Ransomware gets the headlines, and phishing sets off the most alerts, but business email compromise costs enterprises the most - more than $43 billion since 2016. U.S. Secret Service agents Stephen Dougherty and Michael Johns discuss the criticality of rapid detection and response.
Identity and access management giant Okta says some customer data was exposed by the "relentless phishing campaign" that breached Twilio, which it uses to provide some SMS services. Twilio says attackers accessed data for 163 customer organizations.
An Iranian government-backed hacking group known as Charming Kitten has updated its malware arsenal to include an email inbox scraping tool, proof of the group's dedication to developing and maintaining purpose-built capabilities. The tool spoofs the user agent to look like an outdated browser.
In the tit-for-tat world of advanced persistent threats, security measures set by Microsoft such as multifactor authentication are being met by Russian hacking group APT29 with circumvention techniques. Mandiant says it's seeing several new hacking methods by the group, also known as Cozy Bear.
Four ISMG editors discuss how security leaders determine the right level of security for the business, the growing risk of business ID theft to enterprises, and the arrest of a developer suspected of working for cryptocurrency mixing service Tornado Cash, for "facilitating money laundering."
Cloud collaboration suites like Microsoft 365 are critical to business success, but have become significant entry points for potential exploitation. Just as your team relies on email and collaboration tools to accomplish their goals, so too do sophisticated threat actors. And while the built-in security of Microsoft...
Attackers are attempting to reset the passwords of some DigitalOcean customers, the cloud infrastructure provider says. The email addresses of these customers were likely exposed in a data breach involving Mailchimp, which provided transactional email services for DigitalOcean.
Marketers rely on events to create brand awareness and generate demand, and physical events are coming back after the COVID-19 pandemic, says Gily Netzer of Perimeter 81. But "not everybody is traveling," she says, so hybrid events - and SaaS-driven corporate networks - are the future for companies.
The average person believes using Multi-Factor Authentication (MFA) makes them significantly less likely to be hacked. That is simply not true! Hackers can bypass 90-95% of MFA solutions much easier than you would think. Using a regular looking phishing email, they can bypass MFA just as easily as if it were a simple...
It feels like we hear about a new devastating cyberattack in the news every day, and attack methods seem to be proliferating at an exponential rate. So, which tactics should you be aware of beyond standard “click and infect” attack vectors?
Join Roger A. Grimes, KnowBe4's Data-Driven Defense Evangelist and...
Code.org likes to practice what they teach: Internet safety. Since 2013, Code.org has been on a mission to increase participation and diversity in computer science. A growing team managing projects across the United States and an increase in staff turnover led to concerns over password security. To address those...
The challenge to secure every login grows. With the rise of a remote workforce and the rapid adoption of cloud applications, businesses need to ensure security while enabling their employees to work from anywhere.
But it’s not just about security. Passwords are a source of frustration, decreased efficiency, and...
In this eBook, you'll learn about key research findings to help you evaluate how well you're protecting your organization’s users’ sessions. Here's a preview of the findings:
63% of organizations give their typical user access to between five and 10 (or more) applications that are high value, meaning they...
Data breaches are far too common nowadays. Companies need to prioritize security to protect their sensitive data without impacting ease of collaboration.
The IDC survey revealed that 83% of data breaches resulted from an identity compromise, like phishing. Organizations can stop data breaches by adopting identity...
Deploying a password management solution to select departments of your organization allows risks and vulnerabilities to persist, and even grow. Many applications are not compatible with SSO, and IT may not even be aware that their employees are using certain applications as Shadow IT increases. A password management...
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing bankinfosecurity.asia, you agree to our use of cookies.
