CSO Magazine

JUNE 3, 2021

As Roger Grimes wrote in this article about two-factor hacks three years ago, when MFA is done well it can be effective, but when IT managers take shortcuts it can be a disaster. To read this article in full, please click here (Insider Story) Indeed, according to a survey conducted by Microsoft last year, 99.9%

Hacking 122

Hacking Accountability Authentication 122

CSO Magazine

SEPTEMBER 30, 2021

Sign up for CSO newsletters ! ]. The group is considered the hacking arm of Russia's foreign intelligence service, the SVR and is known for its high level of sophistication and stealth. To read this article in full, please click here How well do you know these 9 types of malware and how to recognize them.

CSO 125

CSO Malware Government Software 125

CSO Magazine

JUNE 5, 2023

A cyberattack on crypto wallet Atomic Wallet has resulted in at least $35 million worth of crypto assets being stolen since June 2, according to ZachXBT, an independent on-chain investigator known for tracing stolen crypto funds and assisting with hacked projects. To read this article in full, please click here

Hacking 96

Hacking Accountability 96

CSO Magazine

MARCH 19, 2021

The group behind the malware is known for using manual hacking techniques and open-source tools to move laterally through private networks and gain administrative access to as many systems as possible before initiating the file encryption. Get the latest from CSO by signing up for our newsletters. ]

Ransomware 98

Ransomware CSO Encryption Government 98

CSO Magazine

APRIL 20, 2021

Sign up for CSO newsletters. ]. To read this article in full, please click here Some of the flaws date from 2019 and 2020, but one was unknown until this month. Keep up with 8 hot cyber security trends (and 4 going cold). Give your career a boost with top security certifications: Who they're for, what they cost, and which you need.

VPN 98

VPN CSO Hacking Authentication 98

CSO Magazine

OCTOBER 6, 2022

Yesterday, a federal jury handed down a guilty verdict to Joe Sullivan, the former CSO on charges of “obstruction of the proceedings of the Federal Trade Commission and misprision of felony in connection with the attempted cover-up of a 2016 hack at Uber” according to a notice published by the Department of Justice (DOJ).

CSO 91

CSO CISO Data breaches Hacking 91

CSO Magazine

MARCH 21, 2022

We've assembled eight truly disastrous IT security failures over the past decade, with the goal of finding not just clever hacks, but real mistakes on the part of the victims. Sign up for CSO newsletters. ]. To read this article in full, please click here 2012: Court Ventures gets social-engineered.

Social Engineering 113

Social Engineering CSO Engineering Data breaches 113

CSO Magazine

OCTOBER 24, 2022

The Atomic Energy Organization of Iran on Sunday confirmed that an email server at its Bushehr Nuclear Power Plant was hacked. The organization blamed a foreign country, but an Iranian hacking group that goes by the name Black Reward has claimed responsibility for the breach. To read this article in full, please click here

Hacking 84

Hacking Media 84

CSO Magazine

MAY 28, 2021

The Russian hacking group behind the supply chain attack that poisoned software updates for the SolarWinds Orion platform has been perfecting its email-based attacks over the past few months to plant backdoors inside organizations. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

CSO 105

CSO Government Marketing Hacking 105

CSO Magazine

NOVEMBER 2, 2021

7 ways to hack a phone. To read this article in full, please click here We spoke to a number of security experts to help you get a sense of the most common ways attackers might go about breaking into the powerful computers in your users’ pockets. This should hopefully give you perspective on potential vulnerabilities. Malvertising.

Social Engineering 137

Social Engineering Hacking Engineering Malware 137

CSO Magazine

MARCH 29, 2022

Ethical hacking, also known as penetration testing , is legally breaking into computers and devices to test an organization's defenses. From the penetration tester's point of view, there is no downside: If you hack in past the current defenses, you’ve given the client a chance to close the hole before an attacker discovers it.

