Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

My hacker story occurred not too long ago at the Hong Kong office of an undisclosed multinational corporation. The hackers pulled off a first-of-its-kind scam that leveraged a phishing email as the initial attack vector followed by a deepfake video call. In this instance, there was enough information to establish a perceived authority for a finance worker who transferred a total of HK$200 million in 15 transactions to five different Hong Kong bank accounts until the scam was detected.

A new phishing-as-a-service toolkit that leverages credential interception and anti-detection capabilities has put EU banks at severe risk of fraud. One of the growing dangers of the cyber crime economy is the phishing toolkit. Putting well-designed, expertly-coded webpages, authentication services, and obfuscation features into the hands of even a would-be cybercriminal creates havoc for the intended victim organizations.

The exploitation of cloud services is a flexible weapon in the hands of attackers, so flexible that we uncover new campaigns abusing legitimate apps on a daily basis.

This article is a must-read guide on email security in healthcare. It analyzes the regulatory complexities of HIPAA, outlines practical strategies for secure communications, and sheds insights into why your healthcare organization may need to take action. By the end of reading this guide, you’ll be able to make informed choices regarding your email practices.

Cybersecurity compliance is complicated. As industry standards change and evolve with new technology, so do compliance requirements. Depending on your organization’s operations, industry, or even location, compliance could mean adhering to multiple frameworks and reporting to multiple governing bodies. In fact, 67% of organizations surveyed by Arctic Wolf follow between one to three sets of guidelines.

Cybercriminals have been exploiting misconfigured Docker containers to deploy cryptocurrency mining software, and a particularly aggressive campaign dubbed "Commando Cat" has been at the forefront since early this year. This trend highlights the growing threat of cryptojacking through container misconfigurations. How Cybercriminals Exploit Docker Containers Containers have revolutionized how organizations deploy and manage applications, but they have also provided new opportunities for cyberattackers.

The growing sophistication of threat actors, supply chain disruptions, and the potential for systemic and catastrophic losses make for a precarious landscape for insurers and those seeking insurance. To help customers reduce risk at scale, insurers and brokers must adopt technology in order to visualize vulnerabilities while also forecasting, quantifying, and monitoring risks.

Malware, short for malicious software, is a program that is intentionally designed to harm computer systems and devices. In 2022, 5.5 billion malware attacks occurred around the world. Cybercriminals often use malware to cause damage to a system, take control of your device, spy on your web activity or steal personal data for financial gain. Individuals are targeted with malware through methods such as phishing, smishing and vishing which are types of social engineering.

Today’s digital landscape is full of ever-evolving cyber threats. Securing your organization’s identities has become very important. Azure Identity Protection is a strong ally. It empowers you to strengthen your defenses and protect your most valuable assets: your users’ identities. This strong security service gives you a single view of potential weaknesses. It also gives you the tools to stop risks and react fast to incidents.