Sekoia: Latest in the Financial Sector Cyber Threat Landscape
Phishing, infostealer malware, ransomware, supply chain attacks, data breaches and crypto-related attacks are among the top evolving threats in the financial sector, says Sekoia.
Google Cloud’s Cybersecurity Trends to Watch in 2024 Include Generative AI-Based Attacks
A November report from Google Cloud details possible nation-state malware tactics in 2024 and new angles of cyberattacks.
New SecuriDropper Malware Bypasses Android 13 Restrictions, Disguised as Legitimate Applications
A new malware is bypassing an Android 13 security measure that restricts permissions to apps downloaded out of the legitimate Google Play Store.
Generative AI Can Write Phishing Emails, But Humans Are Better At It, IBM X-Force Finds
Hacker Stephanie "Snow" Carruthers and her team found phishing emails written by security researchers saw a 3% better click rate than phishing emails written by ChatGPT.
New Netskope Report Exposes Increasing Use of Cloud Apps to Spread Malware
Microsoft OneDrive accounts for 26% of the overall usage of cloud storage apps to host malware, ahead of Microsoft PowerPoint and GitHub.
New CISA and NSA Identity and Access Management Guidance Puts Vendors on Notice
This CISA-NSA guidance reveals concerning gaps and deficits in the multifactor authentication and Single Sign-On industry and calls for vendors to make investments and take additional steps.
New EvilProxy Phishing Attack Uses Indeed.com Redirector to Target US Executives
Microsoft, the Dark Web and the name John Malkovich all factor into this EvilProxy phishing attack. The good news is there are steps IT can take to mitigate this security threat.
New DarkGate Malware Campaign Hits Companies Via Microsoft Teams
Get technical details about how this new attack campaign is delivered via Microsoft Teams and how to protect your company from this loader malware.
Abnormal Security: Microsoft Tops List of Most-Impersonated Brands in Phishing Exploits
A new study found that 4.31% of phishing attacks mimicked Microsoft, far ahead of the second most-spoofed brand PayPal.
Major US Energy Company Hit by QR Code Phishing Campaign
This QR code phishing campaign is targeting multiple industries and using legitimate services such as Microsoft Bing to increase its efficiency and bypass security.