Hacking 88

Hacking Penetration Testing Technology 88

CSO Magazine

FEBRUARY 28, 2023

To read this article in full, please click here The threat actor involved in the breaches infected the engineer's home computer with a keylogger , which recorded information that enabled a cyberattack that exfiltrated sensitive information from the company's AWS cloud storage servers, LastPass said in a cybersecurity incident update Monday.

Data breaches 133

Data breaches Engineering Password Management Hacking 133

CSO Magazine

APRIL 5, 2022

To read this article in full, please click here The reports didn’t contain Cash App usernames or passwords, and the company said that Social Security numbers, birthdays, payment card info and most other types of personally identifiable information weren’t accessed.

Hacking 118

Hacking Data breaches Passwords Accountability 118

CSO Magazine

APRIL 1, 2022

Two teenagers from the UK have been charged by police over hacking offenses in relation to an international investigation into the LAPSUS$ group. In a statement , Detective Inspector Michael O’Sullivan, City of London Police, said: “The City of London Police has been conducting an investigation into members of a hacking group.

Hacking 93

Hacking Data breaches Authentication Software 93

CSO Magazine

MAY 10, 2022

The second is a collaboration with cybersecurity training and upskilling platform Hack The Box to assist the development of offensive security capabilities. To read this article in full, please click here Both will help CREST members prepare for CREST examinations, the company said.

Hacking 79

Hacking Cybersecurity Information Security 79

CSO Magazine

APRIL 15, 2022

An analysis of the cryptocurrency wallets tied to the Karakurt hacker group, combined with their particular methodology for data theft, suggests that the group's membership overlaps with two other prominent hacking crews, according to an analysis published by cybersecurity firm Tetra Defense. To read this article in full, please click here

Hacking 67

Hacking Cryptocurrency Ransomware Cybersecurity 67

CSO Magazine

FEBRUARY 20, 2023

To read this article in full, please click here “Based on our investigation, we believe these incidents are part of a multi-year campaign by a sophisticated threat actor group that, among other things, installed malware on our systems and obtained pieces of code related to some services within GoDaddy,” the filing added.

Hacking 106

Hacking Malware 106

CSO Magazine

FEBRUARY 17, 2022

To read this article in full, please click here February started with the second-largest decentralize finance (DeFi) theft to date when a hacker exploited a token exchange bridge in Wormhole to steal $320 million worth of Ethereum.

Cryptocurrency 101

Cryptocurrency Hacking 101

CSO Magazine

APRIL 21, 2023

To read this article in full, please click here "The identified software supply chain compromise is the first we are aware of which has led to a cascading software supply chain compromise," incident responders from cybersecurity firm Mandiant, who was contracted to investigate the incident, said in a report Thursday. "It

Software 81

Software Risk Hacking Cybersecurity 81

CSO Magazine

MARCH 1, 2022

Cyber Partisans of Belarus claim train hacks. Another hacktivist group known as AgainstTheWest claims to have hacked a steady stream of Russian websites and corporations, including Russian Government contractor promen48.ru, Presumed hacktivists hacked Russian EV charging stations. AgainstTheWest targeted Russian interests.

DDOS 115

DDOS Media Hacking CSO 115

CSO Magazine

APRIL 24, 2023

The hacking group responsible for the supply-chain attack targeting VoIP company 3CX also breached two critical infrastructure organizations in the energy sector and two financial trading organizations using the trojanized X_TRADER application, according to a report by Symantec. To read this article in full, please click here

Hacking 125

Hacking 125

CSO Magazine

NOVEMBER 28, 2022

hacking community forum. On the hacking community forum, the user is listed as “Agency123456.” On the hacking community forum, the user is listed as “Agency123456.” To read this article in full, please click here A database of 487 million WhatsApp users’ mobile numbers has been put up for sale on the Breached.vc

Mobile 130

Mobile Hacking 130

CSO Magazine

APRIL 6, 2022

To read this article in full, please click here One corporate director confided that he paid less attention to the technical aspects of the CISO’s presentation, and instead scrutinized his CISO’s demeanor during presentations to obtain a gut-feel sense of the CISO’s confidence in his own ability to manage security risks.

