Spear Phishing Report Card: Perfect Scores in School Security Pen Testing
According to a new U.K.-based study, 100 percent of test spear phishing attacks gained access to sensitive university data in less than two hours.
Google 2FA Approach Turns Android Smartphones Into Security Keys
Smartphones running Android 7.0 and higher can now serve as two-factor authentication (2FA) tools as part of a Google 2FA strategy to boost security across its online services.
April Scams May Ruin Plans: Threat Actors Ramp Up for Tax Scam Season
Tax scam season has arrived. Here's what enterprises need to know to keep their corporate assets safe from tax-time scammers.
Dark Web TLS/SSL Certificates Highlight Need for Shift to Zero Trust Security
Some of the latest website security threats originate from thriving dark web marketplaces for TLS/SSL certificates, which often come packaged with other cybercrime services.
Phishing Campaign Makes Use of SingleFile Browser Extension Tool to Obfuscate Malicious Activity
In a recent phishing campaign, fraudsters used a legitimate browser extension tool called SingleFile to obfuscate their attacks and remain undetected.
Web Servers Used to Host 10 Malware Families Distributed via Phishing Emails
Digital attackers used more than a dozen web servers to host 10 malware families and distributed those threats using phishing emails.
Shade Ransomware Campaign Compromises at Least 500 WordPress and Joomla Websites
Security researchers discovered a hidden HTTP directory that is allowing threat actors to install Shade ransomware on WordPress and Joomla websites.
New XLoader Variant Masquerades as Android Security Apps, iOS Configuration Profile
Security researchers observed a new variant of XLoader masquerading as Android security apps and an iOS configuration profile to target mobile users.
TrickBot Creators Collaborate With BokBot to Conduct Man-in-the-Middle Attacks
Security researchers warn that the cybercriminals behind the TrickBot and BokBot banking Trojans are now collaborating to perform man-in-the-middle (MitM) attacks.
Brute-Force Attack Wave Uses Legacy Protocols, Credential Dumps to Compromise Cloud Accounts
A massive brute-force attack campaign used both legacy protocols and credential dumps to compromise cloud user accounts, according to security researchers.