Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

seemplicity

LOTL Attacks-The Silent Saboteurs in Your Systems

Oct 31, 2024 By Ravid Circus, Co-founder and Chief Product Officer In Seemplicity
Living Off the Land (LOTL) cyber attacks have become a major headache for cybersecurity professionals. These insidious attacks are getting more sophisticated and widespread, posing serious risks to businesses and even national security. Unlike traditional malware-based attacks, LOTL techniques exploit the very tools and processes that organizations rely on for their daily operations.
Read Post
logitio

Attack Vector vs Attack Surface

Oct 31, 2024 By David Benson In logit.io
Attack vectors and attack surfaces are both critical concepts in cybersecurity, closely related yet distinct in their roles and implications. Understanding the similarities and differences between them is key to developing robust security strategies. This article will detail what both concepts involve, why they’re crucial, and methods your organization can conduct to enhance its current security posture.
Read Post
graylog

Cross-Site Request Forgery Cheat Sheet

Oct 31, 2024 By Jeff Darrington In Graylog
“Aren’t you a little short for a Stormtrooper?” In this iconic Star Wars moment, Princess Leia lazily responds to Luke Skywalker, disguised as one of her Stormtrooper captors and using authentication information to open her cell. In other words, Star Wars acts as an analogy for a cross-site request forgery (CSRF) attack. In a CSRF attack, malicious actors use social engineering so that end-users will give them a way to “hide” in their authenticated session.
Read Post
Arctic Wolf

How to Secure Your Network Infrastructure

Oct 31, 2024 By Arctic Wolf In Arctic Wolf
With governments across the globe gearing up for major elections, experts have been predicting an increase in distributed denial of service (DDoS) attacks from nation-states and, so far, those predictions have paid off. According to Forbes, a recently thwarted DDoS attack found hackers sending traffic at 3.8 terabytes per second to a target server, peaking at 2.14 billion packets per second, making it the largest DDoS attack ever recorded.
Read Post
datadog

Identify the secrets that make your cloud environment more vulnerable to an attack

Oct 30, 2024 By Mallory Mooney In Datadog
Compromised secrets, such as leaked API and SSH keys, credentials, and session tokens, are the leading cause of cloud security incidents. While attackers can directly compromise secrets through methods like phishing, they can also gain control by finding and taking advantage of simple misconfigurations in your environment.
Read Post
knowbe4

75% of Organizations Have Experienced a Deepfake-Related Attack

Oct 29, 2024 By Stu Sjouwerman In KnowBe4
As generative AI evolves and becomes a mainstream part of cyber attacks, new data reveals that deepfakes are leading the way. Deepfake technology has been around for a number of years, but the AI boom has sparked new attacks, campaigns, and players all trying to use the impersonation technology to rob victims of their credentials, personal details or money. We recently covered multiple deepfake campaigns all perpetrated by a single individual that reached a global level.
Read Post
Trustwave

Trustwave SpiderLabs 2024 Trustwave Risk Radar Report: Defining the Cyber Assault on the Retail Sector

Oct 29, 2024 By Trustwave In Trustwave
The holiday shopping season is almost here, and according to the 2024 Trustwave Risk Radar Report: Retail Sector, threat actors have honed their skills and are prepared to use ransomware and phishing attacks that leverage well-known online brands to conduct direct attacks and fraud operations against retailers and consumers. Skills they will then use to infiltrate retail organizations of all types throughout the rest of the year.
Read Post
graylog

What is a Cross-Site Scripting Attack

Oct 28, 2024 By Jeff Darrington In Graylog
Cross-site scripting attacks are the digital version of the mystery trope where people inject IV lines with hazardous material. In the murder mystery genre, these crimes often focus on someone who looks legitimate, sneaking malicious material into someone’s medicine to harm the patient. Similarly, a cross-site scripting attack is when a threat actor sneaks malicious code into someone’s application to harm end users.
Read Post
knowbe4

