Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Account Takeover attacks: the viewpoint of a threat intelligence expert

Jun 21, 2023 By Datadog In Datadog
Account takeover happens when someone tries to steal a user account. Any service offering authentication can face it since an attacker just has to test pairs of users and passwords. Zack Allen joins us to share his experience protecting organizations that faced massive account take over, describes the criminal and financial motivation of attackers, their methods to hide, and how they move from a database leak to a compromised account. We show the tools that attackers most commonly use. Eventually, we discuss how to detect and protect your organization around account take over.
View Video
Spectral

A step-by-step guide to preventing credit card skimming attacks

Jun 16, 2023 By Eyal Katz In Spectral

If you read the news, you’ve encountered the term “Magecart” multiple times in recent years. The term refers to several hacker organizations that use online skimming methods to steal personal information from websites, most frequently customer information and credit card details on websites that take online payments.

Read Post
knowbe4

UK Attacker Responsible for a Literal "Man-in-the-Middle" Ransomware Attack is Finally Brought to Justice

Jun 15, 2023 By Stu Sjouwerman In KnowBe4
The recent conviction of a U.K. man for cyber crimes committed in 2018 brings to light a cyber attack where this attacker manually performed the “in-the-middle” part of an attack. We’ve all heard of a “Man-in-the-Middle” (MitM) attack – also more recently called a “Manipulator-in-the-Middle” attack.
Read Post
knowbe4

Breakdown of an Impersonation Attack: Using IPFS and Personalization to Improve Attack Success

Jun 15, 2023 By Stu Sjouwerman In KnowBe4
Details from a simple impersonation phishing attack show how well thought out these attacks really are in order to heighten their ability to fool victims and harvest credentials. Credential harvesting scams are pretty simple at face value: send an email that links to a spoofed login page/website, and let the credentials roll on in.
Read Post
riscosity

A Guide to Handling the MOVEit Attack

Jun 15, 2023 By Anirban Banerjee In Riscosity

Last week, a vulnerability in the popular MOVEit managed file transfer service was exploited by the CL0P ransomware gang to execute data breaches – an increasingly common cybersecurity attack technique where popular software is exploited to target, by extension, their users. Victims of this hack include British Airways, Boots, BBC, and multiple US government agencies.

Read Post
alienvault

Threat Hunt: KillNet's DDoS HEAD Flood Attacks - cc.py

Jun 14, 2023 By Samad Khawaja In AT&T Cybersecurity

Killnet is an advanced persistent threat (APT) group based in Russia that has been active since at least 2015. The group is notorious for its highly sophisticated and persistent attacks on a diverse range of industries, including state and local governments, telecommunications, and defense. Killnet has been linked to several high-profile attacks, including the 2016 hack of the Democratic National Committee (DNC) during the U.S. presidential election.

Read Post
mend

Understanding the Anatomy of a Malicious Package Attack

Jun 13, 2023 By Jeff Martin In Mend

To identify malicious packages and protect yourself against them, you need to know what to look for. Here’s a simple guide. In January 2022, users of the popular open-source libraries “faker” and “colors” suddenly found their applications started to malfunction and display nonsensical data because they had been infected by a malicious package.

Read Post
knowbe4

State-Based Cyber Attacks Continue to Be a Thorn in the Cyber Insurer's Side

Jun 13, 2023 By Stu Sjouwerman In KnowBe4
As government-sponsored and widespread vulnerability attacks continue to result in larger damages, cyber insurers are looking for opportunities to still meet demand without incurring risk. It may come as a surprise, but cyber insurers aren’t in the business of issuing (and covering) cyber insurance policies; they’re in the business of staying in business. And that means identifying and reducing the highest sources of risk where the insurer will lose through paying on claims.
Read Post
securitysenses

Spear Phishing Attacks: Understanding and Mitigating the Risk

Jun 12, 2023 By SecuritySenses In SecuritySenses
In an increasingly interconnected world, cybersecurity has never been more important. One of the most prevalent and potent threats to individual and organizational security is spear phishing. Unlike phishing, which casts a wide net in hopes of catching any unsuspecting victim, spear phishing is a more targeted approach. The attacker customizes their emails, texts, or other messages to mimic trustworthy sources and deceive specific individuals into revealing sensitive information.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.