Security Affairs

NOVEMBER 27, 2024

“Operation Serengeti (2 September – 31 October) targeted criminals behind ransomware, business email compromise (BEC), digital extortion and online scams – all identified as prominent threats in the 2024 Africa Cyber Threat Assessment Report.” Kenyan authorities uncovered an $8.6M

Scams 124

Scams Cybercrime Ransomware Cyber threats 124

Malwarebytes

NOVEMBER 4, 2024

A ransomware attack against the City of Columbus, Ohio—which drew public scrutiny following the city government’s attempt to silence a researcher who told the public about the attack—has received a little more detail from an unexpected source: The Attorney General for the state of Maine.

Data breaches 113

Data breaches Passwords Phishing Ransomware 113

Approachable Cyber Threats

JULY 10, 2025

Ransomware groups are actively exploiting a critical vulnerability in SimpleHelp RMM software. CVE-2024-57727 impacts versions 5.5.7 Risk Level Read Time “What’s happening with SimpleHelp and CVE-2024-57727?” Risk Level Read Time “What’s happening with SimpleHelp and CVE-2024-57727?” and earlier). and earlier).

Ransomware 52

Ransomware Backups Risk Software 52

Digital Shadows

MARCH 12, 2025

Between September 1, 2024, and February 28, 2025, threat actors ramped up efforts to exploit this sector through spearphishing, impersonation campaigns, ransomware, and vulnerabilities in external remote services. One ransomware group, Akira, has demonstrated a specific focus on casinos.

Cyber threats 65

Cyber threats Cryptocurrency IoT Ransomware 65

Security Affairs

NOVEMBER 17, 2024

CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog Hackers target critical flaw CVE-2024-10914 in EOL D-Link NAS Devices China-linked threat actors compromised multiple telecos and spied on a limited number of U.S.

Cryptocurrency 114

Cryptocurrency Malware Hacking Data breaches 114

SecureWorld News

JANUARY 12, 2025

The CrowdStrike incident in 2024 was a stark reminder how it could bring major day-to-day activities to a halt. A 2022 PwC study found that 59% of directors admitted their board is not very effective in understanding the drivers and impacts of cyber risks for their organization, emphasizing the critical role of board members in these moments.

Cybersecurity 109

Cybersecurity Data breaches Ransomware Government 109

The Last Watchdog

DECEMBER 18, 2024

To wrap up our 2024 year-end roundtable, we turn our attention to new technologies and trends that are emerging to help bridge the gaps. Shoshani Or Shoshani , CEO, Stream Security In 2024, 65% of breaches involved cloud data, highlighting a critical gap in cloud security.

Risk 173

Risk Threat Detection Technology Phishing 173

Digital Shadows

JANUARY 22, 2025

Were thrilled to unveil our latest threat landscape report for the finance and insurance sector, offering in-depth analysis of the evolving cyber threats facing this industry. These methods enable unauthorized access, credential theft, and ransomware deployment, severely disrupting operations and eroding customer trust.

Insurance 65

Insurance Phishing Social Engineering Engineering 65

Security Boulevard

MARCH 30, 2025

UK Warned of Inadequate Readiness Against State-Backed Cyberattacks Cybersecurity experts have sounded the alarm over the UK's growing vulnerability to state-sponsored cyber threats. A recent report by the National Cyber Security Centre (NCSC) shows a 16% increase in severe cyber incidents affecting national infrastructure in 2024.

Cybersecurity 82

Cybersecurity Digital transformation Healthcare Ransomware 82

SecureWorld News

MAY 2, 2025

billion in 2024 and is projected to reach $82.90 Healthcare cybersecurity demand will be driven by ransomware resilience needs, FDA mandates for medical devices, and AI-powered threat detection," notes the Astute Analytica report. billion by 2033 signals a nearly fourfold increase from 2024.

Healthcare 106

Healthcare Marketing Cybersecurity CISO 106

eSecurity Planet

MARCH 20, 2025

Cybercriminal activity is reaching unprecedented levels, with 2024 witnessing a dramatic surge in malware-fueled attacks that have left organizations scrambling to safeguard their data. billion credentials stolen in 2024. This surge enabled the theft of 2.1 billion credentials, accounting for roughly 75% of the total 3.2

Ransomware 69

Ransomware Data breaches Accountability Malware 69

eSecurity Planet

FEBRUARY 18, 2025

Dream, an AI cybersecurity startup, has raised $100 million in a Series B funding round led by Bain Capital Ventures to bolster its mission of defending nations and critical infrastructure from cyber threats. CLM leverages AI-trained models designed for cyber operations. led to widespread fuel shortages across the East Coast.

