Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Today, SquareX released new threat research on an advanced Browser-in-the-Middle (BitM) attack targeting Safari users. As highlighted by Mandiant, adversaries have been increasingly using BitM attacks to steal credentials and gain unauthorized access to enterprise SaaS apps. BitM attacks work by using a remote browser to trick victims into interacting with an attacker-controlled browser via a pop-up window in the victim's browser.

Possessing a resilient business allows for easy maneuvering around competitors during cyberattacks or supply-chain ordeal. In modern business, agility is paramount. New technologies and shifting markets have the potential to rapidly catalyze change. Still, external factors such as cyber attacks and natural disasters can disrupt the flow of even the most nimble businesses.

Forget typical ransomware! Codefinger hijacked cloud keys directly, exposing backup flaws and shared responsibility risks. Time to rethink defence. If you didn't pay much attention to news of the recent Codefinger ransomware attack, it's possibly because ransomware has become so prevalent that major incidents no longer feel notable. But Codefinger is not just another ransomware breach to add to the list of incidents where businesses lost sensitive data to attackers. In key respects, Codefinger represents a substantially new type of ransomware attack.

In a world where data provides companies with a competitive advantage, sharing it amongst other businesses, especially in the same industry, may seem counterproductive. However, in cybersecurity, where every company is a potential target for threat actors and organizations are increasingly interconnected through supply chains, sharing information can significantly enhance a company's security posture and overall resilience.

As cryptocurrency adoption continues to rise, the ease of managing assets through mobile wallets and trading platforms has brought a new layer of convenience. However, this accessibility can also lead to overlooked security risks, especially when users rely on public Wi-Fi networks for transactions. Airports, coffee shops, hotels, and public transportation hubs may offer free internet access, but these networks present significant vulnerabilities that can expose sensitive information.

SpyCloud, the leading identity threat protection company, today released an analysis of nearly 6 million phished data records recaptured from the criminal underground over the last six months. Phishing attacks have been growing in scale and sophistication, and SpyCloud's research reveals that cybercriminals are increasingly targeting high-value identity data that can be used for follow-on attacks like ransomware, account takeover, and fraud.

Keeping your business data safe is more important than ever. As more companies use technology and remote work grows, the risk of cybersecurity threats increases. No matter the size or small business can be a target. To stay safe, businesses need strong cybersecurity plans and must know what threats to watch out for. In this post, we'll look at the top cyber threats businesses face today and how to guard against them. Let's get started and learn how to protect your business from these risks.

When a nextgeneration firewall ships with a Secure Boot bypass baked into its firmware, it is easy to assume the culprit lies in sloppy software. Yet the root cause often hides deeper: a lastminute swap of an outofstock component that the firmware team never fully audited. In 2023 alone, Resilinc's EventWatch AI recorded 7 422 hightech supplychain disruption alerts-over half severe enough to trigger "WarRoom" responses (Resilinc, 2023). These shortages force engineers to scour greymarket brokers, accept pincompatible "dropins," or resurrect endoflife (EoL) parts just to keep production lines moving.