The Hacker News

DECEMBER 17, 2023

Cybersecurity and Infrastructure Security Agency (CISA) is urging manufacturers to get rid of default passwords on internet-exposed systems altogether, citing severe risks that could be exploited by malicious actors to gain initial access to, and move laterally within, organizations.

Manufacturing 107

Manufacturing Passwords Cyber threats Internet 107

Webroot

SEPTEMBER 24, 2024

In today’s world, both small businesses and everyday consumers face a growing number of cyber threats. OpenText’s 2024 Threat Hunter Perspective sheds light on what’s coming next and how to protect yourself. Use strong, unique passwords : Weak or reused passwords are an easy way in for cybercriminals.

Cyber threats 116

Cyber threats Small Business Scams Cybercrime 116

SecureWorld News

JULY 8, 2024

Case in point: a colossal password compilation dubbed "RockYou2024" has emerged, containing nearly 10 billion unique passwords. The name "RockYou2024" pays homage to the infamous RockYou data breach of 2009, which exposed 32 million passwords due to insecure storage practices.

Passwords 126

Passwords Password Management Education Accountability 126

Approachable Cyber Threats

MARCH 1, 2022

Our 2022 update to our famous password table that’s been shared across the news, internet, social media, and organizations worldwide. Password Strength in 2022 It’s been two years since we first shared our (now famous) password table. Hackers solve this problem by cracking the passwords instead. Keep reading!

Passwords 145

Passwords Software Internet Internet 145

Duo's Security Blog

DECEMBER 12, 2022

As the weather cools down and consumers prepare for the winter holiday season by shopping for loved ones or traveling to see them, malicious threat actors are standing by ready to ramp up their activities. In this post, we break down some of the threats facing retail security teams.

Retail 121

Retail Cyber threats Social Engineering Data breaches 121

Security Affairs

MARCH 8, 2025

The attacker then moved via RDP to a server and attempted to deploy ransomware as a password-protected zip file, but the victims EDR tool blocked it. The Akira ransomware attack reveals the risks of overlooked IoT devices, evolving cyber threats, and EDR limitations. ” reads the report published by the S-RM team.

Ransomware 130

Ransomware IoT Encryption Passwords 130

Security Boulevard

SEPTEMBER 20, 2024

million stolen VPN passwords have been compromised by malware in the past year, highlighting a growing risk for unauthorized access to secure networks, according to a Specops Software report. The post More Than Two Million Stolen VPN Passwords Discovered appeared first on Security Boulevard. More than 2.1

VPN 138

VPN Passwords Malware Software 138

eSecurity Planet

OCTOBER 15, 2024

The American Water cyber breach has sparked conversations about the importance of cybersecurity in safeguarding essential services and the growing frequency of cyber threats targeting public utilities. This significantly reduces the risk of unauthorized access, even if passwords are compromised.

Cybersecurity 133

Cybersecurity Penetration Testing Cyber threats Firewall 133

CyberSecurity Insiders

APRIL 5, 2023

In today’s digital age, companies face an ever-increasing number of cyber threats. The reality is that no organization is immune to cyber attacks, regardless of its size or industry. However, lean security teams, which are commonplace in smaller companies and startups, can be particularly vulnerable to these threats.

Cyber threats 110

Cyber threats Penetration Testing Cyber Attacks Password Management 110

The Hacker News

SEPTEMBER 1, 2023

As cyber threats continue to evolve, adversaries are deploying a range of tools to breach security defenses and compromise sensitive data. Surprisingly, one of the most potent weapons in their arsenal is not malicious code but simply stolen or weak usernames and passwords.

Passwords 132

Passwords Cyber threats Security Defenses Malware 132

CyberSecurity Insiders

DECEMBER 20, 2022

But security analysts say that such kind of knee-jerk reactions could spell trouble for the organizations as employees leaving the firm could turn into insider cyber threat out of frustration or anger. The post Insider Cyber Threats rise by Tech Layoffs appeared first on Cybersecurity Insiders.

Cyber threats 108

Cyber threats Accountability Passwords Technology 108

Krebs on Security

MARCH 15, 2021

com , a wildly popular service that sold access to more than 12 billion usernames and passwords stolen from thousands of hacked websites. For several years, WeLeakInfo was the largest of several services selling access to hacked passwords. Ditto for any other forum where Sergey used the same email address or password.

