-
Trulioo launches end-to-end identity platform
PRIVACY PRIVACY Identity verification firm Trulioo on Tuesday launched a new global identity platform for “person” and “business” verification. Trulioo so far sold multiple identity products, each operating in their own silos. Their products and services range from person and business verification, to no-code workflow building, low-code integrations, and anti-fraud measures. The new platform combines all…
-
Ransomware Payments Are Down
PRIVACY PRIVACY Chainalysis reports that worldwide ransomware payments were down in 2022. Ransomware attackers extorted at least $456.8 million from victims in 2022, down from $765.6 million the year before. As always, we have to caveat these findings by noting that the true totals are much higher, as there are cryptocurrency addresses controlled by ransomware…
-
Threat actors abuse Microsoft’s “verified publisher” status to exploit OAuth privileges
PRIVACY PRIVACY Researchers from cybersecurity firm Proofpoint claim to have discovered a new threat campaign involving malicious third-party OAuth apps that are used to infiltrate organizations’ cloud environments. According to a blog on the company’s website, threat actors satisfied Microsoft’s requirements for third-party OAuth apps by abusing the Microsoft “verified publisher” status, employing brand abuse,…
-
Stories from the SOC – RapperBot, Mirai Botnet – C2, CDIR Drop over SSH
PRIVACY PRIVACY Stories from the SOC is a blog series that describes recent real-world security incident investigations conducted and reported by the AT&T SOC analyst team for AT&T Managed Extended Detection and Response customers. Executive summary Since mid-June 2022, AT&T Managed Extended Detection and Response (MXDR) Security Operations Center (SOC) observed an enormous number of…
-
Killnet Attackers DDoS US and Dutch Hospitals
PRIVACY PRIVACY Retaliatory Russian attacks latest response to geopolitical moves Read More
-
Two US Doctors Convicted of $30m Medicare Fraud
PRIVACY PRIVACY Claims submitted for medical equipment not needed by patients Read More
-
New UN cybercrime convention has a long way to go in a tight timeframe
PRIVACY PRIVACY Cybercrime is a growing scourge that transcends borders, spreading across the boundaries of virtually all the world’s nearly 200 nation-states. From ransomware attacks to rampant cryptocurrency theft, criminal exploitation of borderless digital systems threatens global economic security and the political welfare of all countries. Now, the United Nations has a major initiative to…
-
QNAP: Patch Critical Remote Code Injection Bug
PRIVACY PRIVACY Vulnerability affects QTS and QuTS Hero firmware Read More
-
McAfee+ Family Plans: The Right Protection for the Right People—Your People
PRIVACY PRIVACY Knowing the whole family is protected online is a great feeling—that they’re safe from online scams, inappropriate content, and people stealing or collecting their personal data. But online protection looks a little different for everyone, because everyone goes online a little differently. With that, we’re introducing our McAfee+ Family plans, online protection that…
-
Expanding the Availability of CIS Hardened Images on Oracle
PRIVACY PRIVACY The Center for Internet Security (CIS) has worked with Oracle Cloud Marketplace to expand international availability of our CIS Hardened Images. Read More