North Korea Remote Worker Scam Goes Global, Expands Target Industries
A report by Okta researchers says the notorious North Korea IT worker scams, which have focused on U.S. tech and...
Identity & Access
Hacker Stole Sensitive Data From FEMA, Border Patrol: Reports
An assessment by DHS found that hackers were able to access FEMA servers by exploiting the CitrixBleed 2 vulnerability and...
Google Mandiant: Emails Sent to Corporate Execs Claiming Oracle Data Theft
Corporate executives at multiple organizations are receiving malicious emails from threat actors saying they are associated with the Cl0p ransomware...
CISA Ends Funding for MS-ISAC Program for State and Local Governments
CISA ended a 21-year agreement with CIS to run MS-ISAC, a cyberthreat resource and information-sharing program that local and state...
Announcing the HYPR Help Desk Application: Turn Your Biggest Risk into Your Strongest Defense
The call comes in at 4:55 PM on a Friday. It’s the CFO, and she’s frantic. She’s locked out of...
‘Aggressive’ Akira Ransomware Blitz Clubs SonicWall 2FA to DEATH
Yet another security problem plaguing SonicWall customers.The Akira gang have found a way to override the multifactor authentication in SonicWall SSL...
Microsoft Sniffs Out AI-Based Phishing Campaign Using Its AI-Based Tools
Microsoft’s threat researchers recently detected and blocked a phishing campaign that appeared to use a large language model (LLM) to...
African Authorities Arrest 260 Suspects in Romance, Sextortion Scams
More than 260 suspects were arrested and 1,235 electronic devices – including USB drives and SIM cards – seized in a...
Salesforce Faces Lawsuits Over Compromises of Third-Party Apps: Report
Salesforce executives for much of the year have reiterated that an onslaught of cyberattacks on a range of its partners...
How to Enable MFA Before RDP and SSH Sessions
Remote access is essential for modern enterprises. IT administrators, DevOps teams, and vendors need to connect to critical infrastructure using...
Malicious MCP Server Found Quietly Stealing Emails
In its first 15 iterations, a Model Context Protocol (MCP) server downloaded upwards of 1,500 times a week from the...
The Future of Multi-Factor Authentication in an AI-Driven Content Marketing Agency
Modern content marketing agencies must not only embrace AI-driven strategies but also set down security policies and protocols that...
When Every Second Counts: Rethinking Authentication for Modern Healthcare
In the emergency room at 2 AM, a cardiac patient arrives in distress. The attending physician rushes to the nearest...
Self-Replicating Worm Compromising Hundreds of NPM Packages
An ongoing supply chain attack dubbed "Shai-Hulud" has compromised hundreds of packages in the npm repository with a self-replicating worm...
Jaguar Land Rover Admits to Longer Shutdown as Childish Hackers Troll Carmaker
JLR vs. SLH: Jaguar Land Rover woes worse than previously thought. The post Jaguar Land Rover Admits to Longer Shutdown...