Cybersecurity 77

Cybersecurity Cyber threats Government Data privacy 77

Digital Shadows

NOVEMBER 26, 2024

Key Points Phishing incidents rose during the reporting period (August 1 to October 31, 2024), accounting for 46% of all customer incidents. Despite a slowdown in “LockBit” ransomware activity due to law enforcement actions and a loss of affiliate trust, it remains a key player. Our latest investigation revealed the same trend.

Cyber Attacks 59

Cyber Attacks Phishing Ransomware Cyber Insurance 59

Hacker's King

OCTOBER 19, 2024

As cyber threats escalate, the demand for skilled professionals in cybersecurity is skyrocketing. You may also want to read about: Cybersecurity vs Software Engineering in 2024 The Global Rise of Cyber Threats In the past decade, cyber threats have grown in frequency, complexity, and impact.

Cybersecurity 59

Cybersecurity Healthcare Cyber threats Government 59

SecureWorld News

JUNE 9, 2025

Most aviation processes are heavily digitized, and in the wake of new cyber threats, airlines and the broader sector must prioritize cybersecurity more than ever before. Ransomware is especially prevalent, with 55% of civil aviation cyber decision-makers admitting to being victims in the past 12 months.

Cybersecurity 120

Cybersecurity Social Engineering Computers and Electronics Risk 120

SecureWorld News

DECEMBER 5, 2024

MasterCard's September 2024 acquisition of Recorded Future for $2.65 Recorded Future is well-regarded for its AI-driven threat intelligence capabilities, which leverage massive amounts of data to predict, identify, and mitigate threats before they escalate. So, what changed?

Cybersecurity 113

Cybersecurity Threat Detection Financial Services Cyber threats 113

SecureWorld News

FEBRUARY 12, 2025

The Honourable David McGuinty, Minister of Public Safety, on February 6th unveiled Canada's National Cyber Security Strategy (NCSS), a long-term plan to protect Canadians, businesses, and critical infrastructure from an increasingly complex cyber threat landscape. The immediate knee jerk reaction to this is, FINALLY!"

Cyber threats 69

Cyber threats Cybercrime Cybersecurity Government 69

SecureWorld News

MARCH 17, 2025

But one of the most high-profile cyberattacks in 2024 was against Krispy Kreme. What happened: the holes in the doughnut chain's security On November 29, 2024, Krispy Kreme detected unauthorized activity within a portion of its IT systems. Is nothing sacred anymore, when even our doughnuts aren't safe?

Cyber Attacks 114

Cyber Attacks Digital transformation Threat Detection Penetration Testing 114

Digital Shadows

JANUARY 27, 2025

Key Findings 2024 was the year cyber threats got quicker. Cyber attackers really picked up the pace, executing faster, more efficient breaches that pushed traditional defenses to their limits. Buyers of these credentials include ransomware affiliates, un-affiliated threat actors, and IABs.

Scams 76

Scams Ransomware Accountability Social Engineering 76

Security Boulevard

FEBRUARY 14, 2025

And get the latest on ransomware trends and on cybercrime legislation and prevention! For more information about the threat from quantum computing: Is Quantum Computing a Cybersecurity Threat? The 5,263 ransomware attacks observed by NCC Group in 2024 were the most since it started monitoring them in 2021.

Banking 63

Banking Cybercrime Cybersecurity Ransomware 63

Zero Day

JUNE 6, 2025

The records are being linked to the same ones compromised by cybercriminals in a data breach that AT&T announced in July of 2024. Collectively, they could easily put affected customers at risk for account takeovers and identity theft. million existing AT&T subscribers and 65.4 million former account holders.

Password Management 128

Password Management Passwords Identity Theft Artificial Intelligence 128

Zero Day

JULY 3, 2025

But the big one -- CVE-2024-51978 -- can't be fixed on any device already sitting in your home or office. CVE-2024-51978 carries a CVSS score of 9.8 The one remaining sore spot -- CVE-2024-51978 -- can't be patched retroactively. Of those eight flaws, seven can be fully patched with firmware updates.

Password Management 95

Password Management Passwords Artificial Intelligence Firmware 95

eSecurity Planet

DECEMBER 4, 2024

During the Ignite 2024 conference, Microsoft announced the Windows Resiliency Initiative to address these security concerns. With cyberattacks on operating systems, applications, and networks becoming more sophisticated, the tech giant formulated a strategy to enhance the protection of Windows systems, focusing strongly on phishing attacks.

Encryption 99

Encryption Phishing Authentication Passwords 99

Approachable Cyber Threats

MAY 26, 2025

Cyber threats dont care how big or small your business is theyre always lurking. In fact, IBM reported that the average global cost of a data breach in 2024 was over $4.8 This problem only grows further when the primary motivation for attacks were financially motivated, with 62% of breaches being due to ransomware or extortion.

