Security News

Serious Security: Phishing in the cloud – the freemium way
2019-08-20 15:34

Here's an interesting phishing trick. It's a way for crooks to get lots of customised web links without doing any programming.

Week in review: New Nmap, lateral phishing tactics, Kubernetes security matures
2019-08-18 16:00

Here’s an overview of some of last week’s most interesting news, articles and podcasts: Critical Bluetooth flaw opens millions of devices to eavesdropping attacks A newly disclosed vulnerability...

Phishing Scheme Uses Google Drive to Avoid Security: Report
2019-08-16 17:48

Emails Disguised as Messages From CEOA newly identified phishing campaign used Google Drive to help bypass some email security features as attackers attempted to target a company in the energy...

Researchers reveal the latest lateral phishing tactics
2019-08-16 05:15

Emails coming from legitimate, compromised accounts are difficult to spot, both for existing email protection systems and the recipients themselves. Lateral phishing tactics Researchers from...

Anomali discovers phishing campaign targeting Chinese government agencies
2019-08-12 15:14

Anomali, a leader in intelligence-driven cybersecurity solutions, published at Black Hat USA 2019 its latest research report: Suspected BITTER APT Continues Targeting Government of China and...

iNSYNQ Ransom Attack Began With Phishing Email
2019-08-09 18:18

A ransomware outbreak that hit QuickBooks cloud hosting firm iNSYNQ in mid-July appears to have started with an email phishing attack that snared an employee working in sales for the company,...

The Threat in the Cloud: Phishing Abuses Amazon AWS S3 Buckets
2019-08-08 14:00

An ongoing campaign is hosting its phishing landing pages on enterprise-class public cloud storage services -- a nascent trend meant to throw defenders off.

Russian phishing campaign using AWS to host landing pages designed to avoid detection
2019-08-08 14:00

Assets used as part of phishing campaigns are being hosted on AWS, with heavy XOR obfuscation to limit detection, according to a Proofpoint report.

US utilities targeted with spear-phishing emails impersonating engineering licensing board
2019-08-02 09:58

If you worked in a US company in the utilities sector and received an email notification telling you that you’ve failed your “Fundamentals of Engineering” NCEES exam, would you download the...

Assessing the efficiency of phishing filters employed by email service providers
2019-07-31 05:00

Technology companies could be doing much more to protect individuals and organizations from the threats posed by phishing, according to research by the University of Plymouth. However, users also...