Krebs on Security

DECEMBER 29, 2022

I seem to be doing most of that activity now on Mastodon , which appears to have absorbed most of the infosec refugees from Twitter, and in any case is proving to be a far more useful, civil and constructive place to post such things. For a variety of reasons, I will no longer be sharing these updates on Twitter.

Cryptocurrency 309

Cryptocurrency Cybercrime Computers and Electronics Scams 309

Security Boulevard

FEBRUARY 16, 2022

In recent years, there has been an exponential increase in high-profile data breaches. As data breaches at corporations, educational institutions, and government agencies continue to grow, so does the need. The post Shortage of Information Security Professionals appeared first on Security Boulevard.

Information Security 98

Information Security Data breaches Education Government 98

Spinone

SEPTEMBER 8, 2020

About 25% of all data breaches are caused by human error. Here’s an example of how a phishing email can spread ransomware through your network: The cost of a data breach can be very high, and preventing phishing attacks helps your business to avoid financial and reputational damages.

Phishing 52

Phishing InfoSec Social Engineering Backups 52

eSecurity Planet

MARCH 31, 2022

Phishing is a type of social engineering attack in which bad actors pose as a trustworthy entity via phone, email, or text message in order to steal personal information from the recipient. Attackers may try to get their victims to reveal their date of birth, social security number, credit card information, or account passwords.

Phishing 131

Phishing Banking Social Engineering Scams 131

Security Boulevard

APRIL 7, 2024

Episode 324 features discussions on a significant AT&T data breach affecting 73 million customers and a sophisticated thread jacking attack targeting a journalist.

Data breaches 69

Data breaches Accountability Social Engineering Data privacy 69

Malwarebytes

DECEMBER 11, 2022

There’s been a lot of weird and frankly bizarre attacks over the course of 2022, nestled in amongst the usual ransomware outbreaks and data breaches. Whether we’re talking social media, email, or even malware, there’s been a mind bending tale of tall behaviour in almost every corner.

Scams 91

Scams Social Engineering Engineering Accountability 91

Digital Shadows

OCTOBER 23, 2024

The attacker gained initial access to two employee accounts by carrying out social engineering attacks on the organization’s help desk twice. Leveraging its English proficiency, the collective uses social engineering for initial access. Within six hours, the attacker began encrypting the organization’s systems.

Social Engineering 52

Social Engineering Engineering Accountability Backups 52

SecureWorld News

JUNE 2, 2024

For example, a team with members from different cultural backgrounds may be more adept at recognizing social engineering attacks that exploit cultural nuances or language patterns. Similarly, a team with neurodiversity may excel at identifying patterns and anomalies in data that others might miss.

Cybersecurity 105

Cybersecurity Education Artificial Intelligence Social Engineering 105

Security Boulevard

MARCH 27, 2022

The LAPSUS$ hacking group has claimed to have hacked both Microsoft and Okta, details about a novel phishing technique called a browser-in-the-browser (BitB) attack, and how a popular software package that has 1.1

Phishing 98

Phishing Software Hacking Social Engineering 98

Herjavec Group

DECEMBER 15, 2021

Data breaches and cybersecurity threats were at an all-time high this past year. Threat actors have developed social engineering approaches that leverage the uncertainty and chaos of the pandemic in order to deliver their malicious software.

Cybersecurity 52

Cybersecurity Digital transformation Ransomware Cyber Risk 52

Security Boulevard

JULY 14, 2024

In episode 338, we discuss the recent breach of the two-factor authentication provider Authy and its implications for users. We also explore a massive password list leak titled ‘Rock You 2024’ that has surfaced online.

Passwords 72

Passwords Authentication Social Engineering Data privacy 72

Troy Hunt

NOVEMBER 8, 2021

Their CEO later explained it very succinctly: "We did have a reporter, try to contact us multiple times last week, you don't respond to some random person about a data breach. — Michael Kan (@Michael_Kan) February 28, 2017 Problem is, random people are precisely the sorts of people that find data breaches.

Scams 72

Scams Data breaches InfoSec Social Engineering 72

eSecurity Planet

DECEMBER 3, 2021

Brian Krebs is an independent investigative reporter known for his coverage of technology, malware , data breaches , and cybercrime developments. ICYMI, Equifax forced to pull offline a huge database of consumer data guarded only by credentials "admin/admin" [link] — briankrebs (@briankrebs) September 13, 2017.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

ForAllSecure

FEBRUARY 23, 2021

She is an impressive force within the infosec world. You have all this data, you have the logs coming out from network vulnerability scanners, you might have recordings made of social engineering attempts and that sort of thing. You can get pretty far in infosec without a formal degree in infosec.

Penetration Testing 52

Penetration Testing InfoSec Cyber Attacks Education 52

ForAllSecure

FEBRUARY 23, 2021

She is an impressive force within the infosec world. You have all this data, you have the logs coming out from network vulnerability scanners, you might have recordings made of social engineering attempts and that sort of thing. You can get pretty far in infosec without a formal degree in infosec.

Penetration Testing 52

Penetration Testing InfoSec Cyber Attacks Education 52

Herjavec Group

JULY 29, 2021

Threat actors have developed social engineering approaches that leverage the uncertainty and chaos of the pandemic in order to deliver their malicious software. Ransomware-as-a-Service (RaaS) has emerged as a result of increasingly sophisticated phishing methods, coordinated sharing of leaked data, and a growing dark web community.

Cybersecurity 52

Cybersecurity Digital transformation Cyber Attacks Ransomware 52