Tue.Feb 07, 2023

article thumbnail

LockBit Group Goes From Denial to Bargaining Over Royal Mail

Data Breach Today

Ransomware Remains a Royal Pain, as Criminals' Latest Extortion Attempt Highlights The LockBit group has gone from denying it had any involvement in the ransomware attack on Britain's Royal Mail, to trying to bargain for a ransom.

article thumbnail

KrebsOnSecurity in Upcoming Hulu Series on Ashley Madison Breach

Krebs on Security

KrebsOnSecurity will likely have a decent amount of screen time in an upcoming Hulu documentary series about the 2015 megabreach at marital infidelity site Ashley Madison.

Security 210
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GUEST ESSAY: Advanced tools are ready to help SMBs defend Microsoft 365, Google Workspace

The Last Watchdog

Throughout 2022, we saw hackers become far more sophisticated with their email-based cyber attacks. Using legitimate services and compromised corporate email addresses became a norm and is likely to continue in 2023 and beyond. Related: Deploying human sensors Additionally, with tools like ChatGPT, almost anyone can create new malware and become a threat actor.

article thumbnail

Microsoft Experiences Second Major Cloud Outage in 2 Weeks

Data Breach Today

Recent Changes' Blamed as Outlook.com Webmail and Calendar APIs Left Inaccessible Microsoft suffered its second major outage in less than two weeks, as users in North American and beyond were left unable to send, receive or search emails via Outlook.com, as well as to access some additional functionality, including calendar APIs.

Cloud 162
article thumbnail

Everything You Need to Know About Crypto

Speaker: Ryan McInerny, CAMS, FRM, MSBA - Principal, Product Strategy

This exclusive webinar with Ryan McInerny will teach you all about cryptocurrency and NFTs! Register to learn more about identifying crypto transactions, crypto asset market trends, managing risk and compliance, and supporting customers and partners using crypto-based payments.

article thumbnail

DPRK Using Unpatched Zimbra Devices to Spy on Researchers

Dark Reading

Lazarus Group used a known Zimbra bug to steal data from medical and energy researchers

144
144

More Trending

article thumbnail

'Money Lover' Finance App Exposes User Data

Dark Reading

A broken access control vulnerability could have led to dangerous follow-on attacks for users of the money-management app

Access 144
article thumbnail

Ryuk-Linked Russian Pleads Guilty in US Court

Data Breach Today

Russian National Charged With Laundering More Than $400,000 for Ryuk RaaS Group Denis Mihaqlovic Dubnikov, 30, pleaded guilty in U.S. federal court to conspiracy to commit money laundering.

article thumbnail

Ongoing VMware ESXi Ransomware Attack Highlights Inherent Virtualization Risks

Dark Reading

The global assault on vulnerable VMware hypervisors may have been mitigated by updating to the latest version of the product, but patch management is only part of the story

Risk 137
article thumbnail

Claudia Plattner Picked as New Head of Germany's BSI

Data Breach Today

The European Central Bank Director General of Info Systems Will Join BSI in July The German government selected a new president for the Federal Office for Information Security, better known as BSI.

article thumbnail

Contact vs. Company Intent Signal Data

Intent signal data comes in two types: either companies or individuals signaling interest in products like yours. Which kind of data delivers more advantages to B2B marketers? It depends. Get this infographic to learn about the advantages of intent-based leads and how you can most effectively use both types of data.

article thumbnail

Cloud Apps Still Demand Way More Privileges Than They Use

Dark Reading

Hackers can't steal a credential that doesn't exist

Cloud 136
article thumbnail

Fortinet Weathers Economic Storm By Helping Users Cut Costs

Data Breach Today

Fortinet CEO Says Performance Advantage Over Rivals Has Blunted Impact of Downturn Fortinet has blunted the impact of the economic downturn by helping customers consolidate their security footprint and add protection in areas like OT, WiFi and SD-WAN.

article thumbnail

A Fool With a Tool Is Still a Fool: A Cyber Take

Dark Reading

New tech often requires new thinking — but that's harder to install

128
128
article thumbnail

Secureworks Lays Off 9% of Staff; CFO, Threat Intel Head Out

Data Breach Today

Roughly 210 Employees Exit in Security Industry's 4th-Largest Workforce Reduction Secureworks has axed roughly 210 employees, and CFO Paul Parrish and Chief Threat Intelligence Officer Barry Hensley are leaving their posts.

article thumbnail

Exploring the Overlap: Cost Optimization and Digital Transformation

Speaker: Alex Jiménez, Managing Principal, Financial Service Consulting for EPAM

The largest banks have increased reserves for protection against deteriorating economic conditions. Should banks delay their digital transformation investments and focus on cost reductions? In this webinar, Alex Jiménez will walk us through that question and examine the prudent course of action.

