Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

manageengine

How leveraging Address Resolution Protocol ensures seamless networking

Jan 31, 2025 By OpUtils In ManageEngine
Let’s start with the fundamentals: What is Address Resolution Protocol (ARP)? ARP is a vital networking protocol that ensures effective communication between devices on a local-area network (LAN). Its primary function is to map IP addresses to MAC addresses, allowing devices to recognize and communicate with each other within the network. ARP bridges the gap between the logical layer (IP addresses) and the physical layer (MAC addresses).
Read Post
WatchGuard

Top 11 cyberattacks that impacted 2024

Jan 31, 2025 By Corey Nachreiner In WatchGuard
2024 is behind us, but the cybersecurity lessons it left behind are still highly relevant. Data breaches remain a persistent threat to large enterprises and government agencies, as the data they store is prized by organizations and a prized target for cybercriminals. Attacks have economic consequences and serious reputational and legal repercussions, putting business stability at risk.
Read Post
komodo consulting

How SMB Misconfigurations Can Lead to Full Network Takeover: A Red Team Case Study

Jan 31, 2025 By Komodo Research In Komodo Consulting
Server Message Block (SMB) is a ubiquitous protocol used for file sharing, remote access, and resource management across enterprise networks. While critical for business operations, its misconfigurations can expose vulnerabilities to attackers. In this blog post, we’ll dive into a real-world red team operation where a simple yet effective PowerShell-based tool led us from SMB enumeration to full network takeover.
Read Post
securitysenses

The Role of Cybersecurity in Ensuring Business Continuity in 2025

Jan 30, 2025 By SecuritySenses In SecuritySenses
In today's digital age, cybersecurity is no longer just a technical concern; it's a business-critical priority. With cyber threats evolving rapidly, businesses must adopt robust strategies to protect their operations and ensure continuity. From ransomware attacks to insider threats, the risks are multifaceted and require proactive measures. As someone deeply invested in the cybersecurity space, I've seen firsthand how businesses can thrive when they prioritize security.
Read Post
SecurityScorecard

Operation Phantom Circuit: North Korea's Global Data Exfiltration Campaign

Jan 29, 2025 By SecurityScorecard In SecurityScorecard
In December 2024, a routine software update concealed a global threat. Attackers from the Lazarus Group, based in North Korea, infiltrated trusted development tools, compromising hundreds of victims worldwide. This sophisticated campaign, code-named “Phantom Circuit,” targeted cryptocurrency and technology developers, employing advanced obfuscation techniques through proxy servers in Hasan, Russia.
Read Post
knowbe4

Nearly Three-Quarters of UK Education Orgs Have Sustained Cyberattacks

Jan 27, 2025 By Stu Sjouwerman In KnowBe4
73% of educational institutions in the UK have sustained at least one cyberattack or breach in the past five years, according to researchers at ESET. Additionally, a fifth of these organizations said they’ve experienced three or more cyberattacks. 43% of the organizations surveyed cited phishing attacks as their top concern.
Read Post
teramind

How to Detect and Prevent Corporate Espionage Attacks

Jan 27, 2025 By Teramind In Teramind
14 years in prison and a $200,000 fine. That’s what it cost a Michigan chemist caught stealing trade secrets from Coca-Cola and Eastman Chemical Company. And no, she wasn’t an outsider—she was a trusted Principal Engineer with legitimate access to these technologies worth $120 million in development costs . Every year, companies fall victim and lose billions to corporate espionage attacks, with many attacks going undetected for months or even years.
Read Post
knowbe4

84% of Healthcare Organizations Sustained Cyberattacks Last Year

Jan 24, 2025 By Stu Sjouwerman In KnowBe4
A new survey by cybersecurity vendor Netwrix found that 84% of healthcare organizations spotted a cyberattack in the past twelve months, with phishing attacks accounting for 63% of these incidents. “Phishing was the most common type of incident experienced on premises, similar to other industries,” Netwrix says. “Account compromise topped the list for cloud attacks: 74% of healthcare organizations that spotted a cyberattack reported user or admin account compromise.”
Read Post
netacea

How Bot Attacks Damage Brand Reputation

Jan 23, 2025 By Alex McConnell In Netacea
A strong reputation is vital for business success, influencing customer loyalty and spending decisions. When a brand’s reputation is damaged, customers often turn to competitors, which can reduce key metrics like lifetime customer value. Trust is central to a brand’s reputation. Customers expect their personal data to be secure, pricing to be fair, and services to be reliable. However, bot attacks undermine this trust.
Read Post
memcyco

