Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
 |
2022-11-07 15:23:44 |
[HEADS UP] Australia Continues to be Vulnerable to Cybercrimes as Half a Billion Has Been Lost to Scammers (lien direct) |
|
|
|
|
 |
2022-11-04 18:36:05 |
New LinkedIn-Impersonated Phishing Attack Uses Bad Sign-In Attempts to Harvest Credentials (lien direct) |
|
|
|
|
 |
2022-11-03 17:47:30 |
Phishing for Feds: Credential-Harvesting Attacks Found in New Study (lien direct) |
|
|
|
|
 |
2022-11-03 12:50:06 |
Hacking Biometrics: If You Thought Your Fingerprints Were Safe, Think Again! (lien direct) |
|
|
|
|
 |
2022-10-31 14:43:11 |
LinkedIn Phishing Attack Bypassed Email Filters Because it Passed Both SPF and DMARC Auth (lien direct) |
Researchers at Armorblox have observed a phishing campaign impersonating LinkedIn. The emails inform the user that their LinkedIn account has been suspended due to suspicious activity. |
|
|
|
 |
2022-10-28 18:13:03 |
Ransomware Attacks Via RDP Drop Significantly as Phishing Continues to Dominate (lien direct) |
|
|
|
|
 |
2022-10-27 14:08:53 |
Stolen Devices and Phishing (lien direct) |
Researchers at Cyren describe a phishing attack that resulted from the theft of a stolen iPad. The iPad was stolen on a train in Switzerland, and briefly appeared on Apple's location services in Paris a few days later. The owner assumed the iPad was lost for good, but sent a message to the iPad with her phone number just in case. |
|
|
|
 |
2022-10-26 18:58:36 |
[APPLY TODAY] Security Awareness Training Eligible for $185 million DHS Cybersecurity Grant Opportunity (lien direct) |
The Department of Homeland Security (DHS) is providing $185 million of grant money this year to U.S. states and territories to bolster their cybersecurity defenses, which includes security awareness training. The program will provide $1 billion over the next four years to help states and territories become more resilient to cyber threats. |
|
|
|
 |
2022-10-26 18:31:34 |
(Déjà vu) KnowBe4 Top-Clicked Phishing Email Subjects for Q3 2022 [INFOGRAPHIC] (lien direct) |
KnowBe4's latest quarterly report on top-clicked phishing email subjects is here. We analyze 'in the wild' attacks reported via our Phish Alert Button, top subjects globally clicked on in phishing tests, and top attack vector types. |
|
|
|
 |
2022-10-24 17:58:54 |
Major UK Outsourcer Hit With Multi-Million Dollar Fine Due to a Phishing Attack (lien direct) |
|
|
|
|
 |
2022-10-20 12:54:27 |
New Phishing Attack Attempts to Steal Social Security Numbers (lien direct) |
|
|
|
|
 |
2022-10-18 14:05:18 |
Name-and-Shame Scams on Discord (lien direct) |
Scammers are sending Discord messages with phony accusations to trick users into clicking on phishing links, according to Shan Abdul at MakeUseOf. The messages are sent from compromised accounts to the accounts' friends lists, so they appear to be coming from a trusted friend. The messages tell the user that their account has been posting shady things, and asks them to click on a link for proof. |
|
|
|
 |
2022-10-14 13:03:08 |
New Phishing Campaign Uses Office Docs to Install Cobalt Strike Beacon (lien direct) |
|
|
|
|
 |
2022-10-12 16:00:00 |
Encrypted Files are the Overwhelming Way Organizations “Detect” Ransomware Attacks (lien direct) |
|
Ransomware
|
|
|
 |
2022-10-09 15:41:09 |
[Head Scratcher] The cyber insurance market is badly broken. But why exactly? (lien direct) |
|
|
|
|
 |
2022-10-04 13:30:00 |
(Déjà vu) CyberheistNews Vol 12 #40 [Eye Opener] The FBI Warns Against a New Cyber Attack Vector Called Business Identity Compromise (BIC) (lien direct) |
|
|
|
|
 |
2022-10-04 13:14:59 |
Cyber Risk Remains Top Concern for Businesses with a Distinct Lack of Unpreparedness (lien direct) |
|
|
|
|
 |
2022-10-04 13:14:56 |
One-Fourth of Organizations Have Been Victim to a Ransomware Attack with 59% Starting with Email (lien direct) |
New analysis highlights just how prevalent ransomware attacks are today, how material the impacts are, whether organizations get their data back, and exactly how these attacks start. |
Ransomware
|
|
|
 |
2022-10-03 13:07:51 |
German Police Collar Alleged Phishing Cybercriminals (lien direct) |
The Bundeskriminalamt (BKA), Germany's federal criminal police, raided three homes on Thursday, September 29th, in the course of an investigation of a cyber criminal operation the BKA says netted approximately €4,000,000 from its victims by using phishing tactics. Two suspects were arrested and charged; the disposition of the third individual will depend upon the results of further investigation. |
|
|
|
 |
2022-09-28 19:51:33 |
A Master Class on Cybersecurity: Roger Grimes Teaches Password Best Practices (lien direct) |
|
|
|
|
 |
2022-09-28 13:05:46 |
American Airlines Traces Breach to Phishing Incident (lien direct) |
|
|
|
|
 |
2022-09-28 12:54:46 |
