IT Security Guru

NOVEMBER 1, 2024

Cyber attacks can compromise critical infrastructure, financial systems, and sensitive government data. The risk posed by these actors continues to grow as nations rely increasingly on interconnected digital infrastructure. Phishing and Social Engineering: These tactics manipulate individuals to disclose sensitive information.

Technology 109

Technology Cyber Attacks Government Social Engineering 109

SecureWorld News

FEBRUARY 20, 2025

The FBI, CISA, and MS-ISAC have issued a joint cybersecurity advisory warning organizations about Ghost (Cring) ransomware, a sophisticated cyber threat that has been compromising critical infrastructure, businesses, and government entities worldwide. Stolen credentials remain the top breach factor, responsible for 24% of incidents in 2024.

Ransomware 113

Ransomware IoT Encryption Social Engineering 113

eSecurity Planet

NOVEMBER 6, 2024

This data reportedly includes everything from names and addresses to Social Security numbers and bank account details. This attack underscores a critical lesson for businesses: even the most vital institutions, such as a city government, are vulnerable to cyberthreats.

Ransomware 113

Ransomware Authentication Identity Theft Penetration Testing 113

The Last Watchdog

JANUARY 3, 2023

For instance, phishing, one of the most common, is a social engineering attack used to steal user data. With more and more people working remotely, unsecured home or public WiFi networks represent a security risk not only to individuals but to their companies as well.

Risk 203

Risk Cybersecurity Antivirus Phishing 203

Security Boulevard

APRIL 12, 2024

Government says victims include the “critical infrastructure sector.” The post Sisense Hacked: CISA Warns Customers at Risk appeared first on Security Boulevard. A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket.

Risk 139

Risk Hacking Government Digital transformation 139

Security Affairs

FEBRUARY 19, 2024

The nation-state actors are known to carry out cyber-espionage against targeting government, military, and national infrastructure entities in Europe and Central Asia since at least December 2020. The compromise of email servers poses a substantial risk, especially during a conflict such as Russia-Ukraine.

Government 140

Government Social Engineering Engineering Hacking 140

eSecurity Planet

FEBRUARY 26, 2025

As businesses rely more on mobile devices for authentication and communication, these evolving threats are slipping past conventional security defenses, putting corporate networks at greater risk. As cybercriminals refine their methods, companies that fail to adapt risk being the next target. What is mishing?

Phishing 87

Phishing Mobile Social Engineering Data breaches 87

Webroot

MARCH 3, 2025

During this time, many government agencies and consumer protection organizations come together to help educate consumers on how to keep their personal and financial information secure. The growing risks to your data During the third quarter of 2024, data breaches exposed more than 422 million records worldwide.

Consumer Protection 92

Consumer Protection Identity Theft Scams Social Engineering 92

Security Affairs

DECEMBER 10, 2024

This social engineering scheme has been amplified by targeted phishing, smishing, and vishing activities, with a noticeable increase around the winter holidays. Cybercriminals quickly took advantage of this festive period when citizens were relaxed, and less vigilant at home, resulting in financial losses.

Social Engineering 110

Social Engineering Phishing Banking DNS 110

SecureWorld News

FEBRUARY 5, 2025

The State of Cybersecurity in Canada 2025 report, published by the Canadian Cybersecurity Network (CCN) and the Security Architecture Podcast , delivers an in-depth analysis of the evolving threat landscape, emerging risks, and strategic recommendations for Canadian organizations. Retail: Supply chain vulnerabilities contribute to $7.05

InfoSec 79

InfoSec Energy and Utilities Cybersecurity Education 79

Krebs on Security

JANUARY 30, 2024

The government says Urban went by the aliases “ Sosa ” and “ King Bob ,” among others. 2022 that an intrusion had exposed a “limited number” of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials. Twilio disclosed in Aug.

Social Engineering 356

Social Engineering Mobile Passwords Cybercrime 356

SecureList

DECEMBER 9, 2024

This incident serves as a stark reminder of the critical risks posed by global IT disruptions and supply chain weaknesses. This case underscores the serious risk that social engineering and supply chain attacks pose to open-source projects. million systems worldwide. Why does it matter? Why does it matter?

Internet 113

Internet Internet Risk Social Engineering 113

Jane Frankland

FEBRUARY 7, 2025

But as a CISO or cyber risk owner, it’s not just about locking down sensitive informationits about doing it without slowing down your people. It encompasses everything from ensuring the confidentiality and integrity of information to reducing risks, maintaining compliance, and building trust with customers.