The 5 Biggest Phishing Attacks of 2024

Jan 21, 2025 By Kate Cox In Memcyco
Phishing attacks are a huge threat. They prey on human trust and manage to trick even the most tech-savvy users. A successful attack on a company’s customers can weaken it financially, create compliance issues, and cause long-lasting reputational damage. Scammers have stolen over $1 trillion globally in just the past year – a staggering figure that rivals the GDP of some nations.
Read Post
foresiet

Inside the Belsen Group Attack: 15000 FortiGate VPN Credentials and Configurations Exposed

Jan 21, 2025 By Foresiet In Foresiet
It was in January 2025 when a disaster leakage of data was leaked having more than 15,000 configuration files carrying VPN credentials leaked from FortiGate devices spread on several devices. It depicts acute problems inside organizations using the products by Fortinet about a higher need for an excellent security approach. The Belsen Group, the hacking collective carried out this attack by taking advantage of the zero-day vulnerability known as CVE-2022-40684.
Read Post
cloudflare

Record-breaking 5.6 Tbps DDoS attack and global DDoS trends for 2024 Q4

Jan 21, 2025 By Omer Yoachimik In Cloudflare
Welcome to the 20th edition of the Cloudflare DDoS Threat Report, marking five years since our first report in 2020. Published quarterly, this report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the fourth quarter of 2024 and look back at the year as a whole.
Read Post
CrowdStrike

Leveraging CrowdStrike Falcon Against Attacks Targeting Okta Environments

Jan 21, 2025 By Tony Gore - Justin Schoenfeld In CrowdStrike
As more organizations move to software-as-a-service (SaaS), remote access to applications and data is concentrated among a smaller set of identity providers. These identity providers, such as Okta, must absorb growing volumes of credential-based attacks. Okta consistently reports high volumes of credential stuffing, password spraying and phishing attacks against its customers. Additionally, red teams are discovering new patterns of abuse relevant to Okta products.
Read Post
cyberark

The US Treasury Attack: Key Events and Security Implications

Jan 21, 2025 By CyberArk Labs In CyberArk
There’s a dark joke in cybersecurity: each year ends with an unwelcome holiday surprise—a major security incident. This timing isn’t random. Threat actors target this timing, knowing security teams operate with skeleton crews that impact detection, investigation and response times. It’s a calculated strategy that works reliably, year after year. And now there’s another holiday surprise to add to the list—the recent attack on the U.S. Treasury Department.
Read Post
securitysenses

Ransomware Attacks on CRMs: Why They're Growing and How to Stop Them

Jan 21, 2025 By SecuritySenses In SecuritySenses
Keeping data and operations streamlined is why CRM systems are an essential part of business. However, as they are used more and more, they have become a prime target of ransomware attacks that can threaten the availability of sensitive customer data, as well as business operations.
Read Post
nightfall

Here's What We Can Learn from the Cyberhaven Incident

Jan 20, 2025 By The Nightfall Team In Nightfall
In December 2024, Cyberhaven fell victim to a sophisticated cyberattack that exploited a phishing campaign targeting its Chrome Web Store account. This breach compromised over 400,000 users by injecting malicious code into its browser extension, exfiltrating sensitive data such as cookies and session tokens. The incident has drawn significant attention due to Cyberhaven's role as a cybersecurity provider and the broader implications for browser extension security.
Read Post
indusface

Cryptocurrency Mining Attack Exploiting PHP Vulnerabilities: An Emerging Threat

Jan 17, 2025 By Pavan Bushan Reddy In Indusface
A new and growing threat has emerged, targeting vulnerable PHP servers with a sophisticated cryptocurrency mining attack. This exploit takes advantage of misconfigured or unpatched PHP servers, allowing malicious actors to gain unauthorized access and deploy mining malware. The campaign focuses on exploiting vulnerabilities in PHP, particularly CVE-2024-4577, which has already been linked to several exploit attempts and continues to affect systems worldwide.
Read Post
knowbe4

Ransomware Gangs Claimed More Than 5,000 Attacks in 2024

Jan 17, 2025 By Stu Sjouwerman In KnowBe4
Ransomware groups claimed responsibility for 5,461 attacks in 2024, with 1,204 of these attacks being publicly confirmed by victim organizations, according to Comparitech’s latest Ransomware Roundup report. The average ransom demand was more than $3.5 million, and the average ransom paid was $9.5 million. Many of these attacks involved data theft extortion, leading to the breach of nearly 200 million records.
Read Post
11:11 systems

Insights from the Codefinger Ransomware Attack: A Wake-Up Call for IT Leaders

Jan 16, 2025 By Scott Gray In 11:11 Systems
The recent Codefinger ransomware attack has sent shockwaves through the IT community, specifically targeting businesses relying on AWS S3 storage services. This breach highlights the importance of prioritizing security “best practices” to protect even the most reliable platforms.
Read Post
SecurityScorecard