[Eye Opener] FBI Warns Against New Business Identity Compromise (BIC). Top 5 Deepfake Defenses (lien direct) |
The FBI warns against that synthetic content may be used in a “newly defined cyber attack vector” called Business Identity Compromise (BIC)
Imagine you're on a conference call with your colleagues. Discussing the latest Sales numbers. Information that your competitors would love to get a hold of. |
|
|
|
 |
2022-09-27 13:00:42 |
FBI: Cyber Criminals Will Continue Targeting Healthcare Payment Processors Through Phishing Campaigns and Social Engineering (lien direct) |
|
|
|
|
 |
2022-09-26 14:00:46 |
Recent Optus Data Breach Teaches the Importance of Recognizing Social Engineering (lien direct) |
|
Data Breach
|
|
|
 |
2022-09-26 12:00:00 |
You Need Aggressive Cyber Training, Not "So, So" Training (lien direct) |
According to nearly every study conducted over the last decade, social engineering is involved in the vast majority of cyber attacks. The figures range from about 30% to 90% of all hacking and malware attacks. There is no other root exploitation cause that organizations can focus on mitigating that would decrease cybersecurity risk more. |
Malware
|
|
|
 |
2022-09-23 17:58:10 |
“Browser-in-the-Browser” Phishing Technique Spotted in New Steam Account Attack (lien direct) |
|
|
|
|
 |
2022-09-20 13:30:00 |
(Déjà vu) CyberheistNews Vol 12 #38 [HEADS UP] New Uber Security Breach \'Looks Bad\', Caused by Social Engineering (lien direct) |
|
|
Uber
Uber
|
|
 |
2022-09-16 12:36:02 |
Uber security breach \'looks bad\', caused by social engineering (lien direct) |
|
|
Uber
|
|
 |
2022-09-14 16:40:18 |
Cisco Attempt Attributed to Lapsus$ Group (lien direct) |
|
|
|
|
 |
2022-09-14 16:37:41 |
Unconventional Security Awareness Advice (lien direct) |
|
|
|
|
 |
2022-09-13 11:27:27 |
Ransomware Gangs Improve Attack Speed and Evade Detection with New "Intermittent Encryption" Tactic (lien direct) |
|
|
|
|
 |
2022-09-12 17:51:30 |
Report: 80% of Phishing Attacks Leverage Legitimate Web Infrastructure and Services (lien direct) |
|
|
|
|
 |
2022-09-12 13:37:39 |
Gaming-Related Phishing Trends (lien direct) |
|
|
|
|
 |
2022-09-09 12:46:40 |
PwC: More Frequent Cyber Attacks Tops the List of Business Risk for Executives (lien direct) |
|
|
|
|
 |
2022-09-08 23:12:40 |
Request a Demo of KnowBe4\'s PhishER Platform and Get Your Free Hat! (lien direct) |
|
|
|
|
 |
2022-09-06 14:30:00 |
The Number of Phishing Attack Cases in Japan Hit an All-Time High (lien direct) |
|
|
|
|
 |
2022-08-31 13:30:19 |
Phishing and Malicious Emails Are Still the Primary Initial Attack Vector (lien direct) |
|
|
|
|
 |
2022-08-31 13:30:07 |
Lost in Translation? New Cryptomining Malware Attacks Based in Turkey Cause Suspicion (lien direct) |
|
Malware
|
|
|
 |
2022-08-30 15:45:43 |
(Déjà vu) [KREBS ON SECURITY] How 1-Time Passcodes Became a Corporate Liability (lien direct) |
[The following article is at it appears at Krebs on Security here.]
Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the world's largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices. |
|
|
|
 |
2022-08-25 13:14:31 |
State-Based Cyberattacks to be Excluded from Lloyd\'s of London Cyber Insurance Policies (lien direct) |
|
|
|
|
 |
2022-08-24 12:25:03 |
Teach Two Things to Decrease Phishing Attack Success (lien direct) |
|
|
|
|
 |
2022-08-23 13:30:00 |
CyberheistNews Vol 12 #34 [Eye Opener] The Cisco Hack Was Caused by Initial Access Broker Phishing (lien direct) |
|
Hack
|
|
|
 |
2022-08-18 12:16:28 |
Organizations Holding Cyber Insurance Policies May Get Stuck with the Bill in a Phishing Loss (lien direct) |
|
|
|
|
 |
2022-08-16 19:42:05 |
More Super Targeted Spear Phishing Ahead (lien direct) |
|
|
|
|
 |
2022-08-16 13:34:25 |
(Déjà vu) CyberheistNews Vol 12 #33 [Eye Opener] Recent Cisco Hack by Ransomware Group Started Because of a Phishing Attack (lien direct) |
|
Ransomware
Hack
|
|
|
 |
2022-08-15 13:07:30 |
Initial Access Broker Phishing (lien direct) |
Cisco has disclosed a security incident that occurred as a result of sophisticated voice phishing attacks that targeted employees, according to researchers at Cisco Talos. The researchers believe the attack was carried out by an initial access broker with the intent of selling access to the compromised accounts to other threat actors. |
Threat
|
|
★★★
|
 |
2022-08-12 12:47:44 |
Massive Network of Over 10,000 Fake Investment Sites Targets Europe (lien direct) |
|
|
|
|
 |
2022-08-11 13:28:56 |
SolidBit Ransomware Targets League of Legends Players (lien direct) |
|
Ransomware
|
|
|
 |
2022-08-11 12:59:06 |
Recent Cisco Hack by Ransomware Group Started Because of a Phishing Attack (lien direct) |
|
Ransomware
Hack
|
|
|
 |
2022-08-09 15:07:28 |
Hacking the Hacker: Assessing and Addressing Your Organization\'s Cyber Defense Weaknesses (lien direct) |
|
|
|
|