Security Boulevard

FEBRUARY 22, 2024

Underpaid, overworked and angry: Whistleblower in hacker contractor firm for Chinese government blows lid off tactics, techniques and procedures. The post PRC State Hacking: ‘Chinese Edward Snowden’ Spills I‑Soon Secrets in Huge Dump of TTPs appeared first on Security Boulevard.

Hacking 136

Hacking Government Digital transformation Social Engineering 136

Security Boulevard

JANUARY 25, 2024

Targeted ads target targets: Patternz and Nuviad enable potentially hostile governments to track individuals by misusing ad bidding. The post Malicious AdTech Spies on People as NatSec Targets appeared first on Security Boulevard.

Government 138

Government Social Engineering Advertising Data privacy 138

Security Boulevard

SEPTEMBER 25, 2023

Apple Scrambled to Fix 3 More CVEs: Egyptian opposition presidential candidate Ahmed Eltantawy targeted “by the government. The post More iOS Zero Days, More Mercenary Spyware — This Time: Cytrox Predator appeared first on Security Boulevard.

Spyware 126

Spyware Government Social Engineering Data privacy 126

Security Boulevard

DECEMBER 9, 2022

states have now banned TikTok on government workers’ devices. The post TikTok Ban: Texas is Fourth State to Join; Indiana Sues appeared first on Security Boulevard. Plus, Indiana has sued the app’s owner.

Government 140

Government Social Engineering Security Awareness Engineering 140

Security Boulevard

DECEMBER 8, 2023

TA446’s new TTPs: “Star Blizzard” FSB team called out by Five Eyes governments (again). The post Russian FSB Targets US and UK Politicians in Sneaky Spear-Phish Plan appeared first on Security Boulevard.

Phishing 83

Phishing Government Digital transformation Social Engineering 83

CyberSecurity Insiders

MAY 18, 2022

In 2020, the SolarWinds supply chain attack opened backdoors into thousands of organizations (including government agencies) that used its services, while late last year, the far-reaching Log4J exploit exploded onto the scene. New major exploits are being revealed with almost clockwork regularity. The issue likely comes down to awareness.

DNS 140

DNS Cybersecurity CISO Social Engineering 140

Security Boulevard

JULY 17, 2023

MX Mixup: Russian-allied government can intercept “highly sensitive information”—because there’s no “I” in.ML The post OPSEC FAIL: US Military Email Going to Mali — via Typo appeared first on Security Boulevard.

Government 98

Government Social Engineering CISO Security Awareness 98

Security Boulevard

DECEMBER 5, 2022

A new wiper malware is destroying data on Russian government PCs. The post Russia Hit by New ‘CryWiper’ — Fake Ransomware appeared first on Security Boulevard. Dubbed CryWiper, it pretends to be ransomware.

Ransomware 111

Ransomware Government Malware Digital transformation 111

Security Boulevard

NOVEMBER 22, 2023

As AI models become more sophisticated, the potential for misuse or unintended consequences grows, emphasizing the need for robust oversight and a proactive approach to governance. The post The AI Paradox: Balancing Generative AI Adoption With Cybersecurity Risks appeared first on Security Boulevard.

Risk 75

Risk Cybersecurity Government Social Engineering 75

Security Boulevard

SEPTEMBER 28, 2022

The Ukrainian government has warned that Russia is planning a massive attack against the critical infrastructure of Ukraine and of its allies. The post Russia ‘Plans’ HUGE Cyberattack on Critical Infrastructure appeared first on Security Boulevard.

Government 111

Government Social Engineering Security Awareness Engineering 111

Security Boulevard

OCTOBER 26, 2021

government sees it differently. Says it’s Microsoft’s Fault appeared first on Security Boulevard. Microsoft has issued another of its “look how clever we are” writeups of detecting APT29 hackers. But the U.S. The post New Russian Hacks Revealed—but U.S.

Hacking 128

Hacking Government Social Engineering CISO 128

Security Boulevard

SEPTEMBER 9, 2021

Another Five Eyes government is trying to stop end-to-end encryption—this time, it’s the UK. The post Think of the Children: Anti-E2EE Ads Ahoy appeared first on Security Boulevard.

