Spam mail is more dangerous than you think — here’s what you need to know
Every day, your spam folder receives emails from undesirables, from unwanted newsletters to phony product offers to Nigerian princes’ promises of princely sums. This just shows that pesky spam mail continues to be a problem for businesses — and it’s a costly one too. Based on a recent study, spam costs businesses $20 billion every […]
8 Essential solutions to boost your company’s cybersecurity
No matter what business you’re in, cybersecurity will always be a major concern. Cybercriminals are constantly coming up with new ways to infiltrate company networks, whether it be through malicious software, phishing attacks, or other methods. To stay one step ahead of these threats, you need to have powerful defenses. Here are eight security solutions […]
Creating strong passwords for your business online accounts
Passwords remain among the most commonly used methods for securing information, even though they are no longer as effective as they used to be. In fact, Verizon’s 2022 Data Breach Investigations Report identified passwords to be among the four leading vectors for cyberattacks. The report also revealed that more than 80% of web application breaches […]
Scammers Impersonating Refund Payment Portals
The FBI warns about scammers pretending to be refund payment gateways from financial institutions to steal sensitive information from unsuspecting victims. The federal law enforcement agency stated that scammers deceive victims into granting them access to their computers via email or phone calls by posing as representatives of technical or computer repair companies. According to […]
Twitter’s Data Leak Exposes Over 5.4 Million Users
Earlier this year, Twitter confirmed that an API vulnerability had caused a massive data leak containing non-public information for over 5.4 million Twitter users. Twitter denied claims that hackers had leaked the private information priorly. However, Pompompurin, the owner of the hacking forum Breached, stated they were responsible for exploiting the API bug and platforming […]
Phishing-as-a-Service on the Rise with Caffeine
Threat actors may now launch their own sophisticated assaults thanks to the emergence of Phishing as a Service (PhaaS) platforms like “Caffeine.” Through an open registration procedure, anyone who wishes to launch their phishing campaign can sign up on these platforms. Security experts at Mandiant discovered the first sighting of these threats while investigating a […]
Vice Society Claims Cincinnati State College Cyberattack
Data allegedly stolen from Cincinnati State Technical and Community College has been leaked after Vice Society attacked the campus. Many of the stolen documents were posted on the hackers’ websites. These documents date from several years ago until November 24, 2022, suggesting that threat actors still have access to the compromised systems, but this has […]
Hackers Execute Arbitrary Code with Microsoft Office
According to cybersecurity experts at Cisco Talos, Microsoft Office has a high-severity vulnerability that could allow prospective cyber attackers to execute malicious code on the target device remotely. Microsoft announced the issue in a brief blog post, stating that its researcher Marcin ‘Icewall’ Noga had identified a class attribute double-free vulnerability impacting Microsoft Excel. The […]
Malicious SEO Campaign Affects Thousands of Sites
In a massive malicious SEO campaign, cybercriminals are promoting low-quality Q&A sites by redirecting visitors to fake discussion forums. As a result, almost 15,000 sites have been compromised. In September 2022, researchers at Sucuri discovered the attacks. Each compromised site was found to contain approximately 20,000 files that were utilized in the search engine campaign. […]
Phishing Kit Targets US Shoppers
Security experts at Akamai have discovered a campaign that uses an elaborate phishing kit. This campaign targets Americans using lures centered around holidays like Labor Day and Halloween. The kit combines several methods and employs several evasion detection techniques to prevent non-victims from visiting its phishing pages. One of the most intriguing aspects of the […]