Hot Topics

Security Analytics

Analytics and Intelligence

Screenshot of bribery SMS spam

SIM Swappers Try Bribing T-Mobile and Verizon Staff $300

| | 2fa, 2FA bypass, 2FA Flaws, 2FA policies, 2FA/MFA, bypass 2FA, Industry Insider, Insider, Insider attack, Insider Attacks, insider breach, Insider Fraud, insider risk, malicious social engineering, MFA, MFA hacks, , MFA Methods, Multi-Factor Authentication, Multi-Factor Authentication (MFA), Multifactor Authentication, SB Blogwatch, SIM swap, sim swap fraud, SIM swap scams, SIM swapping, sms scam, SMS scams, SMS Spam, SMS Spamming, social engineeering, T-Mobile, t-mobile breach, t-mobile data breach, T-Mobile hack, two factor authentication, two-factor-authentication.2fa, verizon, verizon data breach, Verizon Wireless
Not OK: SMS 2FA — Widespread spam targets carrier employees, as scrotes try harder to evade two-factor authentication ...
Security Boulevard
cloud file service

AI Helps Security Teams, But Boosts Threats 

| | AI, application containers, career, cyberedge group, industrial control systems, mobile devices, Ransomware, research
Industrial control systems, application containers, and mobile devices are the top contenders on this year's list of the most difficult assets to secure ...
Security Boulevard
shadow AI, security, Cisco cybersecurity

Shadow AI: The Murky Threat to Enterprise Adoption of Generative AI

| | ai acceptable use policies, Data Privacy, GenAI, generative AI, security, Shadow AI
As AI continues its relentless march into enterprises, an insidious threat lurks in the shadows that could undermine its widespread adoption: Shadow AI ...
Security Boulevard
Russia Microsoft hack

CISA: Russian Hackers Stole Emails Between U.S. Agencies and Microsoft

| | CISA Emergency Directive, Microsoft, Midnight Blizzard, Russian hackers
The U.S. cybersecurity agency in an emergency directive is ordering affected agencies to address risks stemming from the attack ...
Security Boulevard
someone taking notes on a digital pad

Google Extends Generative AI Reach Deeper into Security

| | AI, attack paths, gcp, Gemini, google, Google Chronicle, Google Cloud Platform, LLMs
The Google Chronicle cybersecurity platform extensions are based on the Gemini LLM with the addition of cybersecurity data ...
Security Boulevard
Apple spyware

Apple Warns of ‘Mercenary Spyware Attacks’ on iPhone Users

| | Apple iPhone, NSO Group, Pegasus Spyware
Apple reportedly is alerting iPhone users in 92 countries that they may have been the targets of attacks using “mercenary spyware,” a term that the company is now using in such alerts ...
Security Boulevard
malware Raspberry Robin evasion

Raspberry Robin Malware Now Using Windows Script Files to Spread

| | Evasion Techniques, Malware, Raspberry Robin Worm, Windows
The threat actors behind Raspberry Robin are using highly sophisticated evasion techniques to stay under the radar of antivirus software ...
Security Boulevard
A person standing in a field, but with a TV for a head

Watch This? Patch This! LG Fixes Smart TV Vulns

| | BitDefender, bitdefender research, Consumer IoT, CVE-2023-6317, CVE-2023-6318, CVE-2023-6319, CVE-2023-6320, iot, LG, SB Blogwatch, Smart TV, Smart TV Security, Smart TV Vulnerability, Smart TVs, The ‘S’ in IoT stands for Security, TV, WebOS
4×CVE=RCE or Merely CE? Update your LG TV now, or let hackers root it. But is Bitdefender overhyping the issue? ...
Security Boulevard
Ominous looking guy looking at a phone

Insider Threats Surge Amid Growing Foreign Interference

| | APT, disgruntled employee, Dtex, insider threat, Intellectual Property, research
A surge in insider threats, amidst increasing foreign interference and sophisticated tactics, suggests the need for enhanced detection and mitigation strategies ...
Security Boulevard
managed detection and response, Apache ActiveMQ, vulnerability, Aqua Cham, threat, elGang APT Meltdown Spectre Threat Detection

Barracuda Report Provides Insight into Cybersecurity Threat Severity Levels

| | Incident Response, research, secops, threats, XDR
According to Barracuda Networks, 66,000 incidents needed to be escalated to security operations in 2023, and 15,000 required an immediate response ...
Security Boulevard
Load more