Cyber Attack Tools Now Being Used To Help Phishing Pages Avoid Detection

Oct 28, 2024 By Stu Sjouwerman In KnowBe4
Cybercriminals are offering tools to help phishing pages avoid detection by security tools, according to researchers at SlashNext. “Anti-bot services, like Otus Anti-Bot, Remove Red, and Limitless Anti-Bot, have become a cornerstone of complex phishing operations,” the researchers write. “These services aim to prevent security crawlers from identifying phishing pages and blocklisting them.
Read Post
datadog

From on-prem to cloud: Detect lateral movement in hybrid Azure environments

Oct 25, 2024 By Mallory Mooney In Datadog
There are several tactics that threat actors can use to access cloud environments, services, and data. A common example is lateral movement, which involves techniques that enable a threat actor to pivot from one host to the next within an environment. This type of activity often uses other tactics, such as initial access and privilege escalation, as part of a larger attack flow.
Read Post
cloudflare

Training a million models per day to save customers of all sizes from DDoS attacks

Oct 23, 2024 By Nick Wood In Cloudflare
Our always-on DDoS protection runs inside every server across our global network. It constantly analyzes incoming traffic, looking for signals associated with previously identified DDoS attacks. We dynamically create fingerprints to flag malicious traffic, which is dropped when detected in high enough volume — so it never reaches its destination — keeping customer websites online. In many cases, flagging bad traffic can be straightforward.
Read Post
tripwire

Defending Against Ransom DDoS Attacks

Oct 23, 2024 By Tripwire Guest Authors In Tripwire
DDoS attacks have become an annoyance most companies assume they may have to deal with at some point. While frustrating, minor website disruptions from small-scale hacktivist campaigns rarely create substantial business impacts. However, a particularly insidious DDoS spinoff has emerged over the past decade – one aimed at blackmail. This evolutionary milestone stems from what's called Ransom DDoS (RDDoS), likely one of the most outrageous cybercrime weapons targeting businesses globally since 2015.
Read Post
netskope

Attackers Target Crypto Wallets Using Codeless Webflow Phishing Pages

Oct 23, 2024 By Jan Michael Alcantara In Netskope
From April to September 2024, Netskope Threat Labs tracked a 10-fold increase in traffic to phishing pages crafted through Webflow. The campaigns target sensitive information from different crypto wallets, including Coinbase, MetaMask, Phantom, Trezor, and Bitbuy, as well as login credentials for multiple company webmail platforms, as well as Microsoft365 login credentials.
Read Post
securitysenses

The Importance of Security in Web Development

Oct 23, 2024 By SecuritySenses In SecuritySenses
Today, internet applications have a significant share of performing tasks in different spheres of life-both commercial and personal ones. Today, the use of web technologies has gone high, thereby invoking extra measures to protect these technologies and platforms. Security cannot be overemphasized in web development since emerging vulnerabilities mean great losses-reputation loss, given the rapid expansion of internet users in the universe, as well as millions of dollars.
Read Post
knowbe4

Cyber Attackers are Adopting a "Mobile First" Attack Strategy

Oct 21, 2024 By Stu Sjouwerman In KnowBe4
With 16+ billion mobile devices in use worldwide, new data sheds light on how cyber attackers are shifting focus and tactics to put attacks into the victim’s hands. There’s an interesting story woven throughout mobile security provider Zimperium’s 2024 Global Mobile Threat Report that demands the attention of organizations intent on securing every attack vector – which includes personal mobile devices.
Read Post
knowbe4

AI-Enhanced Cyber Attacks Top the List of Potential Threats Facing Data Security

Oct 17, 2024 By Stu Sjouwerman In KnowBe4
AI is quickly becoming the basis for more cyber attacks, leading organizations to realize the risk it presents. A new report now shows that AI-enhanced cyber attacks are now the top concern of security leaders. I recently wrote about how prolific ransomware attacks are and what the outcomes were for those experiencing attacks. In the same report - GetApp’s 2024 Data Security report – I also found some interesting data around where AI sits in the list of concerns for cybersecurity leaders.
Read Post
securitysenses

What is the best paid search intelligence tools

Oct 17, 2024 By SecuritySenses In SecuritySenses
Internet attacks are not uncommon in today's world, as many businesses are built online. User data is stored in a cache and is visible to third parties. Therefore, if you have a site or page on the web, you need to take security measures to avoid having your contacts stolen. Attackers use several methods, such as two-factor encryption, connection of proxy servers, VPN services. And the use of paid search programs allows you to quickly find out who is hiding behind the unknown person who is bothering you.
Read Post
WatchGuard

