Zero Day

JUNE 20, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Passwords 86

Passwords Data breaches Password Management Identity Theft 86

Krebs on Security

JUNE 15, 2024

.” In a SIM-swapping attack, crooks transfer the target’s phone number to a device they control and intercept any text messages or phone calls sent to the victim — including one-time passcodes for authentication, or password reset links sent via SMS. In January 2024, U.S.

Hacking 344

Hacking Cybercrime Phishing Passwords 344

Krebs on Security

JANUARY 30, 2024

stole at least $800,000 from at least five victims between August 2022 and March 2023. 2022 that an intrusion had exposed a “limited number” of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials. Image credit: Amitai Cohen of Wiz. Twilio disclosed in Aug.

Social Engineering 359

Social Engineering Mobile Cybercrime Passwords 359

CyberSecurity Insiders

DECEMBER 21, 2022

However, while few things may be certain in life, with rising global conflicts, a looming recession, and the continued use of weak and breached credentials, we can be sure that more cyberattacks will be on the horizon in 2023. 2 – Cybersecurity budget cuts introduce new threats.

Social Engineering 134

Social Engineering Passwords Password Management Phishing 134

Security Affairs

OCTOBER 17, 2023

With 85% of campaigns targeting victims with phishing emails containing malicious links, another form of a social engineering attack, education and cyber vigiliance remain a high priority. The MGM attacks were almost identical to the social engineering attacks on Caesars, which targeted a third-party IT help desk.

Social Engineering 138

Social Engineering Ransomware Engineering Phishing 138

SecureWorld News

FEBRUARY 13, 2025

According to a 2023 study by Sumsub , deepfake fraud attempts increased by 704% between 2022 and 2023. Evolution of social engineering Social engineering exploits human psychology to manipulate individuals into revealing sensitive information or taking harmful actions.

Social Engineering 85

Social Engineering Authentication Identity Theft Engineering 85

Security Affairs

NOVEMBER 21, 2024

Scattered Spider members are part of a broader cybercriminal community called “The Com,” where hackers brag about high-profile cyber thefts, typically initiated through social engineering tactics like phone, email, or SMS scams to gain access to corporate networks. In January 2024, U.S.

Cybercrime 111

Cybercrime Identity Theft Cryptocurrency Phishing 111

SecureWorld News

JUNE 9, 2025

Global data reveals that cyberattacks rose by 131% between 2022 and 2023 across the aviation industry, with a 74 percent increase since 2020, underscoring the profundity of this threat. In the first half of 2023 alone, aviation cyberattacks surged by 24% worldwide, fueling disruptions from flight-planning systems to passenger services.

Cybersecurity 117

Cybersecurity Social Engineering Computers and Electronics Risk 117

Security Affairs

NOVEMBER 29, 2023

Cloud identity and access management solutions provider Okta revealed additional threat actor activity linked to the October 2023 breach. Okta provided additional details about the October 2023 breach and revealed additional threat actor malicious activities. On Thursday, October 19, Okta advised customers of a security incident.

Social Engineering 132

Social Engineering Authentication Accountability Engineering 132

Malwarebytes

FEBRUARY 6, 2024

The report reveals that, awash with money, the number of known Big Game attacks surged by 68% in 2023, thanks to Ransomware-as-a-Service groups like LockBit and ALPHV. Big game attacks extort vast ransoms from organizations by holding their data hostage—either with encryption, the threat of damaging data leaks, or both.

Ransomware 126

Ransomware Cybercrime Malware Social Engineering 126

SecureList

MAY 6, 2024

Methodology In this report, we present an analysis of financial cyberthreats in 2023, focusing on banking Trojans and phishing pages that target online banking, shopping accounts, cryptocurrency wallets and other financial assets. Cryptocurrency phishing saw a 16% year-on-year increase in 2023, with 5.84 million in 2022.

Phishing 134

Phishing Banking Mobile Scams 134

Security Through Education

JANUARY 18, 2023

What are some personal cybersecurity concerns for 2023? Business email compromise (BEC) attacks have been predicted to soar in 2023 according to Forbes Advisor. Use strong passwords, and ideally a password manager to generate and store unique passwords. And what are some ways we can protect ourselves? Rosa Rowles.

Cybersecurity 98

Cybersecurity Social Engineering Scams IoT 98

Krebs on Security

APRIL 9, 2024

Most of the flaws that Microsoft deems “more likely to be exploited” this month are marked as “important,” which usually involve bugs that require a bit more user interaction (social engineering) but which nevertheless can result in system security bypass, compromise, and the theft of critical assets.

