IT Security Guru

NOVEMBER 18, 2024

Most end users prefer passwords that are easy to remember, but, of course, that also makes them easier to guess, brute force, or spray. The weak point of all passwords is that the secret, once revealed, is useless as a defence. This passive adoption may be a cautionary tale of sorts. They are organic, passive, and need no explanation.

Passwords 101

Passwords Password Management Technology Authentication 101

Digital Shadows

OCTOBER 23, 2024

Key Points In October 2024, ReliaQuest responded to an intrusion affecting a manufacturing sector customer. The attacker gained initial access to two employee accounts by carrying out social engineering attacks on the organization’s help desk twice. We identified “Scattered Spider” to be behind the incident. What Happened?

Social Engineering 122

Social Engineering Engineering Accountability Backups 122

Malwarebytes

JUNE 22, 2022

The researchers found the campaign targeting organizations in the US military, security software developers and providers, healthcare and pharmaceutical, and supply-chain organizations in manufacturing and shipping. How to avoid being phished. Do not open unverified email attachments.

Phishing 126

Phishing Password Management Passwords Manufacturing 126

CyberSecurity Insiders

AUGUST 24, 2022

And security researchers from ESET have discovered that the malware was uploaded to the VirusTotal operated system in Brazil and was targeted by a social engineering attack. North Korea’s Lazarus Group has reportedly designed new ransomware that is being targeted at M1 processors popularly running on Macs and Intel systems.

Ransomware 107

Ransomware Digital transformation Encryption Social Engineering 107

Security Boulevard

MARCH 31, 2022

Passwords: An Easy Target. Let’s not mince words: passwords are difficult for most organizations to manage. Despite the ready availability of password management software, deployment and strategic management of passwords is difficult as your employment numbers skyrocket. Regular employee training.

Cybersecurity 98

Cybersecurity Social Engineering Passwords Malware 98

Digital Shadows

OCTOBER 23, 2024

Key Points In October 2024, ReliaQuest responded to an intrusion affecting a manufacturing sector customer. The attacker gained initial access to two employee accounts by carrying out social engineering attacks on the organization’s help desk twice. We identified “Scattered Spider” to be behind the incident. What Happened?

Social Engineering 52

Social Engineering Engineering Accountability Backups 52

Troy Hunt

MAY 5, 2025

Here's how it worked: I was socially engineered into visiting a phishing page that pretended to belong to Mailchimp who I use to send newsletters for this blog. I'd like my passkeys to be more transferable, so I'm going to store them in my dedicated password manager, 1Password.

Passwords 313

Passwords Authentication Phishing Password Management 313