Blog
Myanmar Rebels Take Control of ‘Pig Butchering’ Scam City Amid Chinese Pressure on Junta
The rebel groups' focus on tackling the scam industry is likely an attempt to gain favor with China, as many of its citizens have been targeted by these scams run from Mynamar.
Getting off the Attack Surface Hamster Wheel: Identity Can Help
IT professionals have developed a sophisticated understanding of the enterprise attack surface – what it is, how to quantify it and how to manage it. The process is simple: begin by thoroughly assessing the attack surface, encompassing the entire IT environment....
If You Prepare, a Data Security Incident Will Not Cause an Existential Crisis
Effective data security incident response requires building trust and clear role definition within the company and with external partners. Practicing decision-making with limited information is key to maintaining calm during cybersecurity crises.
Free Decryptor Released for Black Basta and Babuk’s Tortilla Ransomware Victims
A decryptor for the Tortilla variant of the Babuk ransomware has been released by Cisco Talos, allowing victims targeted by the malware to regain access to their files. The cybersecurity firm said the threat intelligence it shared with Dutch law enforcement...
Threat Actor Poses as Security Researcher Offering to Delete Data Stolen by Ransomware Attackers
Organizations hit by ransomware face uncertainty regarding the deletion of stolen data, leading to a new form of extortion where a fake security researcher offers to hack into the ransomware group's server infrastructure for a fee.
British Library: Finances are Healthy Amid Cyber Rebuild
The British Library has refuted reports that the recovery costs for its recent ransomware attack will reach nearly $9 million. The library said that the final costs are still unconfirmed and no additional funding bids have been made.
FTC Bans Outlogic (X-Mode) From Selling Sensitive Location Data
The U.S. Federal Trade Commission (FTC) on Tuesday prohibited data broker Outlogic, which was previously known as X-Mode Social, from sharing or selling any sensitive location data with third-parties. The ban is part of a settlement over allegations that the company...
Twilio Will Discontinue its Authy Desktop 2FA App in August, Goes Mobile Only
Users are recommended to switch to the mobile versions available on iOS and Google Play. The decision to sunset the desktop app is part of Twilio's effort to focus on areas with higher demand.
Kyocera Printers Open to Path Traversal Attacks
Researchers have discovered a path traversal vulnerability in Kyocera's Device Manager, a product used for managing large printer fleets. Exploiting the vulnerability requires the attacker to be logged onto the network.
Microsoft’s January 2024 Windows Update Patches 48 New Vulnerabilities
Microsoft has addressed a total of 48 security flaws spanning its software as part of its Patch Tuesday updates for January 2024. Of the 48 bugs, two are rated Critical and 46 are rated Important in severity. There is no evidence that any of the issues are publicly...
FREE GUIDE