Thales Cloud Protection & Licensing

JANUARY 29, 2019

Around this time each year, Thales eSecurity releases our annual Data Threat Report (DTR). Now in its sixth year, the report is squarely focused on digital transformation and what that means for organizations and their data security. In fact, 71% of organizations are using sensitive data in the cloud.

Digital transformation 92

Digital transformation Threat Reports Encryption Big data 92

The Last Watchdog

JULY 27, 2023

Paris, France, July 27, 2023 – CrowdSec , the pioneering open source and collaborative cybersecurity company, today released its Q2 2023 Majority Report , a comprehensive community-driven data report fueled by the collective efforts of its thousands of users. Only 5% of reported IPs are flagged as VPN or proxy users.

VPN 213

VPN Cybersecurity Data collection Threat Detection 213

Thales Cloud Protection & Licensing

MARCH 24, 2024

Data Security Trends: 2024 Report Analysis madhav Mon, 03/25/2024 - 05:08 Amid ongoing economic uncertainty and a progressively complex threat landscape, businesses are trying to navigate increasingly stringent regulatory requirements while bolstering their security posture.

Artificial Intelligence 139

Artificial Intelligence IoT Technology Threat Reports 139

Anton on Security

NOVEMBER 2, 2023

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our eighth Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blogs for #2 , #3 , #4 , #5 , #6 and #7 ). as usual, shocking but not surprising.

Cybersecurity 130

Cybersecurity Healthcare Account Security Accountability 130

Penetration Testing

APRIL 22, 2024

A new report from Kaspersky Labs reveals a sophisticated toolkit used by the advanced persistent threat (APT) group, “ToddyCat,” to steal massive amounts of sensitive data and maintain control over compromised systems.

Government 125

Government Penetration Testing Malware 125

The Hacker News

APRIL 15, 2024

The threat actor known as Muddled Libra has been observed actively targeting software-as-a-service (SaaS) applications and cloud service provider (CSP) environments in a bid to exfiltrate sensitive data. The threat

Software 103

Software 103

Anton on Security

OCTOBER 12, 2022

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our fourth Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blog for #2 , my unofficial blog for #3 ). that is not ‘Q2 of 1998’, that is 2022!

Cybersecurity 246

Cybersecurity Malware Accountability Authentication 246

Anton on Security

JULY 7, 2022

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our third Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blog for #2 ). Now, go and read the report! Now, go and read the report!

Cybersecurity 246

Cybersecurity Cryptocurrency Ransomware Education 246

Security Affairs

OCTOBER 19, 2023

I’m proud to announce the release of the 11th edition of the ENISA Threat Landscape (ETL) on the state of the cybersecurity threat landscape. The Europen Agency for cybersecurity ENISA releases its ENISA Threat Landscape 2023 (ETL) report , which is the annual analysis of the state of the cybersecurity threat landscape.

Social Engineering 119

Social Engineering Artificial Intelligence Engineering Ransomware 119

Bleeping Computer

APRIL 3, 2024

Department of Homeland Security's Cyber Safety Review Board (CSRB) has released a scathing report on how Microsoft handled its 2023 Exchange Online attack, warning that the company needs to do better at securing data and be more truthful about how threat actors stole an Azure signing key. [.]

122

122

Dark Reading

FEBRUARY 1, 2023

Noting 13% year-over-year growth in fraudulent instruction as a cause of loss, report predicts organizations must get smarter about educating employees to spot fraudulent tactics.

Cyber threats 76

Cyber threats Education 76

The Hacker News

MARCH 30, 2024

The ongoing infostealer attacks targeting macOS users may have adopted different methods to compromise victims' Macs, but operate with the end goal of stealing sensitive data, Jamf Threat Labs said in a report published Friday.

Malware 131

Malware 131

Security Affairs

MARCH 8, 2024

The National Cyber Security Centre (NCSC) published a data analysis report on the data breach resulting from the ransomware attack on the IT services provider Xplain. The attack took place on May 23, 2023 and the Play ransomware gang claimed responsibility for the data breach. Threat actors stole and leaked roughly 1.3

Ransomware 124

Ransomware Data breaches Unstructured Data Architecture 124

The Hacker News

MARCH 6, 2024

Facebook messages are being used by threat actors to a Python-based information stealer dubbed Snake that’s designed to capture credentials and other sensitive data. Details about the campaign&

132

132

Security Affairs

APRIL 21, 2024

The Akira ransomware has been active since March 2023, the threat actors behind the malware claim to have already hacked multiple organizations in multiple industries, including education, finance, and real estate. The Akira ransomware operators implement a double extortion model by exfiltrating victims’ data before encrypting it.

