Identity & Access August 11, 2020

Questions to Ask When Conducting Single Sign-On Enrollment

5 min read - Instead of asking employees to input passwords every day, single sign-on (SSO) offers a simplified but secure authentication process. SSO authentication gives a user the option of choosing a single set of credentials to access multiple accounts and services. So,…

August 5, 2020

Users Beware: Spotting a Microsoft Renewal Scam

3 min read - A novel scam began when a user received an email impersonating a notification from Microsoft, Abnormal Security observed on Friday, July 17. The scam arrived after Microsoft had recently taken several steps to deter scammers. Security professionals should be aware of…

Advanced Threats July 16, 2020

New Research Exposes Iranian Threat Group Operations

7 min read - IBM X-Force Incident Response Intelligence Services (IRIS) has uncovered rare details on the operations of the suspected Iranian threat group ITG18, which overlaps with Charming Kitten and Phosphorus. In the past few weeks, ITG18 has been associated with targeting of …

Application Security July 2, 2020

Why Zero-Click Cyberthreats Should Be on Your Radar

4 min read - For years, the statistics have told us that human error is the greatest contributor to cyberattacks. We’ve stressed the importance of training, training and more training to prevent the almost inevitable from happening. We’ve been convinced that the key to…

June 3, 2020

Excel 4.0 Macro Functionality Incorporated Into Ursnif Delivery Campaigns

2 min read - Security researchers discovered a new Ursnif malware delivery campaign leveraging Excel 4.0 macro functionality.

Banking & Finance May 12, 2020

Should Organizations Be Operating Outside of Their Risk Appetite?

6 min read - Organizations should know where to draw what may be a new line in their risk appetite, so they can weigh the amount of risk they are willing to take in the pursuit of their business objectives.

Security Services May 8, 2020

Does Your Security Awareness and Training Program Account for Changing Work Environments?

4 min read - A shift to remote working demands security awareness and training programs quickly pinpoint an active people-centric strategy to address the needs of changing environments.

April 27, 2020

‘Florentine Banker’ Group Steals Approximately £600K in Successful BEC Scam

2 min read - A threat group known as "The Florentine Banker" stole approximately £600K in a successful business email compromise (BEC) scam.

April 27, 2020

Weekly Security News Roundup: Vulnerability Lets Attackers Compromise Apple Devices via Email

3 min read - Researchers revealed their discovery of a vulnerability that enables bad actors to infect iPads and iPhones by sending a specially crafted email. Learn what else happened last week in security news.

Government April 27, 2020

SBA Spoofed in COVID-19 Spam to Deliver Remcos RAT

5 min read - As the ongoing COVID-19 pandemic impacts small businesses in the U.S., cybercriminals are trusting that people will be more likely to open unsolicited emails purporting to come from relevant entities.