Gmail users, beware of new AI scam that looks very authentic (Oct 14, 2024)
A spoofed phone number, an email address plus an AI voice are all it takes to steal your Google credentials. Here's what to look out for, just in case, you happen to find yourself in such a situation.
Can AI and automation properly manage the growing threats to the cybersecurity landscape? (Oct 14, 2024)
While generative AI has been useful in detecting cybersecurity threats, AI is increasingly becoming a helpful tool for hackers and cybercriminals as well.
Telekopye Scammers Target Booking.com and Airbnb Users (Oct 14, 2024)
Online scammers are targeting Booking.com and Airbnb users with Telekopye, a Telegram-based toolkit
Internet Archive's Wayback Machine is back up after data breach - with a catch (Oct 14, 2024)
The site is accessible but with a few limitations. Here's why.
CISA Urges Encryption of Cookies in F5 BIG-IP Systems (Oct 14, 2024)
CISA urged organizations to tackle security risks from unencrypted cookies in F5 BIG-IP LTM systems
Surfshark VPN Review (2024): Is it a Safe and Trustworthy VPN? (Oct 14, 2024)
With a healthy mix of features, performance, and value, Surfshark VPN makes a strong case for those looking for a high-quality VPN at an affordable price.
US DoD Tightens Cybersecurity Standards for Defense Contractors (Oct 14, 2024)
The US DoD has finalized the Cybersecurity Maturity Model Certification (CMMC) Program, which defense contractors must pass to bid for government contracts
Fidelity Investments data breach impacts more than 77,000 customers (Oct 14, 2024)
Fidelity Investments announced it experienced a data breach.
39% of consumers admit to using generative AI on a weekly basis (Oct 14, 2024)
Twenty-seven percent of employed survey respondents use privacy tools and settings to protect workplace information when using generative AI.
Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration (Oct 14, 2024)
A suspected nation-state adversary has been observed weaponizing three security flaws in Ivanti Cloud Service Appliance (CSA) a zero-day to perform a series of malicious actions. That's according t...
Pokémon Developer Game Freak Suffers Data Breach (Oct 14, 2024)
Personal data of over 2600 employees has been exposed and insider information about the Switch 2 and future Pokémon games leaked
5 Steps to Boost Detection and Response in a Multi-Layered Cloud (Oct 14, 2024)
The link between detection and response (DR) practices and cloud security has historically been weak. As global organizations increasingly adopt cloud environments, security strategies have largely...
Supply Chain Attacks Can Exploit Entry Points in Python, npm, and Open-Source Ecosystems (Oct 14, 2024)
Cybersecurity researchers have found that entry points could be abused across multiple programming ecosystems like PyPI, npm, Ruby Gems, NuGet, Dart Pub, and Rust Crates to stage software supply ch...
THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7 - Oct 13) (Oct 14, 2024)
Hey there, it's your weekly dose of "what the heck is going on in cybersecurity land" – and trust me, you NEED to be in the loop this time. We've got everything from zero-day exploits and AI gone r...
Casio Confirms Ransomware Outage and Data Breach (Oct 14, 2024)
Japanese electronics firm Casio has reported a ransomware attack and data breach
Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware (Oct 14, 2024)
Threat actors are actively attempting to exploit a now-patched security flaw in Veeam Backup & Replication to deploy Akira and Fog ransomware. Cybersecurity vendor Sophos said it has been track...
Skills Shortages Now a Top-Two Security Risk for SMBs (Oct 14, 2024)
Sophos claims that a lack of cybersecurity talent is considered a major risk by SMBs
OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf (Oct 13, 2024)
The Iranian threat actor known as OilRig has been observed exploiting a now-patched privilege escalation flaw impacting the Windows Kernel as part of a cyber espionage campaign targeting the U.A.E....
FBI Creates Fake Cryptocurrency to Expose Widespread Crypto Market Manipulation (Oct 12, 2024)
The U.S. Department of Justice (DoJ) has announced arrests and charges against several individuals and entities in connection with allegedly manipulating digital asset markets as part of a widespre...
Firefox Update Patches Exploited Vulnerability (Oct 11, 2024)
Investigation of the use-after-free flaw is ongoing, but organizations and individual users can update Firefox now for a fix.
Deepfakes Can Fool Facial Recognition on Crypto Exchanges (Oct 11, 2024)
Creating new accounts under fake identities provides attackers with a way to launder money or commit fraud.
Microsoft blocked your Windows 11 upgrade? This just-released tool can get the job done (Oct 11, 2024)
A new version of the popular Rufus utility once again bypasses Microsoft's strict hardware compatibility requirements for Windows 11 upgrades. But the way it's implemented might make some people ne...
The Internet Archive Breach: Over 31 Million User Accounts Exposed (Oct 11, 2024)
Attackers got hold of a 6.4 GB file containing the email addresses and hashed passwords of users registered with The Internet Archive.
GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks (Oct 11, 2024)
A new tax-themed malware campaign targeting insurance and finance sectors has been observed leveraging GitHub links in phishing email messages as a way to bypass security measures and deliver Remco...
Cybersecurity Awareness Lags as Global Workforce Engages in Risky AI Practices (Oct 11, 2024)
46% of Gen Z employees are sharing data with AI, according to new research.