The Last Watchdog

DECEMBER 12, 2023

A look back at the cybersecurity landscape in 2023 rings all-too familiar: cyber threats rapidly evolved and scaled up , just as they have, year-to-year, for the past 20 years. Eyal Benishti , CEO, IRONSCALES Benishti Generative AI (GenAI) reshaped cybersecurity in 2023. What should I be most concerned about – and focus on – in 2024?

Cybersecurity 258

Cybersecurity Social Engineering Cyber threats Software 258

SecureWorld News

FEBRUARY 15, 2024

A sophisticated form of mobile malware dubbed "GoldPickaxe" has been uncovered, which collects facial recognition data to produce deepfake videos, enabling hackers to bypass biometric authentication protections on banking apps. The malware has been active since 2023, specifically targeting victims in Vietnam and Thailand.

Social Engineering 103

Social Engineering Mobile Authentication Engineering 103

SecureWorld News

FEBRUARY 13, 2025

According to a 2023 study by Sumsub , deepfake fraud attempts increased by 704% between 2022 and 2023. Evolution of social engineering Social engineering exploits human psychology to manipulate individuals into revealing sensitive information or taking harmful actions.

Social Engineering 85

Social Engineering Authentication Identity Theft Engineering 85

Krebs on Security

JUNE 15, 2024

.” In a SIM-swapping attack, crooks transfer the target’s phone number to a device they control and intercept any text messages or phone calls sent to the victim — including one-time passcodes for authentication, or password reset links sent via SMS. In January 2024, U.S.

Hacking 344

Hacking Cybercrime Phishing Passwords 344

Security Affairs

NOVEMBER 29, 2023

Cloud identity and access management solutions provider Okta revealed additional threat actor activity linked to the October 2023 breach. Okta provided additional details about the October 2023 breach and revealed additional threat actor malicious activities. On Thursday, October 19, Okta advised customers of a security incident.

Social Engineering 132

Social Engineering Authentication Accountability Engineering 132

CyberSecurity Insiders

DECEMBER 21, 2022

However, while few things may be certain in life, with rising global conflicts, a looming recession, and the continued use of weak and breached credentials, we can be sure that more cyberattacks will be on the horizon in 2023. 2 – Cybersecurity budget cuts introduce new threats.

Social Engineering 134

Social Engineering Passwords Password Management Phishing 134

Krebs on Security

JANUARY 30, 2024

stole at least $800,000 from at least five victims between August 2022 and March 2023. 2022 that an intrusion had exposed a “limited number” of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials. Image credit: Amitai Cohen of Wiz. Twilio disclosed in Aug.

Social Engineering 359

Social Engineering Mobile Cybercrime Passwords 359

Security Affairs

OCTOBER 17, 2023

With 85% of campaigns targeting victims with phishing emails containing malicious links, another form of a social engineering attack, education and cyber vigiliance remain a high priority. The MGM attacks were almost identical to the social engineering attacks on Caesars, which targeted a third-party IT help desk.

Social Engineering 138

Social Engineering Ransomware Engineering Phishing 138

The Last Watchdog

FEBRUARY 20, 2024

billion work hours in 2023 and helped raise customer satisfaction to 69% for $0.50 Authentication and authorization vulnerabilities: Weak authentication methods and compromised access tokens can provide unauthorized access. Such manipulation can harm user trust, tarnish brand reputation and have broader social consequences.

Cybersecurity 273

Cybersecurity Penetration Testing Authentication Social Engineering 273

SecureList

MAY 6, 2024

Methodology In this report, we present an analysis of financial cyberthreats in 2023, focusing on banking Trojans and phishing pages that target online banking, shopping accounts, cryptocurrency wallets and other financial assets. Cryptocurrency phishing saw a 16% year-on-year increase in 2023, with 5.84 million in 2022.

Phishing 134

Phishing Banking Mobile Scams 134

The Hacker News

SEPTEMBER 18, 2023

Software development company Retool has disclosed that the accounts of 27 of its cloud customers were compromised following a targeted and SMS-based social engineering attack. The fact that Google Authenticator syncs to

Social Engineering 137

Social Engineering Phishing Accountability Engineering 137

Malwarebytes

OCTOBER 6, 2023

Recently, Amazon announced that it will require all privileged Amazon Web Services (AWS) accounts to use multi-factor authentication (MFA) , starting in mid-2024. Multi-factor authentication is so much more secure, and with that a lot more forgiving, than passwords alone. So we wholeheartedly agree with Amazon on this.

Authentication 134

Authentication Passwords Accountability Social Engineering 134

SecureList

MARCH 25, 2025

Note that for mobile banking malware, we retrospectively revised the 2023 numbers to provide more accurate statistics. We also changed the methodology for PC banking malware by removing obsolete families that no longer use Trojan banker functionality, hence the sharp drop in numbers against 2023. million in 2023.

