Introduction Cybersecurity experts are on high alert, as the 2024 Olympic Games continue over the coming weeks. Historically, the Olympics have been a prime target for cybercriminals, state-sponsored actors, and hacktivists. The convergence of global attention, vast amounts of sensitive…
Category: EN
Cybercriminals Abusing Cloudflare Tunnels to Evade Detection and Spread Malware
Cybersecurity companies are warning about an uptick in the abuse of Clouflare’s TryCloudflare free service for malware delivery. The activity, documented by both eSentire and Proofpoint, entails the use of TryCloudflare to create a one-time tunnel that acts as a…
Dark web offers botnets as low as $99
For those contemplating launching cyber attacks on their customers, partners, or competitors, the dark web now offers botnets for as little as $99. This article aims to shed light on these alarming developments in the cybercrime world, without endorsing illegal…
The Need for Budget Boosts to Combat AI-Generated Cyber Attacks
As artificial intelligence (AI) continues to advance, its impact on cybersecurity becomes increasingly profound. AI-generated cyber attacks are evolving rapidly, posing significant threats to organizations across various sectors. To effectively combat these sophisticated threats, a substantial increase in cybersecurity budgets…
NCA Shuts Down Major Fraud Platform that Triggers 1.8 Million Scam Calls
Today, the National Crime Agency (NCA) revealed the successful shutdown of Russian Coms, a sophisticated fraud platform responsible for defrauding thousands of victims worldwide. Established in 2021, this platform facilitated over 1.3 million scam calls to 500,000 unique UK phone…
Infosec Institute Partners with Career.io to Help Students Launch Cybersecurity Careers
Infosec Institute, a cybersecurity education provider, is parterning with Career.io, a provider of professional career-development products and services. This collaboration aims to offer comprehensive career services to students enrolled in Infosec’s Immersive Boot Camps, equipping them with the skills and…
UK crimebusters shut down global call-spoofing outfit that claimed 170K-plus victims
Suspected devs behind Russian Coms cuffed – now to find the users of the nastyware The UK’s National Crime Agency (NCA) has shut down an outfit called Russian Coms – a call-spoofing service believed to have swindled hundreds of thousands…
Microsoft confirms cyber attack cause outage and it’s own defences may have made the impact worse: Cybersecurity Today for Friday, August 2, 2024
In this episode of Cybersecurity Today, host Jim Love explores the aftermath of Microsoft’s 10-hour global outage due to a DDoS attack, the Canadian Privacy Commissioner’s investigation into Ticketmaster, the severe impact of a ransomware attack on U.S. blood bank…
DNS Vulnerability: ‘Sitting Ducks’ Exposes Millions of Domains to Hijacking
A recently discovered vulnerability in the Domain Name System (DNS), dubbed ‘Sitting Ducks,’ has left millions of domains susceptible to hijacking. This attack vector, actively exploited since 2019, enables threat actors to deliver malware, phish, impersonate brands, and exfiltrate data.…
Japan mandates app to ensure national ID cards aren’t forged
First delays, then data leaks – now fraud detection needed at point of use The Japanese government has released details of of an app that verifies the legitimacy of its troubled My Number Card – a national identity document.… This…
Sitting Ducks attack technique exposes over a million domains to hijacking
Researchers warn of an attack vector in the DNS, called the Sitting Ducks, that exposes over a million domains to hackers’ takeover. Researchers from Eclypsium and Infoblox have identified an attack vector in the domain name system (DNS), dubbed the Sitting…
Navigating Indispensable Cybersecurity Practices for Hybrid Working Professionals
A solid cybersecurity program can help prevent cyberattacks, protect networks and communication and give both employers and remote employees peace of mind. The post Navigating Indispensable Cybersecurity Practices for Hybrid Working Professionals appeared first on Security Boulevard. This article has…
CSMA Starts with Identity A Comprehensive Approach to Modern Cybersecurity
With the rise of AI, NHIs (non-human identities) are booming, and attacks are becoming increasingly identity-first and AI-powered, making them faster, evasive and more sophisticated. The post CSMA Starts with Identity A Comprehensive Approach to Modern Cybersecurity appeared first on…
The Unbreakable Bond: Why Identity and Data Security are Inseparable
Identity security and data security must be addressed simultaneously for an organization’s security posture to address security risks and threats adequately. The post The Unbreakable Bond: Why Identity and Data Security are Inseparable appeared first on Security Boulevard. This article…
Organizations fail to log 44% of cyber attacks, major exposure gaps remain
40% of tested environments allowed attack paths that lead to domain admin access, according to Picus Security. Achieving domain admin access is particularly concerning because it is the highest level of access within an organization’s IT infrastructure, and is like…
Record-breaking $75 million ransom paid to cybercrime group
Ransomware attacks have reached new heights of ambition and audacity over the past year, marked by a notable surge in extortion attacks, according to a Zscaler. The findings from the report uncovered a record-breaking ransom payment of $75 million to…
LuLu – 190,506 breached accounts
In July 2024, the Emirati-based LuLu retail store suffered a data breach. The impacted data included 190k email addresses and associated phone numbers which were subsequently shared on a popular hacking forum. This article has been indexed from Have I…
Open-source project enables Raspberry Pi Bluetooth Wi-Fi network configuration
Remote.It released its open-source project to enable Raspberry Pi Bluetooth (BLE) Wi-Fi network configuration. The project allows a computer or mobile device to easily transfer a Wi-Fi configuration via Bluetooth, the same way users set up smart devices around the…
India contemplates compulsory dynamic 2FA for digital payments
SMS OTPs are overused, so bring on the tokens and biometrics India’s central bank on Wednesday proposed a requirement for dynamically generated second authentication factors for most digital payments.… This article has been indexed from The Register – Security Read…
New infosec products of the week: August 2, 2024
Here’s a look at the most interesting products from the past week, featuring releases from: Adaptive Shield, Fortanix, Clutch Security, Nucleus Security, Wing Security and Synack. Adaptive Shield unveils ITDR platform for SaaS Adaptive Shield has unveiled its Identity Threat…