Passwords 348

Passwords Accountability Hacking Data breaches 348

Malwarebytes

NOVEMBER 4, 2024

The notice reads: “On July 18, 2024, the city discovered that it had experienced a cybersecurity incident in which a foreign cyber threat actor attempted to disrupt the City’s IT infrastructure, in a possible effort to deploy ransomware and solicit a ransom payment from the City.” Change your password.

Data breaches 117

Data breaches Passwords Ransomware Phishing 117

CyberSecurity Insiders

JANUARY 25, 2023

With mounting geopolitical threats, organizations and governments will need to be prepared over the next year by ensuring they don’t have any issues that could become low-hanging fruit for attacks, taking steps such as strengthening password security protocols and implementing multi-factor authentication.

Cyber threats 127

Cyber threats Cybercrime Malware IoT 127

CyberSecurity Insiders

OCTOBER 13, 2021

Problems arise for businesses when they base their access management programs entirely around passwords, however. Such programs overlook the burden that passwords can cause to users as well as to IT and security teams. Passwords: An unsustainable business cost. Users have too many passwords to remember on their own.

Passwords 141

Passwords Accountability Data breaches Authentication 141

SecureWorld News

DECEMBER 4, 2024

The United States retail sector faced an especially aggressive wave of cyber threats, with phishing attacks mimicking major holiday brands [3] including Walmart, Target, and Best Buy increasing by more than 2,000% during peak shopping periods. Make logins secure Firstly, ensure all staff have strong passwords (12-16 characters).

Retail 114

Retail Scams Phishing Cyber threats 114

Thales Cloud Protection & Licensing

OCTOBER 4, 2022

Cybersecurity Awareness Month: Resilient Multi-factor Authentication (MFA) and Strong Passwords. Awareness events foster to shape human attitude, enhance a positive culture against cyber threats, and educate businesses and people about protective measures they can take to secure their sensitive personal data: Enable MFA.

Authentication 127

Authentication Passwords Cybersecurity Data breaches 127

CyberSecurity Insiders

OCTOBER 18, 2021

Having a weak password policy is a key vector for attackers to gain system access. However, admins can help protect password security of the wide-reaching network using Group Management Policy (GPO). Let's get rolling about how we can configure Domain Password Policy for Active Directory. Use long character passwords.

Passwords 136

Passwords Accountability Encryption Architecture 136

SecureWorld News

DECEMBER 12, 2024

Strong Password Management: Enforce strong, unique passwords and multi-factor authentication to protect against unauthorized access. The Krispy Kreme hack is a sobering reminder that no industry is immune to cyber threats.

Password Management 108

Password Management Passwords CISO Cybersecurity 108

SecureWorld News

APRIL 13, 2025

Cyber threats evolve daily, often outpacing traditional security measures. On defense, AI analyzes network traffic, detects anomalies, and responds to threats in real time. Unlike traditional signature-based systems, AI excels at identifying new and unknown cyber threats, making security stronger and more adaptive.

Cybersecurity 92

Cybersecurity Artificial Intelligence Threat Detection Cyber threats 92

Heimadal Security

AUGUST 4, 2023

With cyber threats evolving at an alarming pace, traditional passwords fall short when it comes to protecting our digital data. In the search for a more powerful defense against unauthorized access, an innovative approach has emerged: One-Time Passwords (OTPs), dynamic codes that provide a new level of protection.

Passwords 98

Passwords Cyber threats 98

IT Security Guru

JANUARY 30, 2025

So, lets explore how spread betting platforms are rising to this challenge and ensuring that their platforms are cyber risk-free. Cyber Risks Facing Spread Betting Platforms Cyber threats are becoming more dangerous than ever, and spread betting platforms are a major target for most of these cyberattacks. Thats true.

Cyber Risk 95

Cyber Risk Risk Penetration Testing Accountability 95

Security Affairs

FEBRUARY 28, 2025

One of these experts, the white hat hacker Aditya K Sood, demonstrated how weak or default passwords expose solar plants to cyber threats, allowing remote control over power systems, risking grid security. ” reads the article published by DW.

Hacking 102

Hacking Passwords Risk Cyber threats 102

Identity IQ

JULY 8, 2024

RockYou2024: Nearly 10 Billion Passwords Exposed in Data Leak IdentityIQ In a cybersecurity incident that has sent shockwaves through the online community, nearly 10 billion unique passwords have been exposed in the “RockYou2024” data breach. billion passwords. .” billion passwords. The additional 1.5

Passwords 104

Passwords Identity Theft Data breaches Password Management 104

SecureWorld News

FEBRUARY 6, 2025

Hashed passwords for certain legacy systems (though Grubhub proactively rotated affected credentials). Grubhub confirmed that Marketplace customer passwords, merchant login credentials, full payment card numbers, and bank account details were not exposed.

