The Evolving Threat to Software Supply Chains

Dec 13, 2024 | Podcast

https://www.darkreading.com/vulnerabilities-threats/lessons-largest-software-supply-chain-incidents The rapid pace of software development has led to an increased risk of software supply chain attacks. These attacks target vulnerabilities in the development,...

Hackers Find New Way to Bypass Browser Isolation with QR Codes

Dec 12, 2024 | Podcast

https://cloud.google.com/blog/topics/threat-intelligence/c2-browser-isolation-environments A new technique discovered by Mandiant demonstrates how cybercriminals are finding innovative ways to circumvent security measures. The technique involves using QR codes to...

Millions of WordPress Sites Vulnerable to Payment Fraud via WPForms Plugin

Dec 11, 2024 | Podcast

https://www.bleepingcomputer.com/news/security/wpforms-bug-allows-stripe-refunds-on-millions-of-wordpress-sites A critical security vulnerability has been discovered in WPForms, a popular form builder plugin used by over 6 million WordPress websites. The flaw,...

New Phishing Scam Uses Fake Video Conferencing Apps to Steal Data

Dec 10, 2024 | Podcast

https://www.cadosecurity.com/blog/meeten-malware-threat A new phishing campaign is targeting individuals working in the Web3 industry, using fake video conferencing apps to deliver malicious software. How the Scam Works: Fake Company Outreach: Threat actors create...

Cybercriminals Exploit Misconfigured AWS Environments to Steal Sensitive Data

Dec 9, 2024 | Podcast

https://www.vpnmentor.com/news/shiny-nemesis-report A recent cyberattack, believed to be linked to the ShinyHunters group, has exposed the vulnerabilities of misconfigured AWS environments. The attackers exploited exposed AWS credentials to gain unauthorized access to...

New Phishing-as-a-Service Platform, Rockstar 2FA, Leverages AiTM Attacks

Dec 7, 2024 | Podcast

https://www.bleepingcomputer.com/news/security/new-rockstar-2fa-phishing-service-targets-microsoft-365-accounts A new phishing-as-a-service (PhaaS) platform, known as Rockstar 2FA, has emerged, enabling cybercriminals to launch sophisticated phishing attacks targeting...

Cybercriminals Exploit Job Fears with New Phishing Scam

Dec 6, 2024 | Podcast

https://www.cloudflare.com/es-la/threat-intelligence/research/report/sacked-or-hacked-unmasking-employment-termination-scams A new phishing campaign is targeting individuals with a fear-inducing tactic: a fake legal notice claiming job termination. How the Scam Works:...

Over 8 Million Android Users Hit by Predatory Loan Apps Disguised as Legitimate Tools

Dec 5, 2024 | Podcast

https://thehackernews.com/2024/12/8-million-android-users-hit-by-spyloan.html Researchers at McAfee Labs have identified 15 malicious apps on the Google Play Store collectively downloaded over 8 million times. These apps, disguised as quick and easy loan providers,...

Cloudflare Suffers Major Log Loss Incident

Dec 4, 2024 | Podcast

https://www.bleepingcomputer.com/news/security/cloudflare-says-it-lost-55-percent-of-logs-pushed-to-customers-for-35-hours Cloudflare, a major internet infrastructure company, experienced a significant outage in its log collection service on November 14, 2024. This...

Help! There’s too many Vulnerabilities! A Practical Guide to Tackling Open-Source Security

Dec 3, 2024 | Articles, Podcast

When organizations embark on securing open-source software within their applications, they are often overwhelmed by the number of discovered vulnerabilities. The initial shock of the sheer volume can be paralyzing, especially for companies that are still building out...