Phishing 77

Phishing Banking Scams Mobile 77

Jane Frankland

NOVEMBER 20, 2023

My Predictions for Cybersecurity in 2023 were… Technology enables opportunities as fast as it introduces threats. Here are my predictions for 2023. Types of attacks. Types of attacks. Ransomware attacks will surge again, and adversaries will lean on behavioural science and seemingly legitimate ways to trick users.

Cybersecurity 130

Cybersecurity Digital transformation Artificial Intelligence Architecture 130

eSecurity Planet

DECEMBER 7, 2022

But for 2023, cybersecurity will be a “key pillar” of the company’s focus – particularly data compliance and protection. There are many issues like API security, authentication, data residency, privacy and compliance. This helps to explain the rise of social engineering attacks , especially with phishing.

Cybersecurity 145

Cybersecurity Risk Technology Ransomware 145

SecureList

MAY 28, 2025

The threat actors behind Zanubis continue to refine its code adding features, switching between encryption algorithms, shifting targets, and tweaking social engineering techniques to accelerate infection rates. 2023: Multi-feature upgrade In April 2023, we identified a new campaign featuring a revamped version of Zanubis.

Banking 107

Banking Malware Energy and Utilities Encryption 107

Krebs on Security

APRIL 9, 2024

Most of the flaws that Microsoft deems “more likely to be exploited” this month are marked as “important,” which usually involve bugs that require a bit more user interaction (social engineering) but which nevertheless can result in system security bypass, compromise, and the theft of critical assets.

DNS 317

DNS Social Engineering Malware Media 317

Security Boulevard

APRIL 18, 2023

Zscaler ThreatLabz publishes this report year after year to help organizations recognize the social engineering tactics and sophisticated coding used in phishing attacks to prevent costly data breaches. The post 2023 Phishing Report Reveals 47.2% Surge in Phishing Attacks Last Year appeared first on Security Boulevard.

Phishing 122

Phishing Social Engineering Education Retail 122

The Last Watchdog

MARCH 4, 2024

A recent study found only 27% of charities undertook risk assessments in 2023 and only 11% said they reviewed risks posed by suppliers. Strengthen authentication. Next, implement multi-factor authentication to make gaining access even more difficult for hackers. Keep software updated.

Social Engineering 213

Social Engineering Risk Cybersecurity Authentication 213

Security Affairs

FEBRUARY 14, 2023

Microsoft Patch Tuesday security updates for February 2023 addressed 75 flaws, including three actively exploited zero-day bugs. The most severe actively exploited flaw is tracked as CVE-2023-21823 , it is a Windows Graphics Component remote code execution vulnerability. ” reads the advisory published by Microsoft.

Social Engineering 98

Social Engineering Engineering Authentication IoT 98

SecureWorld News

DECEMBER 14, 2022

Frank Abagnale, one of the world's most respected authorities on forgery, embezzlement, secure documents, cybercrime, and scams—and subject of the 2002 movie Catch Me If You Can — kicked off Vision 2023: Looking Ahead at Cyber Threats , a half-day educational event held live and recorded on December 13th.

CISO 97

CISO Social Engineering Education Cybercrime 97

Security Through Education

JANUARY 18, 2023

What are some personal cybersecurity concerns for 2023? Business email compromise (BEC) attacks have been predicted to soar in 2023 according to Forbes Advisor. Most if not, all social engineering attacks will attempt to trigger some emotion such as urgency, fear, greed, or curiosity. The Internet of Things. Rosa Rowles.

Cybersecurity 98

Cybersecurity Social Engineering Scams IoT 98

Duo's Security Blog

APRIL 20, 2023

Through the first two months of 2023 alone, the Australian Competition and Consumer Commission’s Scamwatch reported more than 19,000 phishing reports with estimated financial losses of more than $5.2 Accounting for nearly a quarter of reported incidents in Australia, phishing is a broad category of social engineering with several variations.

Phishing 106

Phishing Social Engineering Authentication Engineering 106

SecureList

JUNE 26, 2023

According to a report by the Barracuda cybersecurity company, in 2021, businesses with fewer than 100 employees experienced far more social engineering attacks than larger ones. In this report, we have analyzed the key threats to small and medium-sized companies in 2022 and 2023, and provided advice on how to stay safe.

