SEC News

What's new arround internet

Last one

Src	Date (GMT)	Titre	Description	Tags	Stories	Notes
	2022-11-21 20:59:17	4 out of 10 Emails are Unwanted as nearly 40% of all Attacks Start with Phishing (lien direct)
	2022-11-21 18:33:41	10 Million Health Records from Australian Insurer Medibank are Leaked After Refusing to Pay the Ransom (lien direct)		Ransomware		★★★
	2022-11-21 16:57:45	2022 Black Friday and Cyber Monday Scams (lien direct)	In years gone by, Black Friday was a 24-hour rush to the shops (you remember those places with actual people and merchandise that you could touch) where there was a set time for you to grab a bargain. People arrived at the shops the night before waiting in line for the doors to open. Then, in 2005 the clever people at the National Retail Federation decided that an online frenzy of shopping was needed the Monday after Thanksgiving. We know this Monday as Cyber Monday. In 2008, Cyber Monday hit the big time as Thanksgiving fell five days later than in 2007 so the people were hungry for the online deals. The anticipation of the online deals created a frenzy and launched Cyber Monday into the stratosphere. Over time, Black Friday became Black November as retailers cashed in on the sales and consumers obliged.
	2022-11-21 16:33:06	Over One-Third of Companies Who Pay the Ransom are Targeted for a Second Time (lien direct)
	2022-11-17 18:41:19	Valid Accounts Rank as the Top Initial Access Infection Vector, Putting a Spotlight on Credentials (lien direct)
	2022-11-17 18:41:16	Ransomware Attacks on UK Organizations are Not Being Reported Enough, Clouding Impact (lien direct)
	2022-11-17 18:41:12	Cyber Insurance Rates Begin to Stabilize as Insurers Gain Better Insight into Cyberattacks (lien direct)
	2022-11-17 13:49:53	Watch Out For This Tricky New Tactic Called Clone Phishing (lien direct)
	2022-11-10 14:49:01	Cyberattacks Globally Increased by 28% in the Third Quarter of 2022 as the Average Org Experiences Over 1,100 Attacks Weekly (lien direct)
	2022-11-09 11:54:55	[EYES OUT] This Scary Strain of Sleeper Ransomware Is Really a Data Wiper in Disguise (lien direct)		Ransomware
	2022-11-07 15:23:44	[HEADS UP] Australia Continues to be Vulnerable to Cybercrimes as Half a Billion Has Been Lost to Scammers (lien direct)
	2022-11-04 18:36:05	New LinkedIn-Impersonated Phishing Attack Uses Bad Sign-In Attempts to Harvest Credentials (lien direct)
	2022-11-03 17:47:30	Phishing for Feds: Credential-Harvesting Attacks Found in New Study (lien direct)
	2022-11-03 12:50:06	Hacking Biometrics: If You Thought Your Fingerprints Were Safe, Think Again! (lien direct)
	2022-10-31 14:43:11	LinkedIn Phishing Attack Bypassed Email Filters Because it Passed Both SPF and DMARC Auth (lien direct)	Researchers at Armorblox have observed a phishing campaign impersonating LinkedIn. The emails inform the user that their LinkedIn account has been suspended due to suspicious activity.
	2022-10-28 18:13:03	Ransomware Attacks Via RDP Drop Significantly as Phishing Continues to Dominate (lien direct)
	2022-10-27 14:08:53	Stolen Devices and Phishing (lien direct)	Researchers at Cyren describe a phishing attack that resulted from the theft of a stolen iPad. The iPad was stolen on a train in Switzerland, and briefly appeared on Apple's location services in Paris a few days later. The owner assumed the iPad was lost for good, but sent a message to the iPad with her phone number just in case.
	2022-10-26 18:58:36	[APPLY TODAY] Security Awareness Training Eligible for $185 million DHS Cybersecurity Grant Opportunity (lien direct)	The Department of Homeland Security (DHS) is providing $185 million of grant money this year to U.S. states and territories to bolster their cybersecurity defenses, which includes security awareness training. The program will provide $1 billion over the next four years to help states and territories become more resilient to cyber threats.
	2022-10-26 18:31:34	(Déjà vu) KnowBe4 Top-Clicked Phishing Email Subjects for Q3 2022 [INFOGRAPHIC] (lien direct)	KnowBe4's latest quarterly report on top-clicked phishing email subjects is here. We analyze 'in the wild' attacks reported via our Phish Alert Button, top subjects globally clicked on in phishing tests, and top attack vector types.
	2022-10-24 17:58:54	Major UK Outsourcer Hit With Multi-Million Dollar Fine Due to a Phishing Attack (lien direct)
	2022-10-20 12:54:27	New Phishing Attack Attempts to Steal Social Security Numbers (lien direct)
	2022-10-18 14:05:18	Name-and-Shame Scams on Discord (lien direct)	Scammers are sending Discord messages with phony accusations to trick users into clicking on phishing links, according to Shan Abdul at MakeUseOf. The messages are sent from compromised accounts to the accounts' friends lists, so they appear to be coming from a trusted friend. The messages tell the user that their account has been posting shady things, and asks them to click on a link for proof.