article thumbnail

Fresh, Buggy Clop Ransomware Variant Targets Linux Systems

Dark Reading

For the moment, victims can decrypt data without paying a ransom. But Clop is a ransomware variant that has caused havoc on Windows systems, so that's bound to change

article thumbnail

European Police Shut Down Encrypted App Used by Criminals

Data Breach Today

Police Seize Drugs, Firearms and 4M Euros in Raids on Exclu Users and Operators Police in multiple European countries carried out raids against the operators and users of the Exclu encrypted chat app, arresting four dozen individuals.

article thumbnail

Biden’s SOTU: Data Privacy Is Now a Must-Hit US State of the Union Topic

WIRED Threat Level

Biden’s speech proves that protecting personal info is no longer a fringe issue. Now, Congress just needs to do something about it. Security Security / Privacy

article thumbnail

7 Reasons to Choose an MDR Provider

Data Breach Today

MDR Services Offer Deep Domain Expertise, Robust Research Tools and Skills Detecting and responding to cyberthreats is challenging for any organization, but even more so for small security teams. MDR services make threat monitoring and response attainable for any team.

article thumbnail

Intent Signal Data 101

Intent signal data helps B2B marketers engage with buyers sooner in the sales cycle. But there are many confusing terms used to describe intent data. Read this infographic to better understand three common areas of confusion.

article thumbnail

New Banking Trojan Targeting 100M Pix Payment Platform Accounts

Dark Reading

New malware demonstrates how threat actors are pivoting toward payment platform attacks, researchers say

111
111
article thumbnail

[Scam Of The Week] The Turkey-Syria Earthquake

KnowBe4

Just when you think they cannot sink any lower, criminal internet scum is now exploiting the recent earthquake in Turkey and Syria. Phishing Cybercrime Scam Of The Week

Phishing 101
article thumbnail

Industrial Cybersecurity Innovator Opscura Receives $9.4M in Series A Funding as Critical Operations Transform

Dark Reading

article thumbnail

OpenSSH addressed a new pre-auth double free vulnerability

Security Affairs

The maintainers of OpenSSH address multiple security issues, including a memory safety bug in the OpenSSH server (sshd). The maintainers of OpenSSH have addressed a number of security vulnerabilities with the release of version 9.2.

article thumbnail

The Anti-Money Laundering Act of 2020: Initial Catalysts, Current Implications, and Future Impacts

Speaker: Elizabeth "Paige" Baumann, Founder and CEO of Paige Baumann Advisory, LLC

In this session, Elizabeth “Paige” Baumann will cover the Anti-Money Laundering Act of 2020, which also includes the Corporate Transparency Act. She'll take a deep dive into the catalysts that brought on the act, the current implications of the act, and what impacts the act has on the future of banking and finance.

article thumbnail

Backdoor in Dingo Cryptocurrency Allows Creator to Steal (Nearly) Everything

Dark Reading

A tax variable in the software implementing the Dingo Token allows the creators to charge 99% in fees per transaction, essentially stealing funds, an analysis finds

111
111
article thumbnail

Lovin’ The Prufrock: Celebrating 108 Years of T.S. Eliot’s Modernist Masterpiece

Information Governance Perspectives

In literature like Prufrock, modernists often recycled myths and other masterworks to support their impressions of daily life and present-day experiences. They juxtaposed different voices, traditions, and arguments and emphasized form itself as the "carrier of meaning."

article thumbnail

With TikTok Bans, the Time for Operational Governance Is Now

Dark Reading

Emerging risks and trends need to be monitored, but cybersecurity challenges can be fixed with a focus on the fundamentals

article thumbnail

Malware Delivered through Google Search

Schneier on Security

Criminals using Google search ads to deliver malware isn’t new, but Ars Technica declared that the problem has become much worse recently. The surge is coming from numerous malware families, including AuroraStealer, IcedID, Meta Stealer, RedLine Stealer, Vidar, Formbook, and XLoader.

article thumbnail

Aggregage Intent Signal Service

Aggregage Intent Signal Service helps your sales team reach more active buyers sooner. You’ll get names and contact information of specific in-market buyers plus all companies and job titles signaling intent for your product or service. Get the overview to learn more!

article thumbnail

5 Ways to Survive Scam Season — or Rather, Tax Season

Dark Reading

Security pros need to look beyond user education to find and disarm fraudulent actors

article thumbnail

[New Feature] Immediately Add User-Reported Email Threats to Your Microsoft 365 Blocklist from Your PhishER Console

KnowBe4

Now there’s a super easy way to keep malicious emails away from your users through the power of the KnowBe4 PhishER platform! Phishing Security Awareness Training KnowBe4

article thumbnail

Optimizing Cybersecurity Investments in a Constrained Spending Environment

Dark Reading

Three ways to stay safe in an economically uncertain 2023