DNS 317

DNS Social Engineering Malware Media 317

Security Boulevard

APRIL 18, 2023

Zscaler ThreatLabz publishes this report year after year to help organizations recognize the social engineering tactics and sophisticated coding used in phishing attacks to prevent costly data breaches. It highlights the importance of educating employees on the risks of phishing and the need for strong password policies and MFA.

Phishing 122

Phishing Social Engineering Education Retail 122

SecureList

APRIL 27, 2023

This is our latest installment, focusing on activities that we observed during Q1 2023. It is intended for cyber-espionage, and its features include keylogging, recording using the microphone, taking screenshots and stealing website passwords and email messages.

Energy and Utilities 145

Energy and Utilities Malware Government Manufacturing 145

SecureList

MARCH 25, 2025

Note that for mobile banking malware, we retrospectively revised the 2023 numbers to provide more accurate statistics. We also changed the methodology for PC banking malware by removing obsolete families that no longer use Trojan banker functionality, hence the sharp drop in numbers against 2023. million in 2023.

Phishing 77

Phishing Banking Scams Mobile 77

Security Boulevard

JANUARY 31, 2023

The post Another Password Manager Leak Bug: But KeePass Denies CVE appeared first on Security Boulevard. Two researchers report vulnerability in KeePass. But lead developer Dominik Reichl says it’s not a problem—and refuses to fix the flaw.

Password Management 131

Password Management Passwords Social Engineering Security Awareness 131

Krebs on Security

OCTOBER 2, 2023

These company-specific Zoom links, which include a permanent user ID number and an embedded passcode, can work indefinitely and expose an organization’s employees, customers or partners to phishing and other social engineering attacks. Image: @Pressmaster on Shutterstock.

Encryption 323

Encryption Engineering Social Engineering Healthcare 323

Security Affairs

APRIL 7, 2025

“In the Florida case, Urban was accused of stealing at least $800,000 in cryptocurrency from five different victims between August 2022 and March 2023.” He was accused of stealing at least $800,000 from five victims between August 2022 and March 2023. .” reported News4Jax. In January 2024, U.S.

Cybercrime 67

Cybercrime Identity Theft Social Engineering Hacking 67

SecureList

JUNE 26, 2023

According to a report by the Barracuda cybersecurity company, in 2021, businesses with fewer than 100 employees experienced far more social engineering attacks than larger ones. In this report, we have analyzed the key threats to small and medium-sized companies in 2022 and 2023, and provided advice on how to stay safe.

Cybercrime 123

Cybercrime Phishing Banking Malware 123

Security Affairs

DECEMBER 17, 2023

The cyber attack was discovered on December 13, 2023, and led to the exposure of customer account metadata and contact information. 13th, 2023) evening US Eastern Standard Time, immediately activated our incident response process, and believe that this unauthorized access has been going on for some period of time before discovery.”

Social Engineering 140

Social Engineering Data breaches Cyber Attacks Accountability 140

The Last Watchdog

MARCH 4, 2024

A recent study found only 27% of charities undertook risk assessments in 2023 and only 11% said they reviewed risks posed by suppliers. This means using longer passwords — at least 16 characters , as recommended by experts — in a random string of upper and lower letters, numbers, and symbols. Keep software updated.

Social Engineering 213

Social Engineering Risk Cybersecurity Authentication 213

NetSpi Executives

OCTOBER 24, 2023

Don’t be afraid of social engineering attacks this Cybersecurity Awareness Month! The theme for 2023’s Cybersecurity Awareness Month is “Secure Our World,” focusing on ways individuals and businesses can protect against online threats. Use the four tactics in this article to defend against them.

Social Engineering 59

Social Engineering Engineering Cybersecurity Passwords 59

Duo's Security Blog

APRIL 20, 2023

Through the first two months of 2023 alone, the Australian Competition and Consumer Commission’s Scamwatch reported more than 19,000 phishing reports with estimated financial losses of more than $5.2 Accounting for nearly a quarter of reported incidents in Australia, phishing is a broad category of social engineering with several variations.

Phishing 106

Phishing Social Engineering Authentication Engineering 106

Security Affairs

APRIL 8, 2024

The Health Sector Cybersecurity Coordination Center (HC3) recently observed threat actors using sophisticated social engineering tactics to target IT help desks in the health sector. The attackers aim at gaining initial access to target organizations. However, UNC3944 has yet to claim attacks against the Health sector.

