Duo's Security Blog

DECEMBER 12, 2022

As the weather cools down and consumers prepare for the winter holiday season by shopping for loved ones or traveling to see them, malicious threat actors are standing by ready to ramp up their activities. In this post, we break down some of the threats facing retail security teams.

Retail 83

Retail Cyber threats Social Engineering Phishing 83

The Hacker News

MAY 17, 2023

A hacking group dubbed OilAlpha with suspected ties to Yemen's Houthi movement has been linked to a cyber espionage campaign targeting development, humanitarian, media, and non-governmental organizations in the Arabian peninsula.

Cyber threats 92

Cyber threats Social Engineering Media Engineering 92

The Last Watchdog

OCTOBER 5, 2023

Acohido to share his ideas about the current cyber threat landscape, the biggest threats for businesses today, the role of AI and machine learning in cyberattacks and cyberdefence, and the most effective methods for companies to protect themselves. Erin: What are some of the biggest cyber threats that businesses face today?

Cyber threats 203

Cyber threats Cyber Insurance Cybersecurity Threat Detection 203

The Last Watchdog

APRIL 2, 2024

It’s a digital swindle as old as the internet itself, and yet, as the data tells us, the vast majority of security incidents are still rooted in the low-tech art of social engineering. Some 74 percent of cyber breaches are caused by human factors, including errors, stolen credentials, misuse of access privileges, or social engineering.

Social Engineering 211

Social Engineering Technology Engineering Accountability 211

CompTIA on Cybersecurity

OCTOBER 26, 2023

Customers want providers to have real-time insights into cyber threats encompassing ransomware, social engineering, malware releases and other attacks.

Social Engineering 89

Social Engineering Cyber threats Engineering Cybersecurity 89

IT Security Guru

DECEMBER 1, 2022

Furthermore, the Armed Forces run awareness campaigns to instruct their personnel about cyber threats and what measures authorized users may take to mitigate threats to military information systems and their vulnerabilities. The importance of cybersecurity awareness training.

Cyber threats 111

Cyber threats Cybersecurity Education Risk 111

Tech Republic Security

JULY 28, 2023

Security experts from HackerOne and beyond weigh in on malicious prompt engineering and other attacks that could strike through LLMs.

Artificial Intelligence 147

Artificial Intelligence Cyber threats Hacking Engineering 147

Security Boulevard

MARCH 21, 2024

billion in losses, a 22% increase from the previous year, the report is a wake-up […] The post Evolving Cyber Threats: Insights and Strategies from the 2023 FBI IC3 Report first appeared on SlashNext. The post Evolving Cyber Threats: Insights and Strategies from the 2023 FBI IC3 Report appeared first on Security Boulevard.

Cyber threats 72

Cyber threats Cybercrime Social Engineering Engineering 72

Security Boulevard

JANUARY 27, 2023

Artificial intelligence (AI) is rapidly becoming a powerful tool in the cybersecurity landscape, with the potential to revolutionize the way we detect and respond to cyber threats. However, as with any technology, there are also risks associated with the use of AI in cybersecurity.

Artificial Intelligence 137

Artificial Intelligence Social Engineering Cybersecurity Cyber threats 137

Digital Shadows

FEBRUARY 22, 2023

Russian-government–backed APT groups have waged a range of cyber attacks against Ukrainian targets since the beginning of 2022. The social engineering campaigns would have aimed to secure initial network access and extract sensitive information. The Russia-Ukraine war has dramatically changed this.

Cyber threats 96

Cyber threats Cybercrime Cyber Attacks DDOS 96

The Last Watchdog

JANUARY 2, 2024

In today’s digital landscape, organizations face numerous challenges when it comes to mitigating cyber risks. Related: How AI is transforming DevOps The constant evolution of technology, increased connectivity, and sophisticated cyber threats pose significant challenges to organizations of all sizes and industries.

Cyber Risk 202

Cyber Risk Risk Education Security Awareness 202

CyberSecurity Insiders

APRIL 16, 2023

Latest email security trends Phishing and spear-phishing attacks: Phishing is a type of social engineering attack where cybercriminals use deceptive emails to trick recipients into divulging sensitive information or downloading malware. These attacks often rely on social engineering tactics and email spoofing.

Cyber threats 124

Cyber threats Phishing Encryption Small Business 124

Security Boulevard

NOVEMBER 12, 2023

The threat landscape is the entirety of potential and identified cyber threats affecting a particular sector, group of users, time period, and so forth. It includes a wide range of threats, such as malware, phishing attacks, ransomware, and social engineering attacks.

