Thales Cloud Protection & Licensing

MARCH 24, 2024

Data Security Trends: 2024 Report Analysis madhav Mon, 03/25/2024 - 05:08 Amid ongoing economic uncertainty and a progressively complex threat landscape, businesses are trying to navigate increasingly stringent regulatory requirements while bolstering their security posture.

Security 139

Security Artificial Intelligence IoT Compliance 139

Thales Cloud Protection & Licensing

JANUARY 29, 2019

Around this time each year, Thales eSecurity releases our annual Data Threat Report (DTR). Now in its sixth year, the report is squarely focused on digital transformation and what that means for organizations and their data security. In fact, 71% of organizations are using sensitive data in the cloud.

Digital transformation 92

Digital transformation Encryption Cloud Customer Experience 92

The Last Watchdog

APRIL 2, 2024

It’s a digital swindle as old as the internet itself, and yet, as the data tells us, the vast majority of security incidents are still rooted in the low-tech art of social engineering. Related: AI makes scam email look real Fresh evidence comes from Mimecast’s “The State of Email and Collaboration Security” 2024 report.

Security 171

Security Communications Risk Phishing 171

Security Affairs

OCTOBER 19, 2023

I’m proud to announce the release of the 11th edition of the ENISA Threat Landscape (ETL) on the state of the cybersecurity threat landscape. The Europen Agency for cybersecurity ENISA releases its ENISA Threat Landscape 2023 (ETL) report , which is the annual analysis of the state of the cybersecurity threat landscape.

Artificial Intelligence 119

Artificial Intelligence Ransomware Cybersecurity Manufacturing 119

Data Breach Today

JUNE 16, 2023

Forrester's Brian Wrozek on Poison AI Data, Cloud Complexity, Nation-State Threats The potential for cybercriminals to reverse-engineer generative AI tools, the rise of geopolitical threats and increased cloud complexity are among the top new threats facing security teams in 2023, according to Forrester's Top Cybersecurity Threats In 2023 report.

Cloud 184

Cloud Cybersecurity Security 184

Data Breach Today

JUNE 2, 2022

Chris Novak of Verizon Business Group on Latest Breach Investigations Report The 15th edition of the annual Verizon Data Breach Investigations Report examines the rapid growth in ransomware, along with other threat vectors.

Ransomware 240

Ransomware Data breaches Security 240

Krebs on Security

NOVEMBER 4, 2020

Companies hit by ransomware often face a dual threat: Even if they avoid paying the ransom and can restore things from scratch, about half the time the attackers also threaten to release sensitive stolen data unless the victim pays for a promise to have the data deleted. ” Image: Coveware Q3 2020 report.

Ransomware 339

Ransomware Data breaches Encryption Privacy 339

Data Breach Today

AUGUST 15, 2022

Ifigeneia Lella of ENISA Calls Out Major Gaps in Incident Reporting ENISA’s new "Threat Landscape for Ransomware Attacks" report analyzes 623 ransomware incidents in the EU, U.K. from 2021 to 2022.

Ransomware 246

Ransomware Cybersecurity 246

Security Affairs

APRIL 21, 2024

The Akira ransomware has been active since March 2023, the threat actors behind the malware claim to have already hacked multiple organizations in multiple industries, including education, finance, and real estate. The Akira ransomware operators implement a double extortion model by exfiltrating victims’ data before encrypting it.

Ransomware 102

Ransomware Encryption Education Phishing 102

Security Affairs

APRIL 24, 2024

Cisco Talos warned that the nation-state actor UAT4356 (aka STORM-1849) has been exploiting two zero-day vulnerabilities in Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) firewalls since November 2023 to breach government networks worldwide. Cisco Talos researchers tracked this cyber-espionage campaign as ArcaneDoor.

Government 113

Government Authentication Communications Access 113

Dark Reading

FEBRUARY 1, 2023

Noting 13% year-over-year growth in fraudulent instruction as a cause of loss, report predicts organizations must get smarter about educating employees to spot fraudulent tactics.

Education 76

Education 76

Security Affairs

APRIL 11, 2024

Microsoft addressed two zero-day vulnerabilities (CVE-2024-29988 and CVE-2024-26234) actively exploited by threat actors to deliver malware Microsoft addressed two zero-day vulnerabilities, tracked as CVE-2024-29988 and CVE-2024-26234, that threat actors are exploiting to deliver malware. ” reported ZDI.

