-
Thousands of Algolia API Keys Could Expose Users’ Data
PRIVACY PRIVACY The majority were from shopping, education, lifestyle, business and medical firms Read More
-
Luna Moth Phishing Extortion Campaign Targets Businesses in Multiple Sectors
PRIVACY PRIVACY It leverages extortion without encryption and has cost victims hundreds of thousands of dollars Read More
-
Luna Moth callback phishing campaign leverages extortion without malware
PRIVACY PRIVACY Palo Alto’s Unit 42 has investigated several incidents linked to the Luna Moth group callback phishing extortion campaign targeting businesses in multiple sectors, including legal and retail. The analysis discovered that the threat actors behind the campaign leverage extortion without malware-based encryption, have significantly invested in call centers and infrastructure unique to attack…
-
Breaking the Zeppelin Ransomware Encryption Scheme
PRIVACY PRIVACY Brian Krebs writes about how the Zeppelin ransomware encryption scheme was broken: The researchers said their break came when they understood that while Zeppelin used three different types of encryption keys to encrypt files, they could undo the whole scheme by factoring or computing just one of them: An ephemeral RSA-512 public key…
-
Private Equity Exposed by Cyber-Hygiene Shortcomings
PRIVACY PRIVACY Fifth of portfolio companies feature “zero tolerance findings” Read More
-
Stories from the SOC – Phishing for credentials
PRIVACY PRIVACY Stories from the SOC is a blog series that describes recent real-world security incident investigations conducted and reported by the AT&T SOC analyst team for AT&T Managed Extended Detection and Response customers. Executive summary Humans are considered the weakest link in cybersecurity. No matter how much a company invests in firewalls, antivirus, and other…
-
New AXLocker Ransomware Steals Victims’ Discord Tokens
PRIVACY PRIVACY Researchers also discover two additional new variants Read More
-
How remote working impacts security incident reporting
PRIVACY PRIVACY The ability for employees to work remotely comes with many benefits, from better work-life balance to lower expenses to higher productivity. But a widely dispersed workforce can pose some great challenges for security teams, not least of which is how remote work affects security incident reporting. With companies growing more accustomed to implementing…
-
Ten Charged in $11m Healthcare BEC Plots
PRIVACY PRIVACY Several of the men diverted funds intended for hospitals Read More
-
Friday Squid Blogging: Squid Brains
PRIVACY PRIVACY Researchers have new evidence of how squid brains develop: Researchers from the FAS Center for Systems Biology describe how they used a new live-imaging technique to watch neurons being created in the embryo in almost real-time. They were then able to track those cells through the development of the nervous system in the…