Collaborate Disseminate
The One Font BEC campaign targets Microsoft 365 users and uses sophisticated obfuscation tactics to slip past security protections to harvest credentials.
Continue reading Tiny Font Size Fools Email Filters in BEC Phishing
The distributed computing vendor patched the flaw, affecting Citrix ADC and Gateway, along with another flaw impacting availability for SD-WAN appliances. Continue reading Critical Citrix DDoS Bug Shuts Down Network, Cloud App Access
Researchers have a working exploit for the vulnerability (now patched), which allows for unauthenticated RCE and affects an estimated 70,000+ VPN/firewalls.
Continue reading Massive Zero Day Hole Found in Palo Alto Security Appliances
Experts urged users to prioritize patches for Microsoft Exchange and Excel, those favorite platforms so frequently targeted by cybercriminals and nation-state actors. Continue reading Microsoft Nov. Patch Tuesday Fixes Six Zero-Days, 55 Bugs
A U.K. fishing retailer’s site has been hijacked and redirected to Pornhub. Continue reading Not Punny: Angling Direct Breach Cripples Retailer for Days
The Q3 2021 report revealed a 4.5% increase in CVEs associated with ransomware and a 3.4% increase in ransomware families compared with Q2 2021.
Continue reading 12 New Flaws Used in Ransomware Attacks in Q3
The average number of vulnerabilities discovered in a Cyberpion scan of external Fortune 500 networks (such as cloud systems) was 296, many critical (with the top of the scale weighing in at a staggering 7,500). Continue reading The New Frontier of Enterprise Risk: Nth Parties
Yaron Kassner, CTO of Silverfort, delves into the pros and cons of transparency when it comes to cybersecurity tools’ algorithms.
Continue reading Security Tool Guts: How Much Should Customers See?
The cyberattacker attempted to extort the company after socially engineering a customer service employee to gain access to email addresses and more. Continue reading Robinhood Trading Platform Data Breach Hits 7M Customers
The U.S. is seeking the extradition of a Ukrainian man, Yaroslav Vasinskyi, whom they suspect is behind the Kaseya supply-chain attacks and other REvil attacks.
Continue reading REvil Affiliates Arrested; DOJ Seizes $6.1M in Ransom