Emails Over Radio
The modern cellular network is a marvel of technological advancement that we often take for granted now. With 5G service it’s easy to do plenty of things on-the-go that would …read more Continue reading Emails Over Radio
Category Archives: email
US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack
US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior U.S. government officials.
From the executive summary:
The Board finds that this intrusion was preventable and should never have occurred. The Board also concludes that Microsoft’s security culture was inadequate and requires an overhaul, particularly in light of the company’s centrality in the technology ecosystem and the level of trust customers place in the company to protect their data and operations. The Board reaches this conclusion based on:…
Continue reading US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack
Security Vulnerability of HTML Emails
This is a newly discovered email vulnerability:
The email your manager received and forwarded to you was something completely innocent, such as a potential customer asking a few questions. All that email was supposed to achieve was being forwarded to you. However, the moment the email appeared in your inbox, it changed. The innocent pretext disappeared and the real phishing email became visible. A phishing email you had to trust because you knew the sender and they even confirmed that they had forwarded it to you.
This attack is possible because most email clients allow CSS to be used to style HTML emails. When an email is forwarded, the position of the original email in the DOM usually changes, allowing for CSS rules to be selectively applied only when an email has been forwarded…
How malicious email campaigns continue to slip through the cracks
In this Help Net Security video, Josh Bartolomie, VP of Global Threat Services at Cofense, discusses how email will remain a target as long as it remains the predominant form of communication within a business. Cofense researchers have found that malic… Continue reading How malicious email campaigns continue to slip through the cracks
Application Validation Methods [closed]
I am currently employed at a financing company operating in both the USA and Canada. My current task involves exploring alternative methods to validate new credit applications.
Presently, we rely on a one-time SMS message for our new custo… Continue reading Application Validation Methods [closed]
Application Validation Methods [closed]
I am currently employed at a financing company operating in both the USA and Canada. My current task involves exploring alternative methods to validate new credit applications.
Presently, we rely on a one-time SMS message for our new custo… Continue reading Application Validation Methods [closed]
How CISOs tackle business payment fraud
In this Help Net Security video, Shai Gabay, CEO of Trustmi, discusses why payments are a source of cyber worry for CISOs. CISOs are worried about Business Email Compromise (BEC), cyber attackers’ use of AI, and securing the supply chain. These a… Continue reading How CISOs tackle business payment fraud
What are forms of "hidden tracking links" in email messages that collect data; activated by simply opening email?
The US Dept of Justice on Monday, March 25, 2024 announced Seven Hackers Associated with Chinese Government Charged with Computer Intrusions Targeting Perceived Critics of China and U.S. Businesses and Politicians It includes the following… Continue reading What are forms of "hidden tracking links" in email messages that collect data; activated by simply opening email?
Growing AceCryptor attacks in Europe
ESET Research has recorded a considerable increase in AceCryptor attacks, with detections tripling between the first and second halves of 2023. In recent months, researchers registered a significant change in how AceCryptor is used, namely that the att… Continue reading Growing AceCryptor attacks in Europe
IMF Emails Hacked
The International Monetary Fund (IMF) detects a cybersecurity incident that involved nearly a dozen email accounts getting hacked.
The post IMF Emails Hacked appeared first on SecurityWeek.
Continue reading IMF Emails Hacked