CISO 99

CISO Hacking Risk 99

CSO Magazine

APRIL 21, 2023

Iranian APT hacking group MuddyWater has been observed using SimpleHelp, a legitimate remote device control and management tool, to ensure persistence on victim devices. To read this article in full, please click here

Hacking 109

Hacking 109

CSO Magazine

AUGUST 11, 2022

To read this article in full, please click here It also said that it has taken the decision to publicly announce the incident now as it was previously actively collecting information about the bad actor to help protect the security community.

Hacking 92

Hacking Accountability Cybersecurity 92

CSO Magazine

JULY 20, 2021

To read this article in full, please click here

Hacking 134

Hacking Ransomware 134

CSO Magazine

JANUARY 18, 2022

Security exec Chad Kliewer had heard the initial reports of the SolarWinds attack as news about it broke in December 2020, sympathetic to those companies first named as victims of the hack. To read this article in full, please click here (Insider Story)

CISO 123

CISO Hacking 123

CSO Magazine

NOVEMBER 18, 2021

Consequently, the SolarWinds spyware infiltration , the Microsoft Exchange hack , and ransomware attacks launched by criminal gangs harbored by the Kremlin dominate headlines and drive nation-state cybersecurity responses. To read this article in full, please click here

Spyware 142

Spyware Ransomware Hacking Cybersecurity 142

CSO Magazine

MARCH 29, 2022

To read this article in full, please click here Conventional ranswomware recovery techniques , including those provided by 3-tier and hyper-converged infrastructure (HCI) vendors, typically involve taking snapshots of customer data and using them for recovery.

Ransomware 66

Ransomware Hacking 66

CSO Magazine

NOVEMBER 22, 2022

That could mean placing decoys and lures that exploit their expectations for what an attacker will find when they first hack into an environment, she says. To read this article in full, please click here As group leader for Cyber Adversary Engagement at MITRE Corp.,

Cybersecurity 139

Cybersecurity Hacking 139

CSO Magazine

SEPTEMBER 6, 2022

TikTok is denying claims that a hacking group has breached an Alibaba cloud database containing 2.05 The hacking group, which goes by the name AgainstTheWest, on Friday posted screenshots—which they say were taken from the hacked database—on a hacking forum. To read this article in full, please click here

Hacking 90

Hacking 90

CSO Magazine

APRIL 5, 2021

To read this article in full, please click here

Hacking 128

Hacking Software Risk 128

CSO Magazine

MAY 24, 2021

When hacking began many decades ago, it was mostly the work of enthusiasts fueled by their passion for learning everything they could about computers and networks. To read this article in full, please click here (Insider Story)

Cyber threats 141

Cyber threats Hacking 141

CSO Magazine

JANUARY 9, 2023

One of my favorite things to watch on the attention-sucking platform of TikTok or YouTube Shorts are life hacks. Life hacks are supposed to make tasks easier or more efficient to accomplish but, in many cases are simply more complicated. To read this article in full, please click here

DDOS 102

DDOS Retail Hacking Government 102

CSO Magazine

SEPTEMBER 22, 2022

Sullivan is charged with trying to conceal from federal investigators the details of a 2016 hack at Uber that exposed the email addresses and phone numbers of 57 million drivers and passengers. To read this article in full, please click here

CISO 117

CISO Insurance Hacking Cybersecurity 117

CSO Magazine

NOVEMBER 24, 2021

Concepts were presented by Pepijn Hack and Zong-Yu Wu at Black Hat Europe 2021 and expanded upon in a detailed NCC Group blog posting shortly after. These are: To read this article in full, please click here

Ransomware 134

Ransomware Hacking Cybersecurity 134

CSO Magazine

MARCH 14, 2022

We are at a point in time when cybercriminals including ransomware gangs have established themselves as organized, illicit businesses rather than a one-person hacking operation. To read this article in full, please click here The increased success of ransomware gangs , extortion groups, and DDoS attackers is by no means accidental.

DDOS 130

DDOS Ransomware Hacking 130