Social Engineering 139

Social Engineering Healthcare Engineering Accountability 139

SecureWorld News

DECEMBER 7, 2022

But 2023 might be the year it all comes to fruition. In 2023, experts predict we will see even more widespread adoption of AI in cybersecurity. In 2023, we can expect this skills and labor shortage to continue. Cyber insurance trends in 2023. ISC)2 reported earlier this year that there is a shortage of about 3.4

Cybersecurity 98

Cybersecurity Cyber Insurance Insurance Social Engineering 98

CyberSecurity Insiders

APRIL 10, 2023

Why is identity management and security important in 2023? “In In the current digital landscape, identity security has gained paramount importance due to the growing cyber risks posed by phishing and social engineering attacks utilizing AI.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105

Security Affairs

MARCH 17, 2023

It can be challenging for defences to distinguish between insider threats and regular user activity since insider threats employ genuine accounts, passwords, and IT technologies. These findings imply that security teams should prepare for them in 2023. Overall, insider threats are becoming a more significant threat.

Social Engineering 98

Social Engineering Risk Technology Engineering 98

Security Through Education

JULY 18, 2023

billion by 2023. Each day people post a plethora of information to social media platforms, giving bad actors plenty of opportunity to steal personal data. Use strong passwords and PINs Never use your birthdate, phone number, or physical address, as your passwords or pin codes. This resulted in a loss of $52 billion.

Identity Theft 80

Identity Theft Scams Social Engineering Passwords 80

SecureList

MAY 28, 2025

The threat actors behind Zanubis continue to refine its code adding features, switching between encryption algorithms, shifting targets, and tweaking social engineering techniques to accelerate infection rates. 2023: Multi-feature upgrade In April 2023, we identified a new campaign featuring a revamped version of Zanubis.

Banking 107

Banking Malware Energy and Utilities Encryption 107

Krebs on Security

APRIL 20, 2023

In late March 2023, 3CX disclosed that its desktop applications for both Windows and macOS were compromised with malicious code that gave attackers the ability to download and run code on all machines where the app was installed. The double supply chain compromise that led to malware being pushed out to some 3CX customers. Image: Mandiant.

Malware 331

Malware Software Technology Accountability 331

Digital Shadows

OCTOBER 23, 2024

The attacker gained initial access to two employee accounts by carrying out social engineering attacks on the organization’s help desk twice. Leveraging its English proficiency, the collective uses social engineering for initial access. Within six hours, the attacker began encrypting the organization’s systems.

Social Engineering 122

Social Engineering Engineering Accountability Backups 122

Security Affairs

FEBRUARY 8, 2024

Ransomware Attacks: In 2023, a whopping 72.7% Data Breach Costs: The average global cost of a data breach in 2023 was $4.45 Generative AI Impact : Generative AI will have a big role in cyber security, especially in areas like email protection and fighting social engineering attacks. of organizations faced ransomware.

Social Engineering 142

Social Engineering Cyber Attacks Cyber Insurance IoT 142

The Last Watchdog

JANUARY 3, 2023

At the start of 2023, consumers remain out in the cold when it comes to online protection. For instance, phishing, one of the most common, is a social engineering attack used to steal user data. With the rise in social media, criminals have more platforms with which to target potential phishing victims.

Risk 203

Risk Cybersecurity Antivirus Phishing 203

Malwarebytes

OCTOBER 9, 2023

On Friday October 6, 2023, 23andMe confirmed via a somewhat opaque blog post that threat actors had "obtained information from certain accounts, including information about users’ DNA Relatives profiles." It works because users often use the same password for multiple websites. It's good in theory but fails in practice.

Passwords 140

Passwords Accountability Scams Social Engineering 140

Thales Cloud Protection & Licensing

DECEMBER 4, 2023

ENISA 2023 Threat Landscape Report: Key Findings and Recommendations madhav Tue, 12/05/2023 - 05:36 The European Union Agency for Cybersecurity (ENISA) recently released its annual Threat Landscape Report for 2023. The rise of AI-enabled information manipulation is a growing concern for organizations.

Social Engineering 77

Social Engineering Backups Manufacturing DDOS 77

Security Affairs

SEPTEMBER 18, 2023

Software development company Retool revealed that 27 accounts of its cloud customers were compromised as a result of an SMS-based social engineering attack. The company states that one of its employees was compromised on August 27, 2023, via a spear phishing attack. The attackers changed emails for users and reset passwords.

Accountability 138

Accountability Social Engineering Authentication VPN 138