Marketing 121

Marketing Security IT Information Security 121

Security Affairs

APRIL 15, 2024

Cisco Duo warns that a data breach involving one of its telephony suppliers exposed multifactor authentication (MFA) messages sent by the company via SMS and VOIP to its customers. The security breach occurred on April 1, 2024, the threat actors used a Provider employee’s credentials that illicitly obtained through a phishing attack.

Data breaches 124

Data breaches Metadata Authentication Phishing 124

Security Affairs

MARCH 8, 2024

The National Cyber Security Centre (NCSC) published a data analysis report on the data breach resulting from the ransomware attack on the IT services provider Xplain. The attack took place on May 23, 2023 and the Play ransomware gang claimed responsibility for the data breach. Threat actors stole and leaked roughly 1.3

Ransomware 124

Ransomware Data breaches Unstructured data Personal data 124

Security Affairs

FEBRUARY 16, 2024

CISA revealed that threat actors breached an unnamed state government organization via an administrator account belonging to a former employee. The government organization also hosts its sensitive data on an Azure environment which was not accessed by the attackers. ” reads the report published by CISA.

Government 136

Government Authentication Cybersecurity Data breaches 136

Security Affairs

DECEMBER 24, 2023

Video game publisher Ubisoft is investigating reports of an alleged data breach after popular researchers shared evidence of the hack. Ubisoft , the popular video game publisher, is examining reports of a potential data breach following the disclosure of evidence by prominent researchers vx-underground.

Data breaches 121

Data breaches Access Ransomware IT 121

Security Affairs

FEBRUARY 13, 2024

Maintainers behind the Ransomfeed platform have released Q3 Report 2023 including activities of 185 criminal groups operating worldwide. The data collected unearthed a total of 1771 ransomware claims, with 55 recorded incidents in Italy. Let us now delve into the detailed breakdown of the days.

Ransomware 115

Ransomware Data collection Cybersecurity Information Security 115

Security Affairs

FEBRUARY 9, 2024

Black Basta ransomware gang claims the hack of the car maker Hyundai Motor Europe and the theft of three terabytes of their data. BleepingComputer reported that the Car maker Hyundai Motor Europe was breached by the Black Basta ransomware gang. The threat actors claim to have stolen three terabytes of data from the company.

Ransomware 132

Ransomware Data breaches Manufacturing Sales 132

Security Affairs

FEBRUARY 28, 2024

Analyzing the Email Security Landscape and exploring Emerging Threats and Trends. In the ever-shifting digital arena, staying ahead of evolving threat trends is paramount for organizations aiming to safeguard their assets. Key Findings from the “Email Security in 2024” Report In an exhaustive review, VIPRE processed 7.2

Security 124

Security Phishing Communications Financial Services 124

Security Affairs

MARCH 18, 2024

Japanese technology giant Fujitsu on Friday announced it had suffered a malware attack, threat actors may have stolen personal and customer information. The company launched an investigation into the incident and discovered that threat actors may have exfiltrated files containing personal and customer information.

Data breaches 119

Data breaches Access Government IT 119

Security Affairs

APRIL 26, 2024

Media reported [ 1 , 2 ] that the company is notifying millions of current and former members of a data breach. TechCrunch reported that the company confirmed it shared patients’ information with third-party organizations, including Google, Microsoft and X, for advertising purposes. million residents.

Data breaches 79

Data breaches Passwords Government Access 79

Security Affairs

APRIL 12, 2024

Deepfakes are created using generative AI , attackers manipulate audio and/or visual data to fabricate content of interest of a targeted individual. “In our case, an employee received a series of calls, texts, and at least one voicemail featuring an audio deepfake from a threat actor impersonating our CEO via WhatsApp.”

Communications 118

Communications Passwords Cybersecurity Access 118

Security Affairs

MARCH 17, 2024

G-Data researchers found at least 13 such Github repositories hosting cracked software designed to deliver the RisePro info-stealer. The experts created a threat-hunting tool that allowed them to identify the repositories involved in this campaign. ” reads the report published by G-Data.

Passwords 118

Passwords File names Archiving Cybersecurity 118

Security Affairs

OCTOBER 23, 2023

billion Aadhaars issued by the UIDAI since this ID service launched in 2009, this system represents one of the largest biometric ID programs on the planet, according to a report published by think tank Brookings Institution. The Moody’s report also warned that there are security and privacy vulnerabilities in Aadhaar’s centralized system.

Sales 131

Sales e-Discovery Data breaches Risk 131

Security Affairs

APRIL 17, 2024

Threat actors are exploiting the CVE-2023-22518 flaw in Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. At the end of October 2023, Atlassian warned of a critical security flaw, tracked as CVE-2023-22518 (CVSS score 9.1), that affects all versions of Confluence Data Center and Server.

