Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Attackers are increasingly using images in phishing to evade text-based security filters, according to researchers at INKY.

Email-based social engineering attacks have risen by 464% this year compared to the first half of 2022, according to a report by Acronis. Business email compromise (BEC) attacks have also increased significantly. “One out of 76, or 1.3%, of the received emails were malicious,” the researchers write. “Phishing remains the number one threat, with these attacks making up 73% of the total.

Hey, did you get that sketchy email? You know, the one from that malicious hacker always trying to fool us into clicking on some malware? Boy, these criminals are relentless. Wait, what? You clicked on it? Uh-oh... A hypothetical scenario, but one that plays out every day in organizations across the globe. The truth is that it is a very real scenario that offers a good opportunity to dive deeper into the topic of email security.

There's good news for any business which has fallen victim to the Akira ransomware. Security researchers at anti-virus company Avast have developed a free decryption tool for files that have been encrypted since the Akira ransomware first emerged in March 2023. The ransomware has been blamed for a number of high profile attacks - including ones against universities, financial institutions, and even a daycare centre for children.

A selection of this week’s more interesting vulnerability disclosures and cyber security news. As always with leaks, time will tell if any data shows up confirming it or not. On the flip side, such a juicy trove could just be a scam directed at hackers.

IONIX has won two prestigious 2023 Globee® Awards, which include a Silver in the 3rd Annual Globee® Information Technology (IT) Awards for Best Attack Surface Management Product and a Silver in the 3rd Annual Globee® Disruptor Award for Cyber Security Software. These awards come on the heels of a Gold 2023 Globee® Cybersecurity Award for Best Security Software.

Cyber risk uncertainty is growing. Despite massive spending worldwide to the tune of $173 billion, cyber attacks keep occurring. Ransomware attacks—a type of cyberattack that encrypts an organization's network or locks users out of their devices and requires a ransom before restoring access—are costing companies 20 days of downtime on average. Within the next few years, nearly half of companies worldwide will experience cyber attacks on their software supply chains.

We are all familiar with the importance of hygiene in our day-to-day lives so as not to get sick or spread germs to others; this same concept can also ring true in our digital lives by applying cyber hygiene habits to keep our privacy and security safe online. It is important to familiarize ourselves with these procedures to avoid common cybersecurity mistakes that can be detrimental to your online privacy, such as loss of files, corrupted data, or identity theft.

The recent release of Teleport 13 brings a much-anticipated feature allowing Teleport agents and Teleport Kubernetes Agents to be updated automatically. In this blog post, we'll look at why that's so important as well as how automatic agent updates work.

In this ongoing series, you’ll hear directly from the teams keeping Vanta—and most importantly, our customers—secure. Today’s post by Rob Picard and Jess Chang on the Security team explains why and how we migrated to WebAuthn as the mandatory way to log into Okta. ‍ ‍