article thumbnail

SEC X account hacked to hawk crypto-scams

Malwarebytes

Securities and Exchange Commission (@SECGov) January 9, 2024 The unauthorized post (which was removed within 30 minutes) looked like this: The post says: “Today the SEC grants approval to Bitcoin ETFs for listing on registered national security exchanges. Although apparently the SEC did not have 2FA enabled for its X account!

article thumbnail

2FA bypass in cPanel potentially exposes tens of millions of websites to hack

Security Affairs

Researchers discovered a major issue in cPanel that could be exploited by attackers to bypass two-factor authentication for cPanel accounts. Security researchers from Digital Defense have discovered a major security issue in cPanel , a popular software suite that facilitates the management of a web hosting server.

Hacking 135
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Podcast Episode 135: The Future of Passwords with Google Account Security Chief Guemmy Kim

The Security Ledger

In this week’s episode (#135): we continue our series on the future of Passwords as we are joined by Guemmy Kim, a group product manager at Google in charge of that company’s account security initiatives. ?. Guemmy and I talk about Google’s fast evolving security program to protect user passwords and data.

article thumbnail

September Snafus: Hackers Take Advantage of Unwitting Employees

Approachable Cyber Threats

Several large companies were hacked in the first half of September. In the IHG hack, a couple from Vietnam claimed they were attempting to deploy ransomware on the network. A little more than a week later, Uber and Rockstar Games were also hacked, both by the same person. Category News, Social Engineering. Risk Level.

article thumbnail

Hackers stole over $250,000 in Ethereum from Bored Ape Yacht Club

Security Affairs

. “CertiK analysis reveals that this community manager, account –@BorisVagner (“BorisVagner | SBS” on Discord)– posted a message to BAYC’s Discord server with a phishing link that led to the fake site. This then granted the scam the appearance of authenticity and made it easier to dupe the NFT holders.”

Phishing 130
article thumbnail

Instagram implements ‘Security Checkup’ to help users recover compromised accounts

Security Affairs

Good news for the owners of Instagram accounts that may have been compromised, the company launched a new feature named ‘ Security Checkup ‘ feature that aims to keep accounts safe and help users to recover them. Instagram also recommends users enable two-factor authentication to protect their accounts.

article thumbnail

Bad Consumer Security Advice

Schneier on Security

To remain anonymous and secure on the Internet, invest in a Virtual Private Network account, but remember, the bad guys are very smart, so by the time this column runs, they may have figured out a way to hack into a VPN. Two-factor authentication is important, and I use it on some of my more important online accounts.

VPN 239