Biztonsági szemle

Attackers leveraging the 'no-reply@dropbox[.]com' domain sent emails with a Dropbox-hosted PDF to employees using the Darktrace SaaS environment.

Attackers leveraged phishing emails using contract-themed DocuSign lures that included PDF attachments.

Included in the affected entities were some of the country's ministerial services, according to a statement from the French Prime Minister's Office.

Threat actors were able to access patients' medical and health insurance details, as well as their birthdates and addresses, noted UT Southwestern in a filing with the Office of the Texas Attorney General.

Roku had accounts from 15,363 customers compromised following a credential stuffing attack between late December and late February.

Information compromised in the attack included employees' personally identifiable information, including their names, birthdates, and Social Security numbers, according to breach notification letters sent by EquiLend.

Sure, we can learn from past incidents, by healthcare needs a more proactive approach to security.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Converged identity platforms eliminate many of the challenges commonly found with solution suites.

CIPs provide visibility of all identities (human and machine) regardless of environment.

The critical flaw is an authentication bug could let users compromise the security of the system.

Magnet Goblin, a newly identified cyber gang, is the latest threat group discovered abusing the Ivanti flaws.