Cyber Risk 130

Cyber Risk CISO Risk Encryption 130

CyberSecurity Insiders

JUNE 7, 2023

Here are three risk mitigation imperatives that can help organizations get a better handle on these latest risks and threats. The latest bill to address data threats is the RESTRICT Act , also known as the Restricting the Emergence of Security Threats that Risk Information and Communications Technology Act.

Risk 118

Risk Artificial Intelligence Technology Digital transformation 118

Security Boulevard

JUNE 13, 2024

The post Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk appeared first on Security Boulevard. Location tracking service leaks PII, because—incompetence? Seems almost TOO easy.

Risk 134

Risk Social Engineering Data privacy Engineering 134

The Last Watchdog

FEBRUARY 14, 2022

Which topics should CEOs, CIOs and CISOs have on their radar when it comes to Identity and Access Management ( IAM ) and cyber security risks in 2022? Automating these processes with the help of Identity Governance and Administration ( IGA ) tools should be a top priority for your IT department. Related: How IAM authenticates users.

CISO 245

CISO Social Engineering Authentication Risk 245

Security Boulevard

JULY 1, 2024

The post ‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk appeared first on Security Boulevard. SolarWinds hackers strike again: Remote access service hacked—by APT29, says TeamViewer.

Risk 135

Risk Hacking Social Engineering Authentication 135

Security Boulevard

MARCH 20, 2025

It examines the rising risks associated with AI, from cybercriminals weaponizing AI for more sophisticated attacks to the security implications of recent AI advancements like the open source model DeepSeek, while providing best practices for mitigating these risks.This blog post summarizes several highlights from the report.

Social Engineering 76

Social Engineering Phishing Risk Insurance 76

eSecurity Planet

NOVEMBER 18, 2022

He has “worked around the clock” to secure assets, identify crypto on the blockchain , find records, and work with regulators and government authorities. Security risks for end users take the form of two discrete methods: private key theft and ice phishing attacks,” said Christian Seifert, Researcher, Forta.org. The Cloudy Future.

Risk 143

Risk Cybersecurity Cryptocurrency Social Engineering 143

Joseph Steinberg

JULY 13, 2022

Apple last week announced new security features specifically intended to offer “specialized additional protection to users who may be at risk of highly targeted cyberattacks from private companies developing state-sponsored mercenary spyware.”. Flip phones are not totally immune from government surveillance and action either.).

Cybersecurity 258

Cybersecurity Artificial Intelligence Government Social Engineering 258

CyberSecurity Insiders

MAY 3, 2023

By: Daron Hartvigsen , Managing Director, StoneTurn and Luke Tenery , Partner, StoneTurn When insider threat or insider risk is discussed in a corporate context, often the relevant topics include misconduct , fraud, misuse, or even the idea that insiders can be unwitting accomplices to social engineering exploitation.

Risk 120

Risk Cyber threats Marketing Engineering 120

Security Boulevard

JULY 2, 2024

The post ‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE appeared first on Security Boulevard. Tim looks grim: 10 year old vulnerabilities in widely used dev tool include a CVSS 10.0 remote code execution bug.

Risk 137

Risk Social Engineering Data privacy Software 137

Hacker's King

DECEMBER 16, 2024

In the digital age, cyber-attacks are a growing concern for individuals, businesses, and governments worldwide. Recent incidents include attacks on government agencies, critical infrastructure, and major corporations, highlighting the vulnerability of national cybersecurity defenses.

Cyber Attacks 59

Cyber Attacks Phishing Artificial Intelligence Penetration Testing 59

Hacker's King

DECEMBER 17, 2024

This article explores the workings of the new Linux FASTCash variant, its implications for the financial sector, and how organizations can mitigate its risks. Reputational Damage Banks targeted by FASTCash attacks risk losing customer trust and facing regulatory scrutiny, which can have long-term consequences for their business.

Banking 52

Banking Social Engineering Malware Cyber threats 52

Daniel Miessler

SEPTEMBER 27, 2020

The Difference Between Threats and Risks. The problem we have as humans is that opportunity is usually coupled with risk, so the question is one of which opportunities should you take and which should you pass on. And If you want to take a certain risk, which controls should you put in place to keep the risk at an acceptable level?