Tips to protect hotels from cyberattacks

Oct 16, 2024 By The Editor In WatchGuard
In today’s digital age, the hospitality industry faces unique cybersecurity challenges that can significantly impact both guest experience and business operations. With the increasing reliance on technology for reservations, payments, and guest services, hotels, restaurants, and other establishments must prioritize robust cybersecurity measures. Here’s a closer look at the importance of cybersecurity in hospitality and strategies to enhance protection.
Read Post
idstrong

What Is a Rainbow Table Attack and How to Prevent It?

Oct 16, 2024 By Steven In IDStrong
Most computer systems and applications use passwords as a common authentication method. The simplest way to implement authentication is to store a list of all valid passwords for each user. The downside of this method is that if the list is compromised, the attacker will know all the user passwords. A more common approach is to store the cryptographic hash value of the password phrase.
Read Post
knowbe4

44% of U.S. Organizations Experienced One or More Ransomware Attacks in the Last Year

Oct 15, 2024 By Stu Sjouwerman In KnowBe4
As ransomware becomes more pervasive, new data provides insight into how well organizations are responding and the attack vector being used most. We hear a lot about ransomware attacks, but I’m not seeing data about how well organizations fared, so I was glad to see GetApp’s 2024 Data Security report. According to the report, nearly half of U.S.
Read Post
cloudflare

Protect against identity-based attacks by sharing Cloudflare user risk scores with Okta

Oct 15, 2024 By Noelle Kagan In Cloudflare
Cloudflare One, our secure access service edge (SASE) platform, is introducing a new integration with Okta, the identity and access management (IAM) vendor, to share risk indicators in real-time and simplify how organizations can dynamically manage their security posture in response to changes across their environments.
Read Post
WatchGuard

Boost security for your Mac customers against MFA bombing campaigns

Oct 15, 2024 By Sam Manjarres In WatchGuard
It all started when I began receiving multiple notifications on my Mac asking me to approve an authentication request. I ignored them at first, thinking it was a system error. But they kept popping up again and again, until they started interfering with my work. I was busy so I didn't stop to investigate. Then I received a phone call from a person claiming to be from my company's IT support team.
Read Post
tripwire

Australia Considers Mandatory Reporting of Ransom Payments

Oct 15, 2024 By Anirudh Chand In Tripwire
New legislation is on the horizon in Australia that is set to change the way businesses deal with ransomware attacks. This law, not unlike the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) in the US, aims to improve transparency when it comes to paying ransoms. There's no question that cybercrime is on the rise in the country.
Read Post
CrowdStrike

Detecting Microsoft Entra ID Primary Refresh Token Abuse with Falcon Next-Gen SIEM

Oct 15, 2024 By Nevada Romsdahl - Sapir Federovsky In CrowdStrike
Microsoft Entra ID Primary Refresh Tokens (PRTs) are an attractive target for threat actors because they are long-lived, they are broadly scoped and they often don’t have additional multifactor authentication requirements after they are obtained. In this blog, we will discuss what PRTs are, how they are issued and how recently released research gives threat attackers a new way to obtain them. Finally, we will examine how organizations can detect these attacks using CrowdStrike Falcon Next-Gen SIEM.
Read Post
WatchGuard

How can retailers prevent cybersecurity incidents?

Oct 14, 2024 By Kirk Jensen In WatchGuard
In today’s digital age, cybersecurity is no longer just an IT concern; it’s a critical component of retail success. As more customers shop online and engage with brands through digital platforms, the risks associated with cyber threats continue to grow. Whether you run a brick-and-mortar store, an e-commerce site, or a hybrid model, safeguarding your business from cyber attacks is essential.
Read Post
cyberint

Ransomware Groups Report 2024 - Q3

Oct 13, 2024 By Shmuel Gihon In Cyberint
Although 2024 began with a Q1 decline in the frequency of ransomware attacks, the second quarter was underscored by a return to a much more intimidating world of ransomware attacks globally, and the third quarter continues the trend of the second. In Q2 2024, the number of attacks stood at 1,277 cases, but Q3 saw a small decrease of 5.5% with 1209 cases.
Read Post

