Fake Android Apps Steal Cryptocurrency Credentials With 2FA Bypass Technique
Security researchers discovered two malicious Android apps that leveraged a clever 2FA bypass technique to steal Turkish users' cryptocurrency credentials.
Observations of ITG07 Cyber Operations
After nine months of tracking the cyber operations of threat group ITG07, IBM X-Force identified new Chafer-associated malware targeting companies within the travel and transportation industry.
Windows 10 Zero-Day Lets Threat Actors Bypass Patch and Escalate Role to Admin Level
Threat actors could use a recently discovered Windows 10 zero-day flaw to take over a computer and bypass local privilege escalation.
Why Privileged Access Management Must Be Part of Your Overall IAM Strategy
When you implement a privileged access management solution as a standalone project, you will often face the same challenges that you had before you implemented it.
Hundreds of Thousands of Users Targeted Daily With Would-Be WannaCry Imitators
Two years since the WannaCry attacks wreaked havoc around the world, researchers say hundreds of thousands of people are being targeted with the EternalBlue exploit on which it was based.
Zero Trust: Why Your Most Privileged Users Could Be Your Biggest Security Weakness
Organizations that do not apply the zero trust model to protecting privileged users open themselves up to attacks by threat actors looking to access sensitive systems and networks.
Dark Web TLS/SSL Certificates Highlight Need for Shift to Zero Trust Security
Some of the latest website security threats originate from thriving dark web marketplaces for TLS/SSL certificates, which often come packaged with other cybercrime services.
Here’s What You Need to Know to Secure Your IoT Projects
Securing IoT projects requires a thorough understanding of your technology infrastructure, its services and components, and how they relate to each other.
Stranger Danger: X-Force Red Finds 19 Vulnerabilities in Visitor Management Systems
Two X-Force Red interns discovered 19 previously undisclosed vulnerabilities across five popular visitor management systems that could enable attackers to establish a foothold on corporate networks.
Make Smarter Decisions With Intelligent Access Certification
Intelligent access certification helps security teams improve visibility into access, prioritize compliance tasks with risk-based insights and make better decisions with actionable intelligence.