10 May

What should protection for your 365 data really look like?

Sponsored Microsoft 365 has worked its way into so many facets of our organizations that it can be hard to imagine what life would be

Author rabih
10 May

23-year-old Brit linked to 2020 Twitter SIM-swap attack pleads guilty

A 23-year-old British citizen has confessed to “multiple schemes” involving computer crimes, including playing a part in the July 2020 Twitter attack that saw the

Author rabih
10 May

Plenty of Phish in the Sea—Your Guide to Spotting Phishing Emails and Scams

There are plenty of phish in the sea.  Millions of bogus phishing emails land in millions of inboxes each day with one purpose in mind—to

Author rabih
10 May

Capita looking at a bill of £20M over breach clean-up costs

Britain’s leaky outsourcing behemoth Capita is warning investors that the clean-up bill for its recent digital break-in will cost up to £20 million ($25.24 million).

Author rabih
10 May

Japan’s ubiquitous convenience stores now serving up privacy breaches

Japan’s minister for digital transformation and digital reform, Tono Karo, has apologized after a government app breached citizens’ privacy. The app is called the “Certificate

Author rabih
09 May

Two Microsoft Windows bugs under attack, one in Secure Boot with a manual fix

Patch Tuesday May’s Patch Tuesday brings some good and some bad news, and if you’re a glass-half-full type, you’d lead off with Microsoft’s relatively low

Author rabih
09 May

FBI-led Op Medusa slays NATO-bothering Russian military malware network

The FBI has cut off a network of Kremlin-controlled computers used to spread the Snake malware which, according to the Feds, has been used by

Author rabih
09 May

Microsoft disarms push notification bombers with number matching in Authenticator

Microsoft is hoping to curb a growing threat to multi-factor authentication (MFA) by enforcing a number-matching step for those using Microsoft Authenticator push notifications when

Author rabih
09 May

Microsoft disarms push bombers with number matching in Authenticator

Microsoft is hoping to curb a growing threat to multi-factor authentication (MFA) by enforcing a number-matching step for those using Microsoft Authenticator push notifications when

Author rabih
09 May

GULoader Campaigns: A Deep Dive Analysis of a highly evasive Shellcode based loader

Authored by: Anandeshwar Unnikrishnan Stage 1: GULoader Shellcode Deployment  In recent GULoader campaigns, we are seeing a rise in NSIS-based installers delivered via E-mail as

Author rabih
09 May

EU proposes spyware Tech Lab to keep Big Brother governments in check

Tired of working for an egomaniacal startup boss or dull enterprise biz? A new org has been proposed called the Tech Lab, where you’d investigate

Author rabih
09 May

Beijing raids consultancy, State-sponsored media warns more to come

Beijing sent a message to foreign businesses this week when it launched an investigation into Shanghai-based Capvision Partners on the grounds of national security, accusing

Author rabih
09 May

FYI: Intel BootGuard OEM private keys leak from MSI cyber-heist

Intel is investigating reports that BootGuard private keys, used to protect PCs from hidden malware, were leaked when data belonging to Micro-Star International (MSI) was

Author rabih
08 May

Western Digital: Customer info stolen in that IT attack

Customer information was stolen from the IT systems of Western Digital in that March IT security breach, forcing the storage manufacturer to shut down its

Author rabih
08 May

WordPress plugin hole puts ‘2 million websites’ at risk

WordPress users with the Advanced Custom Fields plugin on their website should upgrade after the discovery of a vulnerability in the code that could open

Author rabih
08 May

Twitter admits ‘security incident’ made private Circles not so much

Twitter has finally admitted a “security incident” caused some users’ semi-private Twitter Circle tweets to show up on others’ timelines. Some of these tweeters took

Author rabih
08 May

T-Mobile US suffers second data theft within months

in brief We’d say you’ll never guess which telco admitted to a security breakdown last week, but you totally will: T-Mobile US, and for the

Author rabih
08 May

Modern Auth comes to on-prem Exchange Server gear

Microsoft last year said that it was putting off the next version of Exchange Server until the second half of 2025 so engineers could continue

Author rabih
Load moreLoadingAll items loaded