Microsoft is warning organizations of an uptick in Adversary-in-the-Middle (AiTM) phishing kits that are capable of bypassing multi-factor authentication (MFA) through reverse-proxy functionality, rendering the security tool that many organizations now deploy useless. In a new blog, the Microsoft Threat Intelligence Team dives into a threat actor it calls DEV-1101, a group that develops, supports […]
ChatGPT and generative AI is dominating the news cycle, with companies like Microsoft, Slack, Snapchat, Grammarly and many others leveraging the emerging technology to help users be more efficient, accurate and creative. In fact, ChatGPT was estimated to have reached 100 million monthly active users in January, making it the fastest-growing consumer tool in history. […]
Phishing, social engineering, and ransomware remain favorite attack methods of cybercriminals, but threat actors are beginning to shift to newer techniques, such as phone-oriented attack delivery and adversary-in-the-middle phishing proxies designed to bypass multifactor authentication, according to cybersecurity firm Proofpoint. The Sunnyvale, Calif.-based company’s’ State of the Phish report finds that email-based phishing attacks remain […]
Large enterprises with at least 10,000 employees are the most susceptible to phishing schemes that promise a gift despite having access to more cybersecurity resources than smaller businesses, according to a new report on phishing link click rates from Terranova Security, a subsidiary of Fortra (previously HelpSystems). The report is based on the 2022 Gone […]
Phishing, MFA fatigue attacks are on the rise, and the cost of a data breach is now expected to reach $5 million, according to a year-end cyberthreat report from cybersecurity firm Acronis. The Switzerland-based firm’s report from its Cyber Protection Operation Center provides an in-depth analysis of the cyberthreat landscape including ransomware, phishing, malicious websites, […]
U.S. agencies are warning organizations in the food and agriculture sector about recently observed incidents of business email compromise designed to steal shipments of food products and ingredients with hefty price tags. Instead of being used to directly steal money, these new campaigns are designed to spoof emails and domains to impersonate employees of legitimate […]
With Twitter constantly in the news due to large-scale shifts in the social media company’s strategy after the takeover of Elon Musk, cybersecurity professionals are warning of new phishing scams and security risks as the new story continues to play out. Billionaire and CEO of Tesla and SpaceX Elon Musk finalized his $44 billion acquisition […]
Dropbox Inc., the San Francisco-based file syncing, sharing, online backup and cloud storage provider confirmed it was the target of a phishing campaign that accessed some of the code that the company store’s in GitHub. According to the company, no user’s content, passwords, or payment information was accessed. The company’s core apps and infrastructure were […]
Microsoft has announced new phishing-resistant solutions designed to help organizations protect against credential-based attacks in Azure, Office 365 and remote desktop environments, and hardware security key maker Yubico says the measures make it easier to secure accounts and assets using the YubiKey. Microsoft announced authentication strength, a new Conditional Access control that allows admins to […]
Yubico, the Santa Clara, Calif.-based provider of hardware authentication security keys revealed results of its inaugural State of Global Enterprise Authentication Survey 2022 at a security thought-leadership industry summit. The survey, conducted for Yubico by Censuswide, polled 16,000+ employees across a variety of enterprises in eight countries and asked about their perceptions and perceived challenges of […]
FREE Downloadable resources from TechDecisions provide timely insight into the issues that IT, A/V, and Security end-users, managers, and decision makers are facing in commercial, corporate, education, institutional, and other vertical markets
View all Guides
Get your latest project featured on TechDecisions Project of the Week. Submit your work once and it will be eligible for all upcoming weeks.
Enter Today!