Encryption 124

Encryption Government Social Engineering Security Awareness 124

Security Boulevard

DECEMBER 6, 2023

and European organizations in such vectors as government, aerospace, and finance across North America and Europe. Hackers linked to Russia’s military intelligence unit exploited previously patched Microsoft vulnerabilities in a massive phishing campaign against U.S.

Phishing 84

Phishing Government Social Engineering Engineering 84

eSecurity Planet

MARCH 17, 2023

Whether you’re operating a global enterprise network or a small family business, your network’s security needs to be optimized with tools, teams, and processes to protect customer data and valuable business assets. Many of these tools protect resources connected to networks, thus shutting down threats as early as possible.

Network Security 119

Network Security Penetration Testing Firewall Antivirus 119

Security Boulevard

SEPTEMBER 2, 2021

The Australian government has given itself an enormous surveillance tool. Spy Powers Coming Here—via Australia appeared first on Security Boulevard. Five Eyes means that rules in Oz can be used here, too. The post Secret Govt.

Surveillance 119

Surveillance Government Social Engineering Security Awareness 119

Security Boulevard

FEBRUARY 24, 2021

When the pandemic struck, online bad actors took it as an opportunity to double-down on their attacks through ransomware, malware, and social engineering. SASE network architecture, like multi-cloud storage, brings multiple systems together to link security solutions for the greatest effect. Article by Beau Peters.

Cybersecurity 105

Cybersecurity Artificial Intelligence Risk Cybercrime 105

Security Boulevard

MAY 3, 2022

The notorious spyware, sold by NSO Group “only to governments,” caused large amounts of data to be exfiltrated. appeared first on Security Boulevard. The prime minister and the defense minister of Spain were infected with Pegasus. The post Spanish Govt. Hacked by NSO Pegasus Spyware (or was it?)

Spyware 105

Spyware Hacking Government Social Engineering 105

eSecurity Planet

DECEMBER 7, 2022

This helps to explain the rise of social engineering attacks , especially with phishing. Earlier this year, Ballistic Ventures invested $7 million in Nudge Security because of its focus on the modern workforce. This startup takes an interesting approach to security.

Cybersecurity 145

Cybersecurity Risk Technology Ransomware 145

eSecurity Planet

NOVEMBER 18, 2022

He has “worked around the clock” to secure assets, identify crypto on the blockchain , find records, and work with regulators and government authorities. Security risks for end users take the form of two discrete methods: private key theft and ice phishing attacks,” said Christian Seifert, Researcher, Forta.org. In the U.S.,

Risk 143

Risk Cybersecurity Cryptocurrency Social Engineering 143

eSecurity Planet

NOVEMBER 7, 2022

Kaspersky researchers recently found evidence of an advanced threat group continuously updating its malware to evade security products, similar to a release cycle for developers. Complete security can’t be achieved, especially against global actors or state-sponsored groups.

Antivirus 116

Antivirus Software Malware Phishing 116

Security Boulevard

OCTOBER 1, 2022

Protesters against the Iran regime are getting a boost to aid their efforts from hacking groups who are using Telegram, Signal and the dark web to get around government restrictions. The post Hackers Use Telegram, Signal, Dark Web to Help Iranian Protesters appeared first on Security Boulevard. CPR sees the sharing of open VPN.

VPN 69

VPN Government Hacking Social Engineering 69

The Last Watchdog

FEBRUARY 1, 2021

Here are excerpts of an exchange Last Watchdog had with Harrington about his new book, edited for clarity and length: LW: Why is it smart for companies to make addressing app security a focal point? Harrington: Two other big, concerning domains are vendor security management and cloud security.

Risk 154

Risk Social Engineering Password Management Software 154

Security Boulevard

MAY 24, 2024

appeared first on Security Boulevard. Inglorious Basta(rds): 16 days on, huge hospital system continues to be paralyzed by ransomware—and patient safety is at risk. The post Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

Ransomware 135

Ransomware Risk Social Engineering Healthcare 135

Security Boulevard

MAY 23, 2024

The post Apple API Allows Wi-Fi AP Location Tracking appeared first on Security Boulevard. Privacy FAIL: Apple location service returns far more data than it should, to people who have no business knowing it, without your permission.

Social Engineering 128

Social Engineering Data privacy Engineering Security Awareness 128

Security Boulevard

MAY 16, 2024

The post Risks of GenAI Rising as Employees Remain Divided About its Use in the Workplace appeared first on Security Boulevard. One in three office workers who use GenAI admit to sharing customer info, employee details and financial data with the platforms. Are you worried yet?