Most Dangerous Attack Techniques on Consumers and Enterprises and How to Protect Yourself

Oct 13, 2024 By miniOrange In miniOrange
Ankit Ahuja (IAM Specialist), our in-house expert. The master key to locking down your data, from multi-factor authentication to cutting-edge security protocols. He delivered an insightful session on the - “Most Dangerous Attack Techniques on Consumers and Enterprises and How to Protect Yourself.”
View Video
ciso global

Identity Under Siege: Responding to the National Public Data Breach

Oct 11, 2024 By Gary Perkins In CISO Global
While the scale of this data breach is alarming – with 277 gigabytes of data reportedly stolen – it’s important not to panic. Instead, focus on taking concrete steps to protect yourself. Stay informed, be proactive in safeguarding your personal information, and remain vigilant for any signs of suspicious activity.
Read Post
securitysenses

How employee training helps reduce cyber attack risk

Oct 10, 2024 By SecuritySenses In SecuritySenses
In today's digital world, cybersecurity is no longer just a concern for IT professionals-it's essential for everyone in an organisation, from top executives to entry-level employees. The main reason for this is that humans are often the weakest link in security, but they can also become the strongest defence if properly trained. That's why businesses need to prioritise cybersecurity education for all staff members.
Read Post
cato networks

Cato CTRL Threat Research: ProKYC Selling Deepfake Tool for Account Fraud Attacks

Oct 9, 2024 By Etay Maor In Cato Networks
Cato CTRL security researchers have recently discovered a threat actor, ProKYC, selling a deepfake tool in the cybercriminal underground that helps threat actors beat two-factor authentication (2FA) for conducting account fraud attacks. The tool being sold is customized to target cryptocurrency exchanges—specifically ones that authenticate new users leveraging a government-issued document and by enabling the computer’s camera to perform facial recognition.
Read Post
securitysenses

The Intersection Of Blockchain Technology And Cybersecurity: What To Watch

Oct 9, 2024 By SecuritySenses In SecuritySenses
As blockchain technology becomes increasingly integrated into various sectors, its influence on cybersecurity is undeniable. The promise of decentralised systems offers stronger protection against threats. However, new challenges emerge with this integration. Understanding how blockchain intersects with cybersecurity is essential for businesses and individuals interested in safeguarding their digital assets.
Read Post
foresiet

Stay Ahead of Ransomware: Comprehensive Solutions against DragonForce Attacks

Oct 8, 2024 By Foresiet In Foresiet
In the ever-evolving landscape of cybersecurity threats, the DragonForce ransomware group has quickly become a serious menace to organizations worldwide. First discovered in August 2023, DragonForce has made headlines by leveraging two powerful ransomware variants—a fork of the infamous LockBit3.0 and a modified version of ContiV3.
Read Post
knowbe4

Attackers Abuse URL Rewriting to Evade Security Filters

Oct 8, 2024 By Stu Sjouwerman In KnowBe4
Attackers continue to exploit URL rewriting to hide their phishing links from email security filters, according to researchers at Abnormal Security. URL rewriting is a security technique used by many email security platforms to analyze links in emails to verify their safety before users are allowed to click on them. However, this technique can also be abused to mask the original phishing link.
Read Post
Arctic Wolf

Understanding Drive-by Download Attacks

Oct 8, 2024 By Sule Tatar In Arctic Wolf
An employee at a large organization is doing research for a client and clicks on what they believe is a legitimate website. What they don’t realize is, while they’re browsing, malware in the form of a Trojan virus is swiftly downloading onto their endpoint. The Trojan jumps from the endpoint into the organization’s network, and suddenly, their cybersecurity system rings alarms as ransomware takes hold in the environment.
Read Post
netwrix

How to Prevent Cyber Attacks: Strategies and Best Practices

Oct 8, 2024 By Dirk Schrader In Netwrix
In today’s digitally connected world, any organization with digital assets and internet access is vulnerable to cyberattacks. That reality has become all too pervasive in recent years. While it may not be part of your business plan, protection against cyber attacks must be a high priority. Keeping your business safe from attack should be a shared objective across all areas of the organization.
Read Post
keeper