VPN 326

VPN Risk Hacking Encryption 326

Security Boulevard

MAY 16, 2024

The post Risks of GenAI Rising as Employees Remain Divided About its Use in the Workplace appeared first on Security Boulevard. One in three office workers who use GenAI admit to sharing customer info, employee details and financial data with the platforms. Are you worried yet?

Risk 133

Risk Social Engineering Artificial Intelligence Data privacy 133

Malwarebytes

JANUARY 25, 2024

Reconnaissance and social engineering are specific fields where AI can be deployed. The impact is expected to grow for several reasons: AI already helps cybercriminals to compose more effective phishing emails. AI will help to improve existing tactics, techniques, and procedures (TTPs).

Ransomware 105

Ransomware Government Social Engineering Spyware 105

Security Boulevard

FEBRUARY 6, 2024

The post Why an HR-IT Partnership is Critical for Managing Cybersecurity Risk appeared first on Security Boulevard. By aligning priorities into a shared game plan, HR and IT can finally set their organizations up to defend against modern cyberthreats.

Risk 130

Risk Cybersecurity Social Engineering Cyber Risk 130

eSecurity Planet

JANUARY 30, 2024

Cloud storage risks involve potential external threats and vulnerabilities that jeopardize the security of stored data. Risks can lead to issues, but at the same time, you can prevent the risks by addressing these issues. Migration challenges result in incomplete transfers, which expose critical information to risk.

Risk 127

Risk DDOS Data breaches Encryption 127

Security Affairs

SEPTEMBER 29, 2023

According to our team, the exposed files belonged to the WBSC, the world governing body for baseball, softball, and Baseball5 – a recently introduced sport combining the previous two. What are the risks of exposing passport data? Government-issued documents are arguably the most important form of identification a person holds.

Identity Theft 134

Identity Theft Social Engineering Banking Risk 134

eSecurity Planet

MAY 1, 2025

This AI-powered solution watches behavior and access patterns to prioritize real-time risks, offering security teams better visibility into one of the fastest-growing attack surfaces in hybrid environments. A quarter of enterprise devices are too old to patch, posing a serious risk. PDF-based phishing is on the rise.

Cybersecurity 57

Cybersecurity Mobile Phishing Artificial Intelligence 57

The Last Watchdog

SEPTEMBER 21, 2022

Phishing is one of the most common social engineering tactics cybercriminals use to target their victims. Vendors benefit from PhaaS because they earn a profit from selling their skills while avoiding the risks associated with committing a cybercrime. Related: Utilizing humans as security sensors. Mitigating PhaaS.

Phishing 198

Phishing Artificial Intelligence Cybercrime Social Engineering 198

Security Affairs

FEBRUARY 8, 2024

Generative AI Impact : Generative AI will have a big role in cyber security, especially in areas like email protection and fighting social engineering attacks. US Sanctions Iranian Officials : The US government sanctioned six Iranian officials in response to cyber attacks on an Israeli PLC vendor.

Social Engineering 141

Social Engineering Cyber Attacks Cyber Insurance IoT 141

SecureWorld News

APRIL 14, 2025

It helps prioritize risks, organize protection efforts, and allocate resources more flexibly to address the most pressing threats first. With these insights, security personnel know which attack vectors to watch more closely, how to orchestrate the defenses, and what new phishing and social engineering trends to warn employees about.

Media 76

Media Social Engineering Malware Financial Services 76

SecureWorld News

SEPTEMBER 30, 2024

including government, manufacturing, transportation, and law enforcement. Initially focused on government and industrial sectors, the group has recently turned its attention to healthcare , which poses significant risks due to the sensitive nature of medical data and the potential for disruptions to life-saving operations.

Ransomware 116

Ransomware Social Engineering Healthcare Phishing 116

Security Boulevard

JANUARY 18, 2024

Cybersecurity risks increase every year and bludgeon victims who fail to prepare properly. For those interested in a better understanding of the oncoming risks, this is the information you are looking for. It can feel like crossing a major highway while blindfolded. Many never see the catastrophe about to happen, until it occurs.

Risk 115

Risk Cybersecurity CISO Technology 115

Security Boulevard

MARCH 10, 2023

Executive Summary In February 2023, EclecticIQ researchers identified multiple KamiKakaBot malwares which are very likely used to target government entities in ASEAN (Association of Southeast Asian Nations) countries. Analysts assess the content of the decoy documents is designed to target government entities in ASEAN countries.

Government 121

Government Malware Encryption Passwords 121