Operation 99: North Korea's Cyber Assault on Software Developers

Jan 15, 2025 By SecurityScorecard In SecurityScorecard
On January 9, the SecurityScorecard STRIKE team uncovered Operation 99, a cyberattack by the Lazarus Group, North Korea’s state-sponsored hacking unit. This campaign targets software developers looking for freelance Web3 and cryptocurrency work. If you thought fake job offers from the group’s Operation Dream Job campaign were bad, this latest move is a masterclass in deception, sophistication, and malicious intent. Here’s why Operation 99 demands your attention.
Read Post

How Attackers Exploit APIs for Rapid Data Breaches #Vulnerabilities #TechTrends #CyberThreats

Jan 13, 2025 By Wallarm In Wallarm
Attackers now exploit APIs for rapid data breaches, taking advantage of a 96% rise in API-related vulnerabilities. Learn how realized risks (breaches) differ from unrealized risks (vulnerabilities) and why APIs are top targets. Stay informed on API security trends.
View Video

CrowdStrike: Stopping Cross-Domain Attacks

Jan 10, 2025 By CrowdStrike In CrowdStrike
Discover how adversaries evade detection by exploiting gaps across endpoint, identity, and cloud environments - and how CrowdStrike stops them. In this demo, see the power of the CrowdStrike Falcon platform’s unified visibility and expert threat hunting in action, uncovering lateral movement, detecting evasive tactics, and accelerating response to sophisticated and stealthy cross-domain attacks. Learn how to get unmatched protection across your entire attack surface with CrowdStrike.
View Video

The REAL Impact of Hospital Cyberattacks, It's More Than Just 'Rescheduling #shorts #cybersecurity

Jan 10, 2025 By Rubrik In Rubrik
When hospitals say "procedures were rescheduled" after a cyberattack, they're missing the human cost. For many patients, a medical appointment isn't just a calendar entry – it's arranged time off work, transportation plans, aftercare support, and lost wages. These disruptions hurt vulnerable communities the most and damage the essential trust between healthcare providers and their patients.
View Video
manageengine

Unlocking the power of Amazon VPC: Transforming security and efficiency across sectors

Jan 8, 2025 By General In ManageEngine
The rise in cyberattacks has become a pressing concern for organizations worldwide, threatening sensitive data, operational continuity, and trust. Cybercriminals are using increasingly complex strategies to attack vulnerabilities in systems and networks in a variety of organizations. By offering safe, segregated virtual networks in the cloud, Amazon Virtual Private Cloud (Amazon VPC) provides a strong defense against these attacks.
Read Post
tripwire

Cyber Threats Rising: US Critical Infrastructure Under Increasing Attack in 2025

Jan 8, 2025 By Kirsten Doyle In Tripwire
As we enter 2025, the frequency and sophistication of cyberattacks on critical national infrastructure (CNI) in the US are rising at an alarming rate. These attacks target the foundational systems that support everything from energy and water to transportation and communications, and the consequences are far-reaching and potentially catastrophic. They impact not just the operations of these services but also the very way of life for affected populations.
Read Post
netwrix

What is Credential Stuffing?

Jan 8, 2025 By Dirk Schrader In Netwrix
Credential stuffing is a type of cyberattack where attackers use stolen username and password combinations, often obtained from previous data breaches, to gain unauthorized access to multiple online accounts. The attacker automates the process of trying these combinations across various websites, hoping that users have reused the same login details.
Read Post
Trustwave

Trustwave's 2025 Cybersecurity Predictions: The Era of End-to-End AI Cyberattacks is Here

Jan 7, 2025 By Craig Searle In Trustwave
As 2024 has wrapped up, we went around the room and asked some of Trustwave’s top executives what cybersecurity issues and technology they saw playing a prominent role in 2025. I'm willing to go on a limb this year and say there is an excellent chance we will see the first fully autonomous and end-to-end malware, ransomware, or other cyberattack campaigns take place.
Read Post

What is an XXE Attack?

Jan 3, 2025 By Indusface In Indusface
An XXE (XML External Entity) attack is a security vulnerability where attackers exploit improperly configured XML parsers to access sensitive data, execute code, or perform denial-of-service attacks. Learn about XML External Entity (XXE) attacks, how attackers exploit XML parsers to access sensitive data or execute malicious code, and ways to prevent them.
View Video

How to Stop DDoS Attacks: 5 Best Practices

Jan 3, 2025 By Indusface In Indusface
A DDoS (Distributed Denial of Service) attack floods a website with traffic, leading to downtime or disruptions. Protect your site by using strategies like traffic monitoring, rate-limiting, and DDoS mitigation tools. Explore the top 5 practices to prevent and handle DDoS attacks. For more details, check out our latest blog.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.