Social Engineering 69

Social Engineering Cyber threats Engineering Phishing 69

SecureWorld News

MARCH 21, 2024

Between checking scores, streaming games, participating in office pools, and inevitably some placing of bets, users will be presenting an abundance of new openings for threat actors to attack. As March Madness unfolds, users will need to apply a full-court press defense against ever-more sophisticated cyber threats.

Cybersecurity 92

Cybersecurity Social Engineering Phishing Mobile 92

The Last Watchdog

JULY 27, 2023

Tel Aviv, Israel, July 27, 2023 — Perception Point , a leading provider of advanced threat prevention across digital communication channels, today published a new report analyzing global cyberattack trends in H1 2023 amidst the paradigm shift brought about by advances in generative AI (GenAI) capabilities.

Phishing 186

Phishing Social Engineering Engineering Media 186

Security Affairs

FEBRUARY 8, 2024

Telecom Adoption: 80% of telecom companies now use AI-powered cyber security tools to protect their networks, showing how AI is becoming more common in keeping complex systems safe. Executive Opinion: Nearly 70% of top executives see AI as crucial for tackling cyber threats, indicating a growing trust in AI to strengthen online defenses.

Social Engineering 119

Social Engineering Cyber Attacks Cyber Insurance IoT 119

Digital Shadows

NOVEMBER 10, 2022

Cyber threat actors, with varying resources and motivations, are highly interested in these eye-catching events too. For instance, financially-motivated threat actors often plant in malicious URLs spoofing these events to fraudulent sites, hoping to maximize their chances of scamming naive internet users for a quick (illicit) profit.

Cyber threats 52

Cyber threats Media Social Engineering Mobile 52

The Security Ledger

MAY 16, 2024

In this Spotlight Podcast, host Paul Roberts talks with Chris Walcutt, the CSO of DirectDefense about the rising cyber threats facing operational technology (OT) and how organizations that manage OT - including critical infrastructure owners can best manage increased cyber risks to OT environments. Read the whole entry. »

CSO 59

CSO Risk Energy and Utilities Social Engineering 59

Security Boulevard

MARCH 17, 2023

You may have all the recommended security controls and your employees may be well-trained when it comes to avoiding social engineering attacks. You cannot truly be prepared, however, until you test your defenses.

Social Engineering 75

Social Engineering Cyber threats Engineering Risk 75

Trend Micro

OCTOBER 3, 2022

The parasitic Water Labbu capitalizes on the social engineering schemes of other scammers, injecting malicious JavaScript code into their malicious decentralized application websites to steal cryptocurrency.

Cryptocurrency 124

Cryptocurrency Social Engineering Engineering Cyber threats 124

Digital Shadows

JANUARY 25, 2024

Find out the most notable trends of 2023’s final quarter, to set priorities and alerts for 2024. We cover techniques used to achieve initial access, defense evasion, command-and-control, and impact.

Cyber threats 104

Cyber threats Social Engineering Engineering 104

Approachable Cyber Threats

DECEMBER 6, 2023

Source: Verizon DBIR [1] In last year’s DBIR report [2], Social Engineering and Basic Web Application Attacks accounted for over 50% of all cybersecurity data breach events, with Denial of Service being the number one cybersecurity incident covering almost 50% of all events. Social Engineering: phishing emails, texts, phone calls.

Cybersecurity 106

Cybersecurity Social Engineering Data breaches Engineering 106

The Last Watchdog

FEBRUARY 20, 2024

. • Malicious intent or manipulation: AI chatbots can be exploited to spread misinformation, execute social engineering attacks or launch phishing. Such manipulation can harm user trust, tarnish brand reputation and have broader social consequences. Machine learning helps AI chatbots adapt to and prevent new cyber threats.

Cybersecurity 273

Cybersecurity Penetration Testing Authentication Social Engineering 273

Thales Cloud Protection & Licensing

JULY 21, 2022

The Ongoing Cyber Threat to Critical Infrastructure. With that in mind, Thales has launched the 2022 Thales Data Threat Report Critical Infrastructure Edition, which includes responses from 300 security leaders and practitioners within critical infrastructure organizations. Thu, 07/21/2022 - 12:28.

Cyber threats 71

Cyber threats Energy and Utilities Ransomware IoT 71

Digital Shadows

NOVEMBER 1, 2022

As we move towards the end of 2022, now is the time to take a look back at the major trends from the last eleven months and identify what might happen from a cyber threat perspective in 2023. A key for analysts is to remain flexible and not compartmentalize cyber threats.