Ransomware 102

Ransomware Encryption Antivirus VPN 102

Security Affairs

FEBRUARY 9, 2024

Black Basta ransomware gang claims the hack of the car maker Hyundai Motor Europe and the theft of three terabytes of their data. BleepingComputer reported that the Car maker Hyundai Motor Europe was breached by the Black Basta ransomware gang. The threat actors claim to have stolen three terabytes of data from the company.

Hacking 132

Hacking Ransomware Data breaches Manufacturing 132

Security Affairs

DECEMBER 24, 2023

Video game publisher Ubisoft is investigating reports of an alleged data breach after popular researchers shared evidence of the hack. Ubisoft , the popular video game publisher, is examining reports of a potential data breach following the disclosure of evidence by prominent researchers vx-underground.

Data breaches 121

Data breaches Hacking Mobile Ransomware 121

Bleeping Computer

DECEMBER 25, 2023

​The source code for Grand Theft Auto 5 was reportedly leaked on Christmas Eve, a little over a year after the Lapsus$ threat actors hacked Rockstar games and stole corporate data. [.]

Hacking 134

Hacking 134

Penetration Testing

MARCH 26, 2024

A detailed report by cybersecurity firm Unit 42 has uncovered a targeted campaign by two Chinese advanced persistent threat (APT) groups aimed at compromising entities associated with the Association of Southeast Asian Nations (ASEAN)....

Penetration Testing 110

Penetration Testing Cybersecurity Malware 110

Malwarebytes

MARCH 20, 2024

Earlier this week, the data of over 70 million people was posted for sale on an online cybercrime forum. The person selling the data claims it stems from a 2021 breach at AT&T. Back in 2021, a hacker named Shiny Hunters claimed to have breached AT&T and put the alleged stolen data up for sale for $1 million for a direct sell.

Identity Theft 139

Identity Theft Data breaches Cybercrime Mobile 139

Security Affairs

FEBRUARY 13, 2024

Maintainers behind the Ransomfeed platform have released Q3 Report 2023 including activities of 185 criminal groups operating worldwide. The data collected unearthed a total of 1771 ransomware claims, with 55 recorded incidents in Italy. Let us now delve into the detailed breakdown of the days.

Ransomware 115

Ransomware Data collection Hacking Cybersecurity 115

Malwarebytes

APRIL 11, 2024

AT&T has notified US state authorities and regulators about its recent (or not) data breach, saying 51,226,382 people were affected. On March 20, 2024, we reported how the data of over 70 million people was posted for sale on an online cybercrime forum. The seller claimed the data came from the Shiny Hunters breach.

Data breaches 132

Data breaches Cybercrime Encryption Internet 132

Security Affairs

APRIL 26, 2024

Media reported [ 1 , 2 ] that the company is notifying millions of current and former members of a data breach. TechCrunch reported that the company confirmed it shared patients’ information with third-party organizations, including Google, Microsoft and X, for advertising purposes. million residents.

Data breaches 76

Data breaches Healthcare Mobile Advertising 76

Tech Republic Security

MARCH 7, 2023

CrowdStrike’s new threat report sees a big increase in data theft activity, as attackers move away from ransomware and other malware attacks, as defense gets better, and the value of data increases. The post CrowdStrike: Attackers focusing on cloud exploits, data theft appeared first on TechRepublic.

Threat Reports 164

Threat Reports Ransomware Malware Cybersecurity 164

Security Affairs

APRIL 11, 2024

Microsoft addressed two zero-day vulnerabilities (CVE-2024-29988 and CVE-2024-26234) actively exploited by threat actors to deliver malware Microsoft addressed two zero-day vulnerabilities, tracked as CVE-2024-29988 and CVE-2024-26234, that threat actors are exploiting to deliver malware. ” reported ZDI.

