Security
SecurityUber exposes Lapsus$ extortion group for security breach
In last week’s security breach against Uber, the attackers downloaded internal messages from Slack as well as information from a tool used to manage invoices.
-
Image: Sundry Photography/Adobe Stock -
Image: Adobe Stock Security
SecurityHow to protect your organization’s single sign-on credentials from compromise
Half of the top 20 most valuable public U.S. companies had at least one single sign-on credential up for sale on the Dark Web in 2022, says BitSight.
-
Image: William W. Potter/Adobe Stock Big Data
CXOCosmetics giant Sephora first to be fined for violating California’s Consumer Privacy Act
Sephora will have to pay $1.2 million in penalties, inform California customers it sells their personal data and offer them ways to opt out.
-
Image: Getty Images/iStockphoto/Balefire9 Microsoft
SecurityHow a business email compromise attack exploited Microsoft’s multi-factor authentication
Mitiga says that MFA, even if improperly configured, is no panacea for preventing attackers from abusing compromised credentials.
-
Image: iStock/jauhari1 CXO
SecurityHow a business email compromise scam spoofed the CFO of a major corporation
In a scam analyzed by Avanan, the victim received an email claiming to be from the CFO directing them to make a payment to their insurance company.
-
Image: nevarpp, Getty Images/iStockphoto CXO
SecurityHow ransomware attacks target specific industries
Analyzing over 100 prominent ransomware incidents, Barracuda found the top targeted sectors to be education, municipalities, healthcare, infrastructure and financial.
-
Image: JustSuper/Adobe Stock Security
SecurityHow to protect your organization from ransomware-as-a-service attacks
RaaS kits are easy to find on the Dark Web, lowering the barrier of entry so that virtually any cybercriminal can launch successful ransomware attacks, says Microsoft.
-
Image: Adobe Stock Apple
SecurityApple users urged to install latest updates to combat hacking
The new updates patch security flaws in iOS/iPadOS, macOS and Safari that could be exploited by hackers to gain remote control of an affected device.
-
Image: Adobe Stock Amazon
SecurityHow phishing attacks are exploiting Amazon Web Services
By using a legitimate service like AWS to create phishing pages, attackers can bypass traditional security scanners, says Avanan.
-
Image: Login DG-Studio/Adobe Stock Security
SecurityHow to protect your industrial facilities from USB-based malware
USB-borne malware can infect your industrial equipment unless you take the proper precautions, says Honeywell.