2022 Accountability Risk 
eSecurity Planet
MARCH 4, 2025
The attackers, identified as TGR-UNK-0011, or JavaGhost, leverage exposed AWS credentials to gain access to cloud accounts and use legitimate services like Amazon Simple Email Service (SES) and WorkMail to distribute phishing messages. Setting up SES and WorkMail accounts to send phishing emails that appear legitimate.
Schneier on Security
AUGUST 12, 2022
million accounts. In January 2022, we received a report through our bug bounty program of a vulnerability in Twitter’s systems. In July 2022, we learned through a press report that someone had potentially leveraged this and was offering to sell the information they had compiled. This includes anonymous accounts.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Krebs on Security
JULY 12, 2022
The company said it would roll out the changes in stages between April and June 2022. Microsoft Office by default warns users that enabling macros in untrusted documents is a security risk, but those warnings can be easily disabled with the click of button.
Krebs on Security
OCTOBER 7, 2022
consumers have their online bank accounts hijacked and plundered by hackers, U.S. But new data released this week suggests that for some of the nation’s largest banks, reimbursing account takeover victims has become more the exception than the rule. The findings came in a report released by Sen. Elizabeth Warren (D-Mass.),
The Last Watchdog
DECEMBER 16, 2021
In 2022 we expect to see more aggressive and complex ransomware efforts. If 2021 was the year that Zero Trust security reached mainstream IT — and it was — then 2022 will become the realization that it cannot be done without identity first. Central importance of identity. The ascendency of CISOs.
Malwarebytes
NOVEMBER 14, 2024
Employees of these companies were tricked into clicking malicious attachments and links and filling in their email account login information on fake sites. From calendar years 2020 to 2022, there was a 27% increase in victim reports to the Internet Crime Complaint Center (IC3) of BECs with a real estate nexus.
Digital Shadows
MARCH 17, 2025
Key Findings Even years after their disclosure, VPN-related vulnerabilities like CVE-2018-13379 and CVE-2022-40684 remain essential tools for attackers, driving large-scale campaigns of credential theft and administrative control. Editors note: This report was authored by Gautham Ashok & Alexa Feminella. Rated CVSS 9.8,
Expert insights. Personalized for you.
94 
Let's personalize your content