Category Security

Nov 06, 2024Ravie LakshmananSaaS Security / Threat Detection An ongoing threat campaign dubbed VEILDrive has been observed taking advantage of legitimate services from Microsoft, including Teams, SharePoint, Quick Assist, and OneDrive, as part of its modus operandi. “Leveraging Microsoft SaaS…

A cyber-attack targeting telematics provider Microlise has disrupted tracking services for key clients like DHL and Serco while exposing some employee data. The company, which supplies asset-tracking software to large corporations, announced the breach on October 31. Following the disclosure,…

Despite most cyber threats, like ransomware, being both known and predictable, many orgnaizations are still underprepared. Experts speaking at the IRISSCON 2024 conference in Dublin noted that many incidents are indeed preventable. Analyzing the findings from Verizon’s Data Breach Investigations…

Nov 06, 2024Ravie LakshmananMalware / Online Security Cybersecurity researchers are warning that a command-and-control (C&C) framework called Winos is being distributed within gaming-related applications like installation tools, speed boosters, and optimization utilities. “Winos 4.0 is an advanced malicious framework that…

A new malicious software framework, “Winos4.0,” has been discovered embedded in game-related applications targeting Windows users. According to researchers at FortiGuard Labs, this malware framework is a sophisticated variant derived from Gh0strat. Winos4.0 can execute multiple actions remotely and provides…

Budget season is upon us, and everyone in your organization is vying for their slice of the pie. Every year, every department has a pet project that they present as absolutely essential to profitability, business continuity, and quite possibly the…

Google is rolling out mandatory multifactor authentication (MFA) on all Google Cloud accounts to protect against phishing and data theft. The new requirement will be implemented in phases throughout 2025, all Google Cloud users worldwide will be mandated to enable…

Nov 06, 2024Ravie LakshmananCyber Threat / Cybercrime INTERPOL on Tuesday said it took down more than 22,000 malicious servers linked to various cyber threats as part of a global operation. Dubbed Operation Synergia II, the coordinated effort ran from April…

Tens of thousands of malicious IP addresses have been taken down by investigators and dozens arrested in a global operation targeting phishing, ransomware and information stealer campaigns, according to Interpol. Operation Synergia II involved law enforcers from 95 Interpol member…

Nov 06, 2024Ravie LakshmananData Privacy / Tech Regulation Meta has been fined 21.62 billion won ($15.67 million) by South Korea’s data privacy watchdog for illegally collecting sensitive personal information from Facebook users, including data about their political views and sexual…