You are here

Cybersecurity

Session Cookie Hijacking – The Not so Sweet Side of MFA

Develop a viable defense and threat actors will inevitably find a way to bypass it. That’s the endless game of cat-and-mouse, especially in the cybersecurity world. A historical example was the old advice to ‘never open an email from someone you don’t know,’ so threat actors now expertly purport to be or impersonate someone (or something, as in the case of a well-known brand) we do know. A more recent example is in regards to multifactor authentication (MFA).

European Cybersecurity Agency (ENISA) Releases Threat Landscape Report, Ransomware and Phishing Remain Top Threats

The European Cybersecurity Agency (ENISA) recently released its annual report on the cybersecurity threat environment facing the European Union. The report, Volatile Geopolitics Shake the Trends of the 2022 Cybersecurity Threat Landscape, identifies significant threats, threat actors and attack techniques, tracks major trends, and also provides mitigation measures.

FBI PSA - Scammers Using Computer-Technical Support Impersonation Scams to Target Victims and Conduct Wire Transfers

The FBI has published a Public Service Announcement (PSA) advising the public on how to protect themselves from cyber criminals conducting computer-technical support scams. Technical support scams involve fraudsters posing as service representatives of a company's technical or computer repair service and contacting victims through email or by telephone about a highly priced, soon-to-renew subscription. According to the PSA, “Scammers request victims contact the scammers at a provided telephone number or email to cancel the renewal and receive a varying refund amount.

Proofpoint – Cybersecurity Predictions for a Turbulent 2023

Last week, cybersecurity company Proofpoint released an assessment of cybersecurity predictions for 2023. Notably, Proofpoint forecasts that the commercialization of malware and other exploitation tools on the dark web will likely lead to an increase in cybercrime. The assessment also predicts that ongoing geopolitical tensions, such as the continuing Russian war in Ukraine, will likely catalyze new cyber attacks and expand systemic risk for organizations.

Threat Report – Microsoft Digital Defense Report 2022 Notes Rise in Attacks Against Critical Infrastructure

Last week, Microsoft released its annual Digital Defense Report, which includes aggregated security data from across the systems and networks Microsoft monitors to understand the scope and scale of cyber threats around the world. Most notably, the report found that cyber attacks targeting critical infrastructure have grown significantly.

Pages

Subscribe to Cybersecurity