	2022-10-14 13:03:08	New Phishing Campaign Uses Office Docs to Install Cobalt Strike Beacon (lien direct)
	2022-10-12 16:00:00	Encrypted Files are the Overwhelming Way Organizations “Detect” Ransomware Attacks (lien direct)		Ransomware
	2022-10-09 15:41:09	[Head Scratcher] The cyber insurance market is badly broken. But why exactly? (lien direct)
	2022-10-04 13:30:00	(Déjà vu) CyberheistNews Vol 12 #40 [Eye Opener] The FBI Warns Against a New Cyber Attack Vector Called Business Identity Compromise (BIC) (lien direct)
	2022-10-04 13:14:59	Cyber Risk Remains Top Concern for Businesses with a Distinct Lack of Unpreparedness (lien direct)
	2022-10-04 13:14:56	One-Fourth of Organizations Have Been Victim to a Ransomware Attack with 59% Starting with Email (lien direct)	New analysis highlights just how prevalent ransomware attacks are today, how material the impacts are, whether organizations get their data back, and exactly how these attacks start.	Ransomware
	2022-10-03 13:07:51	German Police Collar Alleged Phishing Cybercriminals (lien direct)	The Bundeskriminalamt (BKA), Germany's federal criminal police, raided three homes on Thursday, September 29th, in the course of an investigation of a cyber criminal operation the BKA says netted approximately €4,000,000 from its victims by using phishing tactics. Two suspects were arrested and charged; the disposition of the third individual will depend upon the results of further investigation.
	2022-09-28 19:51:33	A Master Class on Cybersecurity: Roger Grimes Teaches Password Best Practices (lien direct)
	2022-09-28 13:05:46	American Airlines Traces Breach to Phishing Incident (lien direct)
	2022-09-28 12:54:46	[Eye Opener] FBI Warns Against New Business Identity Compromise (BIC). Top 5 Deepfake Defenses (lien direct)	The FBI warns against that synthetic content may be used in a “newly defined cyber attack vector” called Business Identity Compromise (BIC) Imagine you're on a conference call with your colleagues. Discussing the latest Sales numbers. Information that your competitors would love to get a hold of.
	2022-09-27 13:00:42	FBI: Cyber Criminals Will Continue Targeting Healthcare Payment Processors Through Phishing Campaigns and Social Engineering (lien direct)
	2022-09-26 14:00:46	Recent Optus Data Breach Teaches the Importance of Recognizing Social Engineering (lien direct)		Data Breach
	2022-09-26 12:00:00	You Need Aggressive Cyber Training, Not "So, So" Training (lien direct)	According to nearly every study conducted over the last decade, social engineering is involved in the vast majority of cyber attacks. The figures range from about 30% to 90% of all hacking and malware attacks. There is no other root exploitation cause that organizations can focus on mitigating that would decrease cybersecurity risk more.	Malware
	2022-09-23 17:58:10	“Browser-in-the-Browser” Phishing Technique Spotted in New Steam Account Attack (lien direct)
	2022-09-20 13:30:00	(Déjà vu) CyberheistNews Vol 12 #38 [HEADS UP] New Uber Security Breach \'Looks Bad\', Caused by Social Engineering (lien direct)			Uber Uber
	2022-09-16 12:36:02	Uber security breach \'looks bad\', caused by social engineering (lien direct)			Uber
	2022-09-14 16:40:18	Cisco Attempt Attributed to Lapsus$ Group (lien direct)
	2022-09-14 16:37:41	Unconventional Security Awareness Advice (lien direct)
	2022-09-13 11:27:27	Ransomware Gangs Improve Attack Speed and Evade Detection with New "Intermittent Encryption" Tactic (lien direct)
	2022-09-12 17:51:30	Report: 80% of Phishing Attacks Leverage Legitimate Web Infrastructure and Services (lien direct)
	2022-09-12 13:37:39	Gaming-Related Phishing Trends (lien direct)
	2022-09-09 12:46:40	PwC: More Frequent Cyber Attacks Tops the List of Business Risk for Executives (lien direct)
	2022-09-08 23:12:40	Request a Demo of KnowBe4\'s PhishER Platform and Get Your Free Hat! (lien direct)
	2022-09-06 14:30:00	The Number of Phishing Attack Cases in Japan Hit an All-Time High (lien direct)
	2022-08-31 13:30:19	Phishing and Malicious Emails Are Still the Primary Initial Attack Vector (lien direct)
	2022-08-31 13:30:07	Lost in Translation? New Cryptomining Malware Attacks Based in Turkey Cause Suspicion (lien direct)		Malware
	2022-08-30 15:45:43	(Déjà vu) [KREBS ON SECURITY] How 1-Time Passcodes Became a Corporate Liability (lien direct)	[The following article is at it appears at Krebs on Security here.] Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the world's largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices.
	2022-08-25 13:14:31	State-Based Cyberattacks to be Excluded from Lloyd\'s of London Cyber Insurance Policies (lien direct)

Last update at: 2024-06-21 19:53:33
See our sources.

To see everything: Our RSS (filtrered)