A recent Human Security report detailed a botnet of hundreds of thousands of Android and iOS devices called PEACHPIT. The botnet generated illicit profits for the threat actors behind a broader …
Recently Patched TagDiv Plugin Flaw Exploited to Hack Thousands of WordPress Sites
Web security firm Sucuri warned that the Balada Injector threat group recently exploited WordPress plugins associated with the Newspaper and Newsmag themes. Users have purchased the premium WordPress …
Cybercriminals Using EvilProxy Phishing Kit to Target Senior Executives in U.S. Firms
Threat actors are leveraging the adversary-in-the-middle (AiTM) toolkit EvilProxy to target senior executives in the United States. The campaign has conducted credential harvesting and account …
Hackers Join In on Israel-Hamas War With Disruptive Cyberattacks
Several hacker groups have joined in on the Israel-Hamas conflict escalation that started over the weekend after the Palestinian militant group launched a major attack. Hundreds have been killed and …
Continue Reading about Hackers Join In on Israel-Hamas War With Disruptive Cyberattacks
Incentivizing Secure Online Behavior Across Generations
As the landscape of online security continues to evolve, there is a noticeable shift in people’s perceptions of cybersecurity, with an increasing awareness of its vital role in staying safe online, …
Continue Reading about Incentivizing Secure Online Behavior Across Generations
DC Board of Elections Discloses Data Breach
On Friday, the District of Columbia Board of Elections (DCBOE) confirmed that voter records were compromised in a data breach at a third-party services provider. The incident came to light after a …
Continue Reading about DC Board of Elections Discloses Data Breach
23andMe Cyberbreach Exposes DNA Data, Potential Family Ties
23andMe, the popular DNA testing company, has launched an investigation after client information was listed for sale on a cybercrime forum this week. The information leaked in the breach includes …
Continue Reading about 23andMe Cyberbreach Exposes DNA Data, Potential Family Ties
AWS to Mandate Multi-Factor Authentication from 2024
Amazon Web Services (AWS) said it will require multi-factor authentication (MFA) for all privileged accounts starting mid-2024, in a bid to improve default security and reduce the risk of account …
Continue Reading about AWS to Mandate Multi-Factor Authentication from 2024
GitHub Improves Secret Scanning Feature With Expanded Token Validity Checks
On Wednesday, software development giant GitHub announced an enhancement to its secret scanning feature, now allowing users to check the validity of exposed credentials for major cloud services. The …
Continue Reading about GitHub Improves Secret Scanning Feature With Expanded Token Validity Checks
Enterprises see AI as a Worthwhile Investment
92% of AI team leaders at leading-edge organizations felt that their AI initiatives are generating value, according to Wallaroo.AI. Having found a successful formula, most of those surveyed plan to …
Continue Reading about Enterprises see AI as a Worthwhile Investment