Bleeping Computer

JULY 1, 2023

The BlackCat ransomware group (aka ALPHV) is running malvertizing campaigns to lure people into fake pages that mimic the official website of the WinSCP file-transfer application for Windows but instead push malware-ridden installers. [.

Ransomware 128

Ransomware Malware 128

The Hacker News

JULY 1, 2023

As many as 200,000 WordPress websites are at risk of ongoing attacks exploiting a critical unpatched security vulnerability in the Ultimate Member plugin. The flaw, tracked as CVE-2023-3460 (CVSS score: 9.8), impacts all versions of the Ultimate Member plugin, including the latest version (2.6.6) that was released on June 29, 2023.

Accountability 105

Accountability Risk 105

Security Affairs

JULY 1, 2023

Threat actors are exploiting a critical WordPress zero-day in the Ultimate Member plugin to create secret admin accounts. Hackers are actively exploiting a critical unpatched WordPress Plugin flaw, tracked as CVE-2023-3460 (CVSS score: 9.8), to create secret admin accounts. Ultimate Member is a popular user profile and membership plugin for WordPress, it allows admins to create advanced online communities and membership sites.

Accountability 98

Accountability Hacking Risk Information Security 98

WIRED Threat Level

JULY 1, 2023

Plus: Hackers knock out Russian military satellite communications, a spyware maker gets breached, and the SEC targets a victim company's CISO.

Spyware 90

Spyware CISO Hacking 90

Speaker: Erroll Amacker

Automation is transforming finance but without strong financial oversight it can introduce more risk than reward. From missed discrepancies to strained vendor relationships, accounts payable automation needs a human touch to deliver lasting value. This session is your playbook to get automation right. We’ll explore how to balance speed with control, boost decision-making through human-machine collaboration, and unlock ROI with fewer errors, stronger fraud prevention, and smoother operations.

Risk

Security Affairs

JULY 1, 2023

Avast released a free decryptor for the Akira ransomware that can allow victims to recover their data without paying the ransom. Cybersecurity firm Avast released a free decryptor for the Akira ransomware that can allow victims to recover their data without paying the ransom. The Akira ransomware has been active since March 2023, the threat actors behind the malware claim to have already hacked multiple organizations in multiple industries, including education, finance, and real estate, Akira is

Ransomware 98

Ransomware Encryption Malware Hacking 98

Security Boulevard

JULY 1, 2023

Happy Canada Day 2023 / La Fête du Canada 2023 To Our Canadian Family & Friends! / À notre famille et nos amis canadiens ! The post Canada Day 2023 / La Fête du Canada 2023 appeared first on Security Boulevard.

59

59

Security Boulevard

JULY 1, 2023

As layoffs continue, organizations need to be aware of insider threats. Here are some tips you can use to protect your business. The post Avoiding Insider Threats When Layoffs Occur appeared first on Enzoic. The post Avoiding Insider Threats When Layoffs Occur appeared first on Security Boulevard.

59

59

Chicago CyberSecurity Training

JULY 1, 2023

As an online business, you are responsible for protecting the digital assets of your business and data belonging to your customers. As cyber-attacks continue to evolve in complexity, you can stay one step ahead by taking the following preventative measures to protect your business and your customers. 1. Use Strong Passwords and Multi-Factor Authentication (MFA): One of the most important steps to securing your business is to use strong pass phrases for your accounts.

Cybersecurity 40

Cybersecurity Backups Social Engineering Passwords 40

Security Boulevard

JULY 1, 2023

Share us with friends and colleagues, and we'll do the same for you. The post Help spread the word about AZT appeared first on Security Boulevard.

59

59

Security Boulevard

JULY 1, 2023

In recent years, distributed denial of service (DDoS) attacks have become more frequent and sophisticated. Attackers continue to find new ways to flood target networks with massive scale attacks that grow exponentially and use different attack technics. Carpet-bombing is one of those destructive technics. It is a major concern for enterprises and service providers worldwide and DDoS vendors must handle this distributed and overwhelming attack technique.

DDOS 52

DDOS 52

Advertisement

Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.

Cyber threats