Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Attackers Leveraging XSS To Make Phishing Emails Increasingly Evasive

Attackers are exploiting Reflected Cross-Site Scripting (XSS) flaws to bypass security filters, according to a new report from Vipre. This technique allows attackers to send benign links in phishing emails that will redirect users to malicious sites. Vipre also found that attackers are increasingly using links instead of malicious attachments in their phishing emails. “Three years ago, it was a 50/50 split between phishing emails utilizing links versus attachments,” the researchers write.

New Research: Number of Successful Ransomware Attacks Rise 29% in a Just One Year

New analysis of Q1’s ransomware attacks uncovers a single group responsible for the majority and discusses what makes them so successful. This sort of analysis helps to establish threat landscape trends and keeps our collective focus on the places where cyber attacks are working.

How Amazon Marketing Agencies and Sellers Work Together

For businesses selling products on Amazon's massive e-commerce platform, the opportunities for growth and revenue are immense. But so is the competition from other sellers vying for the same digital real estate and customer attention. Given these intense market dynamics, many brands wisely choose to partner with specialized Amazon marketing agencies to elevate their product visibility and conversion rates.

The Importance of Analytical Testing in Cybersecurity

Today, cyber threats evolve at a breakneck pace, and the significance of analytical testing in cybersecurity is a major bulwark against these threats, vital for organizations aiming to protect their data and systems from sophisticated cyberattacks. Analytical testing in cybersecurity involves a series of systematic assessments designed to detect and mitigate vulnerabilities in an organization's cyber infrastructure. It incorporates different types of validity, such as content, construct, and criterion. Ultimately, it can ensure a comprehensive evaluation of security systems.

Has your personal data been breached on the dark web?

The dark web can feel like a mysterious underworld, a hidden corner of the internet where there are no rules. It’s a place where stolen data gets traded, and cybercriminals plot their next attacks. Just because it’s dark, that doesn’t mean you have to be blind to the threats lurking there. That’s where ManageEngine Log360 comes in with a powerful new integration for Constella Intelligence.

RSA 2024: The Art of Possible

“The best part of RSA is all the amazing people in the community trying to make the world a safer place. It’s also very exciting to see all the innovation to make adversaries’ lives harder – competition and collaboration make us better.” – CEO & Co-Founder Dr. Aleksandr Yampolskiy The SecurityScorecard team has just returned from an incredible week in San Francisco at RSA Conference 2024!

SecurityScorecard and Intel: Digging Past the Surface for Enhanced Protection

Threat actors have responded to better protections in the operating system and improved endpoint detection and response (EDR) capabilities by moving down the stack to find entry points with full visibility and privileges into the stack above.