Collaborate Disseminate
The Identity Theft Resource Center (ITRC) has published a report that looks at the identity crimes committed against individuals as reported by the victims of those crimes. In 2021, the ITRC received the highest number of contacts in its history about … Continue reading Identity crimes reach all-time high
A recent attack targeting crypto-related users of Mailchimp has ended up affecting users of cloud infrastructure provider DigitalOcean, the latter company has announced on Monday. “On August 8th, DigitalOcean discovered that our Mailchimp account… Continue reading DigitalOcean customers affected by Mailchimp “security incident”
Customers of automaker General Motors (GM) and wedding planning company Zola have had customer accounts compromised through credential stuffing, and the criminals have used the access to redeem gift cards. What is credential stuffing? Credential stuffi… Continue reading GM, Zola customer accounts compromised through credential stuffing
The Python module “ctx” and a fork of the PHP library “phpass” have recently been modified by an unknown attacker to grab AWS credentials/keys and send them to a Heroku app. But what at first seemed like the work of a malicious … Continue reading Hijacking of popular ctx and phpass packages reveals open source security gaps
Online accounts getting hijacked and misused is an everyday occurrence, but did you know that account pre-hijacking attacks are also possible? Inspired by previous research on preemptive account hijacking by way of single sign-on (SSO) technology, rese… Continue reading Account pre-hijacking attacks possible on many online services
Bad bots, software applications that run automated tasks with malicious intent, accounted for a record-setting 27.7% of all global website traffic in 2021, up from 25.6% in 2020, an Imperva report reveals. The three most common bot attacks were account… Continue reading Record level of bad bot traffic contributing to rise of online fraud
NICE Actimize has released a report that identifies and analyzes the leading fraud threats and patterns that impacted leading global financial institutions in 2021. Noting that banking fraud continues to rise, the data-driven research study found a 41%… Continue reading Popularity of online payment goes hand-in-hand with fraud
In this video for Help Net Security, Yakir Kadkoda, Lead Security Researcher, and Assaf Morag, Lead Data Analyst at Aqua Security, talk about new npm flaws that allow attackers to target packages for account takeover. Npm is the default package manager… Continue reading New npm flaws let attackers better target packages for account takeover
A study shows that traditional identity fraud losses, caused by criminals illegally using victims’ information to steal money, exploded in 2021 to $24 billion — an alarming 79% increase over 2020. Further, the number of adults in the United States impa… Continue reading Traditional identity fraud losses soar, totalling $52 billion in 2021
Cequence Security released a report revealing that both developers and attackers have made the shift to APIs. Of the 21.1 billion transactions analyzed in the last half of 2021, 14 billion (70 percent) were API transactions. After analyzing some of the… Continue reading Attackers have come to love APIs as much as developers