Hackers, dubbed “Scattered Spider”, are targeting insurance and financial enterprises with cloud service attacks to steal data and demand ransom. The hackers’ methods include searching services like GitHub for cloud access tokens accidentally left in source code by programmers. The stolen data is exfiltrated and a ransom demanded for its return. Admins can protect against such attacks by enabling multi-factor authentication (MFA) and ensuring staff can recognise phishing attempts.

SEO Manipulation Alert: Chinese Hackers Exploit IIS Vulnerabilities with BadIIS Malware!
A large-scale cyberattack identified in 2024, known as “BadIIS”, targets IIS servers worldwide, particularly in Asia. Cybercriminals install the malware to manipulate website content and