Risk 131

Risk Social Engineering Artificial Intelligence Data privacy 131

Security Boulevard

MAY 8, 2024

The post TikTok Ban — ByteDance Sues US to Kill Bill appeared first on Security Boulevard. PAFACA SueTok: U.S. Courts “likely” to rule whether new law is constitutional—or even practical.

Social Engineering 131

Social Engineering Spyware Media Data privacy 131

Security Boulevard

MAY 2, 2024

The post Dropbox Hacked: eSignature Service Breached appeared first on Security Boulevard. Drop Dropbox? The company apologized as user details were leaked from its “Dropbox Sign” product.

Hacking 135

Hacking Social Engineering Data privacy Engineering 135

Security Boulevard

APRIL 30, 2024

The UK’s Product Security and Tele­comm­uni­cations Infra­struc­ture Act aims to improve the security of net-connected consumer gear. The post Brits Ban Default Passwords — and More IoT Stupidity appeared first on Security Boulevard. Nice Cup of IoTea?

IoT 135

IoT Passwords Social Engineering Telecommunications 135

Security Boulevard

MAY 28, 2024

Pork Talk: “Pig butchering” scams are on the rise via social media. The post ‘Microsoft’ Scammers Steal the Most, says FTC appeared first on Security Boulevard.

Scams 81

Scams Media Social Engineering Banking 81

Security Boulevard

APRIL 16, 2024

The post SIM Swappers Try Bribing T-Mobile and Verizon Staff $300 appeared first on Security Boulevard. Not OK: SMS 2FA — Widespread spam targets carrier employees, as scrotes try harder to evade two-factor authentication.

Mobile 132

Mobile Authentication Social Engineering Wireless 132

Security Boulevard

APRIL 29, 2024

The post South Korean iPhone Ban: MDM DMZ PDQ appeared first on Security Boulevard. MDM Hindered: Android phones are still OK; this is Samsung’s home, after all.

Social Engineering 129

Social Engineering Data privacy Engineering IoT 129

Security Boulevard

MARCH 15, 2024

La grande cybermalveillance: French government’s employment agency loses control of citizens’ data after biggest breach in Gallic history. Leaks 43 Million People’s Data — ‘France Travail’ Says Sorry appeared first on Security Boulevard. The post French Gov.

Social Engineering 131

Social Engineering Cyber Attacks Data privacy Engineering 131

Security Boulevard

MAY 15, 2024

The post Dell Hell Redux — More Personal Info Stolen by ‘Menelik’ appeared first on Security Boulevard. Phish Ahoy! Hacker took advantage of Dell’s lack of anti-scraping defense.

Phishing 134

Phishing Social Engineering Data privacy Authentication 134

Security Boulevard

APRIL 10, 2024

LG Fixes Smart TV Vulns appeared first on Security Boulevard. 4×CVE=RCE or Merely CE? Update your LG TV now, or let hackers root it. But is Bitdefender overhyping the issue? The post Watch This? Patch This!

Social Engineering 135

Social Engineering IoT Data privacy Engineering 135

Security Boulevard

MARCH 27, 2024

The post Revealed: Facebook’s “Incredibly Aggressive” Alleged Theft of Snapchat App Data appeared first on Security Boulevard. Meta MITM IAAP SSL bump: Zuck ordered “Project Ghostbusters”—with criminal consequences, says class action lawsuit.

Social Engineering 137

Social Engineering VPN Data privacy Engineering 137

Security Boulevard

FEBRUARY 16, 2024

The post DoD Email Breach: Pentagon Tells Victims 12 Months Late appeared first on Security Boulevard. 3TB Email FAIL: Personal info of tens of thousands leaks. Microsoft cloud email server was missing a password.

Passwords 128

Passwords Digital transformation Social Engineering Data privacy 128

Security Boulevard

MARCH 28, 2024

The post Apple OTP FAIL: ‘MFA Bomb’ Warning — Locks Accounts, Wipes iPhones appeared first on Security Boulevard. Rethink different: First, fatigue frightened users with multiple modal nighttime notifications. Next, call and pretend to be Apple support.

Accountability 132

Accountability Social Engineering Authentication Data privacy 132