Hackers Claim Major Data Breach at Smart WiFi Provider Plume
Plume, a California-based smart Wi-Fi service provider, reportedly suffered a data breach. Hackers claim to have stolen more than 20GB of Plume’s database involving over 15m lines of customer and employee data, which could include names, email addresses, and device details. Plume is investigating the matter. The hackers warned they would disclose more data unless […]
Aligning cybersecurity & business objectives leads to security success
A recent study found that aligning cybersecurity organizations with business goals leads to better talent retention and successful security programs. This highlights the importance of integrating cybersecurity strategies with overall business objectives.
Top 6 Enterprise Cybersecurity Challenges for 2024 | Marcum LLP
The top six cybersecurity threats for 2024 include social engineering attacks, malware and ransomware attacks, business email compromise scams, cloud security concerns, mobile device risks, and threats to sensitive financial and tax information. To counter these risks, businesses must continuously adapt their security strategies, educate employees, and partner with cybersecurity experts. Regularly reviewing security protocols, […]
The holiday season sees a rise in credit card skimming
Holiday shopping increases the risk of credit card skimming, and organizations are also vulnerable. A recent report shows a rise in credit card skimming.
How to protect your organization from IoT malware
The prevalence of Internet-of-Things (IoT) devices makes them a prime target for hackers, due to their often weak built-in security measures. Key vulnerabilities include limited security capabilities, hardcoded passwords, lack of encryption, and poor update mechanisms. Common attacks include botnets, ransomware, and destructionware, which could take control of the device, steal sensitive data, or disrupt […]
U.S. Takes Down IPStorm Botnet, Russian-Moldovan Mastermind Pleads Guilty
The US government has shut down the IPStorm botnet network, created by Russian and Moldovan national Sergei Makinin. The malware infected Windows, Linux, Mac, and Android devices around the globe, transforming them into proxies for a profit-making scheme. Makinin, who faces up to 30 years in prison, is said to have made at least $550,000 […]
VMware discloses critical, unpatched Cloud Director bug
VMware has disclosed a critical vulnerability (CVE-2023-34060) in its cloud service delivery platform, for which no patch is yet available. The flaw affects certain versions of the platform that have been upgraded to version 10.5, allowing potential bypass of login restrictions. VMware has provided a workaround script until the patch is released.
Q3 2023 sees a rise in botnet activity
Nuspire’s threat report shows a significant surge in botnet activity in Q3 2023, with a nearly 93% increase over Q2.
Hackers Abuse Google Forms to Bypass Anti-spam Filters
Spammers are exploiting Google Forms quizzes to bypass anti-spam filters and distribute scam emails, according to researchers at cybersecurity firm Talos. They use the “Release Scores” feature to obtain recipients’ email addresses. The emails appear to come from Google’s servers, making them more likely to reach the recipient’s inbox. Talos highlighted a recent cryptocurrency scam […]
Is the Fear of Cyberwar Worse Than Cyberwar Itself?
The global insurance market has a cyberwar problem as the industry fails to understand the associated risks. It has avoided cyberwar altogether, excluding it from potential insurance claims. As a consequence, insurers require their cyber teams to hold extra capital due to the fear that a major cyberwar could devastate their balance sheets. A better […]