Cybercrime 123

Cybercrime Phishing Banking Malware 123

eSecurity Planet

OCTOBER 11, 2023

Microsoft’s Patch Tuesday for October 2023 covers a total of 103 CVEs, including three zero-day vulnerabilities affecting WordPad, Skype and the HTTP/2 “ Rapid Reset ” DDoS vulnerability. CVE-2023-41763 , an elevation of privilege vulnerability in Skype for Business with a CVSS score of 5.3

DDOS 109

DDOS Engineering Authentication Social Engineering 109

Security Affairs

SEPTEMBER 18, 2023

Software development company Retool revealed that 27 accounts of its cloud customers were compromised as a result of an SMS-based social engineering attack. The company states that one of its employees was compromised on August 27, 2023, via a spear phishing attack. ” reads a statement published by Retool.

Accountability 138

Accountability Social Engineering Authentication VPN 138

CyberSecurity Insiders

DECEMBER 6, 2022

Netwrix, a cybersecurity vendor that makes data security easy, today released key IT security trends that will affect organizations of all sizes in 2023. Here are five specific trends for 2023 that you need to be aware of: The business of cybercrime will be further professionalized. Supply chain attacks will intensify.

Cybersecurity 116

Cybersecurity Cybercrime Social Engineering Risk 116

Security Affairs

DECEMBER 17, 2023

The cyber attack was discovered on December 13, 2023, and led to the exposure of customer account metadata and contact information. 13th, 2023) evening US Eastern Standard Time, immediately activated our incident response process, and believe that this unauthorized access has been going on for some period of time before discovery.”

Social Engineering 140

Social Engineering Data breaches Cyber Attacks Accountability 140

CyberSecurity Insiders

APRIL 10, 2023

Why is identity management and security important in 2023? “In In the current digital landscape, identity security has gained paramount importance due to the growing cyber risks posed by phishing and social engineering attacks utilizing AI. This can help guard against identity theft and help prevent unwanted access.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105

SecureList

DECEMBER 9, 2024

XZ backdoor to bypass SSH authentication What happened? This case underscores the serious risk that social engineering and supply chain attacks pose to open-source projects. Kaspersky presented detailed technical analysis of this case in three parts. Kaspersky products detect malicious objects related to the attack.

Internet 111

Internet Internet Risk Social Engineering 111

Security Affairs

APRIL 8, 2024

The Health Sector Cybersecurity Coordination Center (HC3) recently observed threat actors using sophisticated social engineering tactics to target IT help desks in the health sector. The attackers aim at gaining initial access to target organizations. However, UNC3944 has yet to claim attacks against the Health sector.

Social Engineering 139

Social Engineering Healthcare Engineering Accountability 139

Hacker's King

DECEMBER 16, 2024

According to recent reports, there were over 700 million cyber attacks in 2023 alonea significant rise from the previous year. In 2023, major ransomware incidents targeted healthcare providers, educational institutions, and large corporations. Simulated phishing exercises can help staff become more aware of these threats.

Cyber Attacks 59

Cyber Attacks Phishing Artificial Intelligence Penetration Testing 59

NetSpi Executives

OCTOBER 24, 2023

Don’t be afraid of social engineering attacks this Cybersecurity Awareness Month! The theme for 2023’s Cybersecurity Awareness Month is “Secure Our World,” focusing on ways individuals and businesses can protect against online threats. Turn on Multifactor Authentication Even strong, secure passwords can be exposed by attackers.

Social Engineering 59

Social Engineering Engineering Cybersecurity Passwords 59

Security Affairs

MAY 21, 2024

An attacker can obtain the parameter by using a social engineering technique. To do this, the attacker needs a valid ‘ssid’ parameter, generated when a NAS user shares a file from their QNAP device. This parameter is included in the URL of the ‘share’ link.

Authentication 135

Authentication Accountability Social Engineering Hacking 135

Security Affairs

NOVEMBER 2, 2023

“On October 12, 2023, Rightway informed Okta that an unauthorized actor gained access to an eligibility census file maintained by Rightway in its provision of services to Okta. Rightway has indicated that the unauthorized activity occurred on September 23, 2023.”

Data breaches 141

Data breaches Hacking Healthcare Social Engineering 141

NetSpi Executives

OCTOBER 31, 2023

It’s time to go back to the basics, and revisit the most common vulnerabilities across attack surfaces according to NetSPI’s 2023 Offensive Security Vision Report. Here are the six spookiest vulnerabilities of 2023 and their tips for remeidation. Here are the six spookiest vulnerabilities of 2023 and their tips for remeidation.

Mobile 97

Mobile Penetration Testing Social Engineering Authentication 97

Malwarebytes

DECEMBER 28, 2023

In 2023, the public primarily confronted two varieties of online scams: the technical and the topical. A team of hackers can, say, boost their own info-stealing websites through Google search results, providing a veneer of authenticity to their malicious intent. Topical scams, on the other hand, are simpler.

Scams 113

Scams Accountability Social Engineering Small Business 113