server Data"The Poland-based spyware called LetMeSpy is no longer operational. It has announced that it will cease operations after a data breach in June wiped out its servers, including a massive cache of data taken from thousands of victims' phones. In a statement…
-
"Once The Domain of Pirated Games, 'Infostealers' Have Racked Up Hundreds of Thousands of Employee Logins"Titan, Redline, and other infostealers target Internet users searching for pirated copies of games and software. However, according to a new report from Flare.io, they are increasingly making their way into corporate environments, possibly due to the…