eSecurity Planet

FEBRUARY 26, 2024

February 19, 2024 Microsoft Exchange Servers Vulnerable to Privilege Escalation Attacks Type of vulnerability: Critical severity privilege escalation vulnerability. The problem: CVE-2024-21410 allows remote attackers to carry out NTLM relay attacks on Microsoft Exchange Servers, providing them with privileged access.

Risk 109

Risk Authentication System Administration Ransomware 109

SecureWorld News

APRIL 29, 2024

million affected individuals to inform them of the data breach and provide guidance on steps they can take to protect themselves against potential fraud or identity theft. This information could potentially be used for identity theft, financial fraud, or to illegally obtain medical services and prescription drugs.

Data breaches 86

Data breaches Healthcare Identity Theft Advertising 86

SecureWorld News

MAY 5, 2024

AI voice cloning enables stunningly realistic impersonation, posing critical fraud and identity theft risks. OpenAI's Voice Engine: innovations and implications In March 2024, OpenAI introduced Voice Engine, a revolutionary text-to-speech model that can clone a person's voice from just a 15-second audio sample.

Media 89

Media Authentication Identity Theft Engineering 89

Malwarebytes

JANUARY 10, 2024

Securities and Exchange Commission (@SECGov) January 9, 2024 The unauthorized post (which was removed within 30 minutes) looked like this: The post says: “Today the SEC grants approval to Bitcoin ETFs for listing on registered national security exchanges. X offers other options like an authentication app and a security key.

Accountability 90

Accountability Scams Hacking Cryptocurrency 90

SecureWorld News

MAY 2, 2024

In our digitally connected world, passwords are the gateway to protecting our online lives—from email and social media accounts to banking and private data. Yet, many of us still use alarmingly weak passwords or reuse the same ones across multiple sites, putting our digital identities at severe risk.

Passwords 87

Passwords Password Management Identity Theft Authentication 87

Malwarebytes

FEBRUARY 1, 2024

On January 31, 2024, the CEOs of the most widely used social media platforms appeared before the Committee. Strong, unique passwords and two-factor authentication add a layer of security to prevent unauthorized access. Protect your—and your family’s—personal information by using Malwarebytes Identity Theft Protection.

Media 110

Media Identity Theft Accountability Risk 110

Security Affairs

JANUARY 3, 2024

Besides Artificial Intelligence to scale operations, in a novel approach to circumvent two-factor authentication (2FA), the perpetrators crafted malicious Android code that mimics official mobile banking applications. In the case of Spain, the “GXC Team” created a counterfeit landing page that impersonated the GOB.ES website.

Artificial Intelligence 118

Artificial Intelligence Banking Scams Cybercrime 118

Security Affairs

FEBRUARY 4, 2024

Clorox estimates the costs of the August cyberattack will exceed $49 Million Mastodon fixed a flaw that can allow the takeover of any account Iranian hackers breached Albania’s Institute of Statistics (INSTAT) Operation Synergia led to the arrest of 31 individuals Ex CIA employee Joshua Adam Schulte sentenced to 40 years in prison Cloudflare breached (..)

Identity Theft 106

Identity Theft VPN Malware Ransomware 106

Thales Cloud Protection & Licensing

JANUARY 22, 2024

Digital Onboarding: Convenience Meets Security in Banking madhav Tue, 01/23/2024 - 06:34 What onboarding in consumer banking was five years ago, where it stands today, and where it's heading is a business-critical change worth both understanding and optimizing. Passkeys, replacing passwords, emerge as the superior authentication choice.

Banking 77

Banking Authentication Identity Theft Mobile 77

Security Affairs

NOVEMBER 19, 2023

Israeli man sentenced to 80 months in prison for providing hacker-for-hire services Russian APT Gamaredon uses USB worm LitterDrifter against Ukraine The board of directors of OpenAI fired Sam Altman Medusa ransomware gang claims the hack of Toyota Financial Services CISA adds Sophos Web Appliance bug to its Known Exploited Vulnerabilities catalog (..)

Data breaches 96

Data breaches Identity Theft Ransomware Hacking 96