Cyber threats 52

Cyber threats Ransomware Media Data breaches 52

Approachable Cyber Threats

SEPTEMBER 24, 2022

Category News, Social Engineering. All of the attacks were carried out with relatively simple phishing and social engineering techniques. So far in September, IHG , Uber , and Rockstar Games have all been victims of major independent cyber attacks. Risk Level. The common theme?

Social Engineering 105

Social Engineering Authentication Engineering Phishing 105

SecureWorld News

SEPTEMBER 27, 2023

Threat Intelligence (TI) representation across different levels There is a lot of information on cyberattacks on the internet, and, as a rule, the most helpful information is contained in cyber threat reports ( Threat Intelligence Reports ).

Cyber threats 90

Cyber threats Artificial Intelligence Malware Threat Reports 90

IT Security Guru

MAY 20, 2024

This number highlights the widespread nature of digital threats. Today, common cyber threats include phishing, ransomware, and malware attacks, each capable of significantly disrupting operations and compromising sensitive data. This approach educates and empowers your team to be the first line of defence against cyber threats.

Cybersecurity 114

Cybersecurity Backups Cyber threats Mobile 114

Approachable Cyber Threats

SEPTEMBER 27, 2023

Two other common cyber attacks that can be enhanced with the use of deepfakes include phishing and social engineering. Deepfakes could also add authenticity to social engineering campaigns, allowing scammers to impersonate an employee or supervisor of their target more easily.

Social Engineering 106

Social Engineering Media Cyber Attacks Phishing 106

Trend Micro

AUGUST 8, 2021

We found a new social engineering-based malvertising campaign targeting Japan that delivered a malicious application. The malicious application abused sideloading vulnerabilities to load and start the Cinobi banking trojan.

Banking 130

Banking Social Engineering Cryptocurrency Engineering 130

The Last Watchdog

DECEMBER 12, 2023

A look back at the cybersecurity landscape in 2023 rings all-too familiar: cyber threats rapidly evolved and scaled up , just as they have, year-to-year, for the past 20 years. The “trust but verify” approach is no longer viable in a landscape where threats can originate from anywhere.

Cybersecurity 258

Cybersecurity Social Engineering Cyber threats Software 258

Approachable Cyber Threats

DECEMBER 13, 2022

In their 2021 report, Social Engineering and Basic Web Application Attacks accounted for over 50% of all breach events. This time around, if you thought ransomware and phishing should have been at the top (these fall under System Intrusion and Social Engineering ) you would have been right! We used that as our baseline.

Data breaches 106

Data breaches Social Engineering Engineering Phishing 106

Security Boulevard

AUGUST 23, 2022

North Korea Cyber Threat Group ‘Lazarus’ Targets M1 Mac with Signed Executables. The post North Korea Cyber Threat Group ‘Lazarus’ Targets M1 Mac with Signed Executables appeared first on Security Boulevard. brooke.crothers. Tue, 08/23/2022 - 18:01. M1 MacBook and Intel. UTM Medium. UTM Source. UTM Campaign.

Cyber threats 52

Cyber threats Social Engineering Banking Malware 52

Krebs on Security

JUNE 13, 2023

“An attacker able to gain admin access to an internal SharePoint server could do a lot of harm to an organization,” said Kevin Breen , director of cyber threat research at Immersive Labs. This SharePoint flaw earned a CVSS rating of 9.8 is the most dangerous).

Social Engineering 225

Social Engineering System Administration Authentication Internet 225

Approachable Cyber Threats

FEBRUARY 8, 2023

Types of Cyber Threats in Digital Banking Hackers see digital banking as a huge opportunity because sensitive information such as your financial information is now more accessible than ever since its online. What can we do about it? Need help designing the best cybersecurity strategy for your financial institution?

Banking 94

Banking Social Engineering Cyber threats Encryption 94

eSecurity Planet

AUGUST 3, 2023

In his blog post , Kelley shared a video from CanadianKingpin12 that suggests DarkBERT will go well beyond the social engineering capabilities of the earlier tools with new “concerning capabilities.”

Social Engineering 97

Social Engineering Cybercrime Engineering Cybersecurity 97

Malwarebytes

APRIL 7, 2024

“The small businesses most concerned about cybersecurity threats include businesses with 20-500 employees (74%) and businesses in the professional services industry (71%). They like to use social engineering, and vulnerabilities in internet-connected devices and services, rather than old-fashioned malware to infiltrate systems and networks.

Small Business 88

Small Business Cybersecurity Manufacturing Social Engineering 88