Category: Green tech

Researchers have uncovered an email-based credentials phishing attack targeting users of MetaMask, a cryptocurrency wallet used to interact with the Ethereum blockchain. The campaign is aimed at Microsoft 365 (formerly…

False positives and staff shortages inspire a massive migration of managed detection and response services (MDR), research shows.

Microsoft 365 and Outlook customers in the United States are at the crossroads of a successful credential theft campaign that uses voicemail-themed emails as phishing lures. The flow of malicious…

Russia’s notorious advanced persistent threat group APT28 is the latest in a growing number of attackers trying to exploit the “Follina” vulnerability in the Microsoft Support Diagnostic Tool (MSDT) in…

Although observed Magecart shimmer attacks have been less frequently reported in recent months, analysts have discovered new infrastructure that they were able to track to malicious domains behind an ongoing…

Realizing the cloud’s enormous potential enables organizations to innovate and undergo digital transformations. The last two years have shown the importance of ensuring healthy cybersecurity, especially as many companies have…

The first article in this two-part series explored ways to improve multifactor authentication (MFA) and boost adoption. This story takes a look at how organizations can apply more advanced passwordless…

As security conferences return to local locations, the cybersecurity community is buzzing with concerns about multi-channel phishing attacks, with mobile phishing being the biggest concern, as hackers turn to mobile…

Fast-growing employee identities, third-party partners and machine nodes are causing companies to crawl to secure credentials, software secrets and cloud identities, according to researchers. In a survey among IT and…

GitHub recently made security news by announcing plans to implement standard multifactor authentication (MFA) across its warehouses. The company deserves credit for recognizing its gravity in the software ecosystem and…

Authorities in the United States, Germany, the Netherlands and the United Kingdom said last week that they were dismantling “RSOCKSBotnet, a collection of millions of hacked devices that were sold…

Cloud adoption may be on the way, but many companies are still struggling with how to identify and manage their security risks with these services. A new study conducted by…

In the wake of destructive attacks, here are some of the best techniques and policies that a company can implement to protect its data.

The cybercriminals behind the RIG Exploit Kit earlier this year replaced the credential thief Trojan Raccoon Stealer after its main developer was killed in the Russian invasion of Ukraine. According…

Zero-trust initiatives may be on the security roadmap for most businesses today, but remote access architecture today is still highly dependent on virtual private network (VPN) technology. Recently published data…