Cybersecurity 59

Cybersecurity Small Business Data breaches Risk 59

SecureWorld News

APRIL 30, 2025

Perhaps there is no greater threat potential than the agricultural sector, which has emerged as a vulnerable yet often overlooked domain. The Farm and Food Cybersecurity Act will make tremendous strides to protect our nation's food supply from the imminent cyber threats that the ag sector experiences here at home."

Cybersecurity 64

Cybersecurity Cyber threats Technology Retail 64

SecureWorld News

JULY 1, 2025

Department of Homeland Security's Homeland Threat Assessment 2025 warns that adversaries "almost certainly" view critical infrastructure as the most effective coercive lever they can pull short of open war. There has been a record vulnerability growth in unmanaged IoT sensors and medical devices , giving adversaries millions of new footholds.

Social Engineering 79

Social Engineering Engineering Phishing Healthcare 79

IT Security Guru

JULY 8, 2025

Not by visible enemies, but by a wave of cyber threats. In 2024, the National Cyber Security Centre reported a 16% increase in serious attacks impacting national security. The UK Government’s Cyber Security Breaches Survey 2024 revealed that 50% of businesses and 32% of charities experienced breaches last year.

Password Management 54

Password Management Mobile Passwords Digital transformation 54

Tech Republic Security

APRIL 25, 2025

Mandiant, which was acquired by Google Cloud in 2022, paints a picture of global cyber threats from last year in order to help readers be better prepared this year.

Cyber threats 80

Cyber threats Social Engineering Scams Engineering 80

The Last Watchdog

MAY 13, 2025

As an exhibitor that engaged with both frontline practitioners and top-level decision makers, INE Security gained firsthand insights into organizations’ most pressing security challenges: the convergence of AI-driven threats, multi-cloud vulnerabilities, and increasingly sophisticated attack vectors.

Architecture 130

Architecture Risk Cybersecurity Cyber Attacks 130

SecureWorld News

FEBRUARY 4, 2025

Notably, 2024 was unprecedentedly precarious with the second largest in history National Public Data breach and the biggest healthcare data breach to date with the massive attack on Change Healthcare. officials began seriously discussing the creation of a military Cyber Force dedicated to thwarting cyberattacks. Canada, and the U.K.,

Marketing 104

Marketing Cybersecurity eCommerce Data breaches 104

Security Affairs

MARCH 8, 2025

DoJ charges 12 Chinese nationals for state-linked cyber operations Chinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoor China-linked APT Silk Typhoon targets IT Supply Chain Hunters International gang claims the theft of 1.4 Every week the best security articles from Security Affairs are free in your email box.

Data breaches 72

Data breaches Hacking Cybercrime Artificial Intelligence 72

Zero Day

JUNE 27, 2025

That's a 358% increase year-over-year and nearly matches the total for all of 2024. "  Earlier, Radware's 2025 Global Threat Analysis Report stated there has been a "550% rise in web DDoS attacks" globally, with "nearly 400% year-over-year growth in DDoS attack volume." million DDoS attacks.

DDOS 97

DDOS Small Business Password Management Passwords 97

SecureWorld News

JULY 21, 2025

Against this backdrop, Microsoft recently launched its European Security Program (ESP) , a comprehensive cybersecurity initiative aimed at supporting European governments against increasingly sophisticated cyber threats, particularly those powered by artificial intelligence.

Cybersecurity 69

Cybersecurity Technology Cybercrime Cyber threats 69

Security Affairs

MAY 4, 2025

Rhysida Ransomware gang claims the hack of the Government of Peru DragonForce group claims the theft of data after Co-op cyberattack U.S. Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime 75

Cybercrime Cyber Attacks Malware Phishing 75

Centraleyes

MARCH 13, 2025

As of 2024, some new NYDFS cybersecurity regulation updates have been added with some amendments. Amendments Timeline: 20222023: The NYDFS Cybersecurity Regulation Amendment process introduced updates to address emerging threats and refine existing requirements. These amendments became fully enforceable in late 2024.

Cybersecurity 52

Cybersecurity Financial Services Risk Encryption 52

SecureWorld News

OCTOBER 31, 2024

Spooky fact : According to research from Proofpoint , in 2023, 71% of organizations experienced at least one successful phishing attack, and they remain one of the most prevalent forms of cyber threats. Spooky fact : Sophos says the average ransom in 2024 is $2.73 Like any powerful curse, ransomware can strike anyone, anytime.

IoT 120

IoT Phishing DDOS Backups 120

Security Affairs

APRIL 7, 2025

In 2024, he shifted to cybercrime, starting with low-level roles in vishing and ransomware, later moving into malware and vulnerability research that drew wide attention. Outpost24 KrakenLabs concludes that threat intelligence is about empowering people with the knowledge to stay ahead of evolving cyber threats.

Cybercrime 75

Cybercrime Malware Hacking VPN 75