Ransomware 137

Ransomware Encryption Access IT 137

Thales Cloud Protection & Licensing

NOVEMBER 13, 2023

Defending Financial Services Against Fraud in a Shifting Cyber Landscape sparsh Tue, 11/14/2023 - 05:05 As we approach International Fraud Awareness Week during 12-18 November 2023, taking stock of the evolving threat landscape and the vulnerabilities that financial services organizations face is crucial.

Financial Services 104

Financial Services Blockchain Encryption Cloud 104

Security Affairs

JANUARY 22, 2024

Resecurity has detected a noticeable increase in data leaks from consumer-focused platforms in Thailand, confirming that threat actors are actively targeting the personal data of citizens now at the beginning of 2024. But as we step into 2024, this trend might see a change.

Data breaches 123

Data breaches Personal data Communications Government 123

Security Affairs

MARCH 31, 2024

DinodasRAT (aka XDealer ) is written in C++ and supports a broad range of capabilities to spy on users and steal sensitive data from a target’s system. ESET researchers reported that a Windows version of DinodasRAT was used in attacks against government entities in Guyana. ” concludes the report.

Libraries 138

Libraries Encryption Communications Government 138

Security Affairs

SEPTEMBER 27, 2023

DarkBeam left an Elasticsearch and Kibana interface unprotected, exposing records from previously reported and non-reported data breaches. DarkBeam has apparently been collecting information to alert its customers in case of a data breach. Sample of leaked data. Sample of leaked data. billion records.

Passwords 144

Passwords Data breaches Phishing Risk 144

Security Affairs

OCTOBER 4, 2023

The DRM Report Q2 2023 report provides a detailed insight into the ransomware threat landscape during the period between May and August 2023. In an era where digitalization has woven its web into the very fabric of our lives, the dark underbelly of the digital realm continues to pose an ever-growing threat.

Ransomware 116

Ransomware Data collection Cybersecurity Security 116

Security Affairs

APRIL 18, 2024

BlackBerry reported that the financially motivated group FIN7 targeted the IT department of a large U.S. In late 2023, BlackBerry researchers spotted the threat actor FIN7 targeting a large US automotive manufacturer with a spear-phishing campaign. carmaker with spear-phishing attacks. com”, which is a free online scanner.

Phishing 113

Phishing Manufacturing Libraries IT 113

Security Affairs

MARCH 4, 2024

Threat actors stole sensitive and confidential data from the telecom giant Chunghwa Telecom Company, revealed the Ministry of National Defense. Threat actors stole sensitive information from the company, including military and government documents, revealed Taiwan’s Defense Ministry. Threat actors claim they have stolen 1.7

Military 120

Military Sales Government Information Security 120

Thales Cloud Protection & Licensing

MARCH 6, 2024

API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action madhav Thu, 03/07/2024 - 04:56 APIs (Application Programming Interfaces) are the backbone of modern digital innovation. Yet, amidst this accelerated adoption of APIs comes a significant change in the threat landscape.

Security 87

Security Authentication Risk Cybersecurity 87

Security Affairs

APRIL 15, 2024

Industrial and enterprise IoT cybersecurity firm Claroty reported that the Ukrainian Blackjack hacking group claims to have damaged emergency detection and response capabilities in Moscow and beyond the Russian capital using a destructive ICS malware dubbed Fuxnet. . ” continues the report. ” states the website.

IoT 132

IoT Access Communications Military 132

Security Affairs

APRIL 21, 2024

carmaker with phishing attacks Law enforcement operation dismantled phishing-as-a-service platform LabHost Previously unknown Kapeka backdoor linked to Russian Sandworm APT Cisco warns of a command injection escalation flaw in its IMC. Automotive Industry Chinese Organized Crime’s Latest U.S.

Data breaches 107

Data breaches Security MDM Ransomware 107

Security Affairs

MARCH 7, 2024

Threat actors are using Facebook messages to spread a Python-based information stealer dubbed Snake, researchers warn. Cybereason researchers warn that threat actors are utilizing Facebook messages to spread the Snake malware, a Python-based information stealer. ” reads the report published by Cybereason.

Archiving 129

Archiving Cybersecurity IT Information Security 129

Security Affairs

NOVEMBER 29, 2023

Cloud identity and access management solutions provider Okta revealed additional threat actor activity linked to the October 2023 breach. Okta provided additional details about the October 2023 breach and revealed additional threat actor malicious activities. reads the post published by the company.

Authentication 115

Authentication Cloud Access Archiving 115