March 25, 2019

Personal Health Details of More Than 350,000 Oregonians Potentially Exposed in HIPAA Breach

2 min read - Unauthorized individuals compromised and potentially exposed more than 350,000 Oregonians' protected health information (PHI) in a HIPAA breach.

March 20, 2019

Brute-Force Attack Wave Uses Legacy Protocols, Credential Dumps to Compromise Cloud Accounts

2 min read - A massive brute-force attack campaign used both legacy protocols and credential dumps to compromise cloud user accounts, according to security researchers.

March 13, 2019

Threat Actor Targets Japanese Users With New Ursnif Variant

2 min read - Security researchers discovered an attack campaign targeting Japanese users with a new variant of Ursnif banking malware.

March 5, 2019

Instagram Hack Fools Social Media Influencers With Phony ‘Verified’ Badges

2 min read - Security researchers observed a Turkish-speaking group of cybercriminals using an Instagram hack to extort money, nude photos and other information from social media influencers.

Fraud Protection January 30, 2019

How Fraud Specialist Danna Pelleg Fights Bad Guys With the Best Team in the Business

5 min read - Danna Pelleg's childhood curiosity, early technology education and compulsion to fight the bad guys led her to a career as a fraud specialist and security operations team lead at IBM Trusteer.

January 15, 2019

New Reverse Proxy Tool Can Bypass Two-Factor Authentication and Automate Phishing Attacks

2 min read - A new reverse proxy tool called Modlishka can easily automate phishing attacks and bypass two-factor authentication (2FA) — and it's available for download on GitHub.

January 9, 2019

Phishing Kit Uses Custom Web Font to Impersonate Major US Bank

< 1 min read - A new phishing kit uses a custom web font to implement a substitution cipher in its campaign to target customers of a major U.S. bank.

January 7, 2019

Phone-Based Phishing Scam Reveals the Growing Sophistication of Attacks Against Apple Users

2 min read - A new phone-based phishing scam reveals how fraudsters are devising more sophisticated schemes to prey on Apple device users.

December 20, 2018

Threat Actors Utilize Spear Phishing Emails Impersonating US Department of State Employees

2 min read - Microsoft Windows Defender Research discovered an attack campaign that utilized spear phishing emails impersonating U.S. Department of State employees to gain remote access to victims' machines.

December 13, 2018

CARROTBAT Malware Family Supports at Least 12 Unique Decoy Documents

2 min read - A malware family known as CARROTBAT is currently using at least 12 unique decoy documents to spread itself among unsuspecting users.