Your blog category
A recent study by Wing Security found that 63% of businesses may have former employees with access to organizational data, and that automating SaaS Security can help mitigate offboarding risks. … Read More »New Research Warns About Weak Offboarding Management and Insider Risks
The U.S. Department of Justice (DoJ) has sentenced a 31-year-old man to 10 years in prison for laundering more than $4.5 million through business email compromise (BEC) schemes and romance… Read More »U.S. Sentences 31-Year-Old to 10 Years for Laundering $4.5M in Email Scams
A never-before-seen North Korean threat actor codenamed Moonstone Sleet has been attributed as behind cyber attacks targeting individuals and organizations in the software and information technology, education, and defense industrial… Read More »Microsoft Uncovers ‘Moonstone Sleet’ — New North Korean Hacker Group
The online criminal bazaar BreachForums has been resurrected merely two weeks after a U.S.-led coordinated law enforcement action dismantled and seized control of its infrastructure. Cybersecurity researchers and dark web… Read More »BreachForums Returns Just Weeks After FBI Seizure – Honeypot or Blunder?
An Indian national has pleaded guilty in the U.S. over charges of stealing more than $37 million by setting up a website that impersonated the Coinbase cryptocurrency exchange platform. Chirag… Read More »Indian National Pleads Guilty to $37 Million Cryptocurrency Theft Scheme
You’re probably familiar with the term “critical assets”. These are the technology assets within your company’s IT infrastructure that are essential to the functioning of your organization. If anything happens… Read More »4-Step Approach to Mapping and Securing Your Organization’s Most Critical Assets
The threat actors behind the CatDDoS malware botnet have exploited over 80 known security flaws in various software over the past three months to infiltrate vulnerable devices and co-opt them… Read More »Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique
A maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices by sending specially crafted requests. The vulnerability, tracked… Read More »TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks
Unknown threat actors are abusing lesser-known code snippet plugins for WordPress to insert malicious PHP code in victim sites that are capable of harvesting credit card data. The campaign, observed by Sucuri… Read More »WordPress Plugin Exploited to Steal Credit Card Data from E-commerce Sites
The transition to the cloud, poor password hygiene and the evolution in webpage technologies have all enabled the rise in phishing attacks. But despite sincere efforts by security stakeholders to mitigate them… Read More »Report: The Dark Side of Phishing Protection