How To Prevent Man-in-the-Middle Attacks

Oct 7, 2024 By Ashley D'Andrea In Keeper
You can prevent Man-in-the-Middle (MITM) attacks in your organization by investing in a password manager, using a VPN, monitoring your network and training employees on security best practices. MITM attacks occur when a cybercriminal intercepts private data sent between two businesses or individuals to steal or alter the data with malicious intent.
Read Post
Arctic Wolf

Anatomy of a Cyber Attack: The PAN-OS Firewall Zero-Day

Oct 7, 2024 By Arctic Wolf In Arctic Wolf
On April 12, 2024, Palo Alto Networks published a security advisory detailing an actively exploited maximum severity zero-day vulnerability affecting the GlobalProtect feature of PAN-OS. Dubbed CVE-2024-3400, it was assigned the maximum critical severity score of 10.0 through the Common Vulnerability Scoring System (CVSS), meaning the potential for damage was large and the path to exploit was easy for cybercriminals.
Read Post
WatchGuard

Cyberattacks in the education sector up 258% last academic year

Oct 4, 2024 By Sam Manjarres In WatchGuard
Cybercriminals are targeting educational institutions, attracted by the vast amount of sensitive data they handle: student and employee personal information, research, and intellectual property. With tight technology budgets and often weak defenses, many of these organizations are easy prey for increasingly complex cyberattacks, putting their reputation and operations at risk.
Read Post
idstrong

What Are Pretexting Attacks: Scam Types and Security Tips?

Oct 4, 2024 By Steven In IDStrong
Have you ever received a text from someone you do not know? Did you become alarmed by the message? Did the message contain information about you and the people you know? Pretexting continues to become part of the global hacker's arsenal of tricks to manipulate their victims. This hack includes clicking on malicious links that can lead to identity threats, financial fraud, and extortion. Preventing pretexting starts security awareness training for users.
Read Post
securitysenses

Securing QR Codes: Protect Against Cyber Threats

Oct 4, 2024 By SecuritySenses In SecuritySenses
QR codes have become part of daily life, enabling quick access to websites and services with a single scan. However, this convenience also makes them a major target for cybercriminals who exploit their popularity. The hidden nature of QR data can easily redirect users to malicious content or phishing sites without their knowledge. With the growing risks tied to this technology, businesses need to implement more advanced security measures. Simple practices like regularly checking code destinations and verifying source authenticity can help reduce vulnerabilities.
Read Post
knowbe4

New VPN Credential Attack Goes to Great Lengths to Obtain Access

Oct 3, 2024 By Stu Sjouwerman In KnowBe4
A new “so-phish-ticated” attack uses phone calls, social engineering, lookalike domains, and impersonated company VPN sites to gain initial access to a victim network. This is one of the most advanced initial access attacks I’ve seen. Security analysts at GuidePoint Security have published details on a new attack that tricks users into providing the attacker with credentialed access.
Read Post
cloudflare

How Cloudflare auto-mitigated world record 3.8 Tbps DDoS attack

Oct 2, 2024 By Manish Arora In Cloudflare
Since early September, Cloudflare's DDoS protection systems have been combating a month-long campaign of hyper-volumetric L3/4 DDoS attacks. Cloudflare’s defenses mitigated over one hundred hyper-volumetric L3/4 DDoS attacks throughout the month, with many exceeding 2 billion packets per second (Bpps) and 3 terabits per second (Tbps). The largest attack peaked 3.8 Tbps — the largest ever disclosed publicly by any organization. Detection and mitigation was fully autonomous.
Read Post
knowbe4

Dick's Sporting Goods Cyber Attack Underscores Importance of Email Security and Internal Controls

Oct 2, 2024 By Stu Sjouwerman In KnowBe4
The recent cyber attack on Dick's Sporting Goods makes it clear that email played a critical role and emphasizes the need for better security controls. Dick’s Sporting Goods is a $12 billion company with more than 800 stores across the United States. That measure of success made the retailer the target of a recent cyber attack. A filing with the U.S.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.