Malware 121

Malware DNS Mobile Software 121

Security Affairs

APRIL 15, 2024

Cisco Duo warns that a data breach involving one of its telephony suppliers exposed multifactor authentication (MFA) messages sent by the company via SMS and VOIP to its customers. The security breach occurred on April 1, 2024, the threat actors used a Provider employee’s credentials that illicitly obtained through a phishing attack.

Data breaches 124

Data breaches Social Engineering Engineering Authentication 124

Security Affairs

APRIL 24, 2024

Cisco Talos warned that the nation-state actor UAT4356 (aka STORM-1849) has been exploiting two zero-day vulnerabilities in Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) firewalls since November 2023 to breach government networks worldwide. Cisco Talos researchers tracked this cyber-espionage campaign as ArcaneDoor.

Firewall 113

Firewall Government VPN Authentication 113

Security Affairs

SEPTEMBER 27, 2023

DarkBeam left an Elasticsearch and Kibana interface unprotected, exposing records from previously reported and non-reported data breaches. DarkBeam has apparently been collecting information to alert its customers in case of a data breach. Sample of leaked data. Sample of leaked data. billion records.

Passwords 144

Passwords Data breaches Phishing Hacking 144

Thales Cloud Protection & Licensing

NOVEMBER 13, 2023

Defending Financial Services Against Fraud in a Shifting Cyber Landscape sparsh Tue, 11/14/2023 - 05:05 As we approach International Fraud Awareness Week during 12-18 November 2023, taking stock of the evolving threat landscape and the vulnerabilities that financial services organizations face is crucial.

Financial Services 104

Financial Services Encryption Cybercrime Threat Reports 104

Security Affairs

OCTOBER 23, 2023

billion Aadhaars issued by the UIDAI since this ID service launched in 2009, this system represents one of the largest biometric ID programs on the planet, according to a report published by think tank Brookings Institution. The Moody’s report also warned that there are security and privacy vulnerabilities in Aadhaar’s centralized system.

Identity Theft 131

Identity Theft Banking Data breaches Malware 131

Security Affairs

FEBRUARY 16, 2024

CISA revealed that threat actors breached an unnamed state government organization via an administrator account belonging to a former employee. The government organization also hosts its sensitive data on an Azure environment which was not accessed by the attackers. ” reads the report published by CISA.

Government 136

Government VPN Accountability Authentication 136

BH Consulting

APRIL 18, 2024

Emerging security threats and trends Who doesn’t enjoy some future-gazing? Two new reports have highlighted emerging trends for now and into the near future. ENISA, the EU’s cybersecurity agency, forecasts that supply chain attacks are the top emerging threat.

Artificial Intelligence 69

Artificial Intelligence CISO Cybersecurity Data breaches 69

SecureWorld News

MARCH 28, 2024

Department of Treasury on March 27th released a report titled "Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector." The report highlights the growing concern around artificial intelligence (AI) and its potential to introduce new cybersecurity threats to the financial industry.

Risk 76

Risk Artificial Intelligence Cybersecurity Financial Services 76

Security Affairs

JANUARY 22, 2024

Resecurity has detected a noticeable increase in data leaks from consumer-focused platforms in Thailand, confirming that threat actors are actively targeting the personal data of citizens now at the beginning of 2024. But as we step into 2024, this trend might see a change.

Data breaches 123

Data breaches Government Technology Cybercrime 123

Security Boulevard

MARCH 26, 2024

We’re proud to unveil the first report based on Silverfort’s proprietary data: The Identity Underground Report. The post The Identity Underground Report: Deep insight into the most critical identity security gaps appeared first on Silverfort.

57

57

Security Affairs

OCTOBER 4, 2023

The DRM Report Q2 2023 report provides a detailed insight into the ransomware threat landscape during the period between May and August 2023. In an era where digitalization has woven its web into the very fabric of our lives, the dark underbelly of the digital realm continues to pose an ever-growing threat.

Ransomware 116

Ransomware Data collection Cyber threats Hacking 116

Security Boulevard

FEBRUARY 7, 2024

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our seventh Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blogs for #2 , #3 , #4 , #5 , #6 , #7 and #8 ).

Cybersecurity 67

Cybersecurity Ransomware Passwords Cryptocurrency 67