Data breaches 90

Data breaches Accountability Social Engineering Passwords 90

SecureWorld News

FEBRUARY 20, 2025

The FBI, CISA, and MS-ISAC have issued a joint cybersecurity advisory warning organizations about Ghost (Cring) ransomware, a sophisticated cyber threat that has been compromising critical infrastructure, businesses, and government entities worldwide. Require 16+ character unique passwords stored in an enterprise password manager.

Ransomware 112

Ransomware IoT Encryption Social Engineering 112

CyberSecurity Insiders

APRIL 16, 2023

For example, Google Workspace offers a built-in MFA feature that allows users to authenticate using a combination of their password and a one-time code sent to their mobile device or generated by an authenticator app. The post Email Security Guide: Protecting Your Organization from Cyber Threats appeared first on Cybersecurity Insiders.

Cyber threats 124

Cyber threats Phishing Encryption Small Business 124

SecureWorld News

NOVEMBER 12, 2024

The aim is to help organizations secure systems and strengthen defenses against today's persistent and complex cyber threats. International cooperation to address cybersecurity threats This advisory marks a significant collaborative effort among leading cybersecurity organizations worldwide.

Software 110

Software Passwords Cyber threats Risk 110

SecureWorld News

MARCH 13, 2025

While the AI-generated malware in this case required manual intervention to function, the fact that these systems can produce even semi-functional malicious code is a clear signal that security teams need to adapt their strategies to account for this emerging threat vector."

Malware 109

Malware Cybersecurity Cyber threats Threat Detection 109

Approachable Cyber Threats

OCTOBER 7, 2024

What changed, and what is NIST's updated password guidance and the role of password strength in 2024?” In an ever-evolving digital landscape, cybersecurity professionals must constantly adapt to emerging threats and modernize their strategies for protecting sensitive data. For those who don’t know, NIST is a U.S.

Passwords 104

Passwords Password Management Authentication Risk 104

IT Security Guru

MARCH 14, 2025

Another useful feature is its login protection, which helps stop hackers from guessing passwords. It protects against brute force attacks, where hackers try thousands of password combinations to break into your site. The plugin also scans for weak passwords and forces users to create stronger ones.

Cybersecurity 74

Cybersecurity Firewall Cyber Attacks Passwords 74

Krebs on Security

MARCH 15, 2023

While CVE-2023-23397 is labeled as an “Elevation of Privilege” vulnerability, that label doesn’t accurately reflect its severity, said Kevin Breen , director of cyber threat research at Immersive Labs. “This is on par with an attacker having a valid password with access to an organization’s systems.”

Passwords 281

Passwords Cyber threats Authentication Internet 281

Webroot

FEBRUARY 21, 2025

Cyber threats are no longer just the occasional virus or suspicious email. Password Manager Ensures your passwords are strong and secure, while also making them easy to access and manage. Password Manager Helps you securely store and manage your login credentials. The answer is a resounding yes.

Antivirus 84

Antivirus Identity Theft Cyber threats Phishing 84

Jane Frankland

MAY 3, 2025

Allegedly orchestrated by the same group known as Scattered Spider, these attacks highlight the significant challenges even the most respected and established brands face in defending against modern cyber threats. Then, the focus of cyber attacks on retailers, and what lessons must be learned by business leaders and customers.

Cyber Attacks 100

Cyber Attacks Retail Cyber threats Backups 100

Security Affairs

DECEMBER 4, 2024

The government agencies released a guide that advises telecom and critical infrastructure defenders on best practices to strengthen network security against PRC-linked and other cyber threats. The agencies recommend robust measures to protect enterprise networks against cyber threats. ” continues the advisory.

Telecommunications 113

Telecommunications Government Mobile Cyber threats 113

Hacker's King

OCTOBER 26, 2024

Activities during this week include engaging workshops, informative webinars, and community events, all designed to empower individuals with the knowledge and skills necessary to navigate today’s cyber threats effectively. Change them regularly and avoid reusing passwords across different accounts.

Cybersecurity 59

Cybersecurity Cyber threats Education Passwords 59

Approachable Cyber Threats

SEPTEMBER 13, 2023

Back in November 2022 you may have heard that the password manager company LastPass disclosed a breach in which hackers had stolen password vaults containing data for more than 25 million users. And with the recent string of crypto wallet heists , it appears that some of these passwords may be starting to get cracked.

Passwords 103

Passwords Data breaches Encryption Password Management 103