Tag: pro
Microsoft Entra ID vulnerability allows full account takeover – and takes barely any effort
10% of the 150,000+ SaaS apps on offer could be affected by Entra ID vulnerability It was first disclosed in 2023, but many apps still remain affected App vendors need to issue patches or you risk account takeover Semperis has released new research uncovering a severe flaw in Microsoft‘s Entra…
Read More
CISOs are rethinking security in a fragmented cloud world
It was supposed to be the answer to IT’s flexibility dilemma. Hybrid cloud, with its blend of on-premises control and public cloud scalability, gave businesses the agility to respond to new demands without overhauling infrastructure. But what started as a strategic advantage has, for many CISOs, evolved into a patchwork…
Read More
British man behind ‘IntelBroker’ hacker group charged with stealing millions
A British man has been charged by US law enforcement Kai West is allegedly part of notorious hacking group ‘IntelBroker’ The group has claimed around 40 victims worldwide A British man has been charged by US law enforcement after allegedly hacking dozens of organizations around the world, in a campaign…
Read More
Democratized cybercrime: a new lower bar for hackers and higher stakes for security
Phishing has long been a staple of cybercrime, historically betrayed by clumsy spelling, suspicious URLs and poor formatting. Today, however, the rules have changed. What once required technical knowledge, time, and effort can now be executed with frightening ease by virtually anyone. Thanks to generative AI, automation, and easy access…
Read More
Most organisations are at risk thanks to immature supply chain security
Supply chain attacks are becoming more frequent and more dangerous Many security teams are worried about the risks 70% of firms have suffered one or more attacks in the past year A new survey from SecurityScorecard reveals that cybersecurity leaders are faced with serious supply chain and third party risks.…
Read More
Hackers are using fake Zoom apps to steal your data and your cryptowallet – here’s how to stay safe
Fake Zoom scripts launch malware hidden beneath thousands of lines of code and whitespace LaunchDaemons ensure the malware runs at boot with admin rights once installed Malicious components disguise themselves as legitimate tools like “icloud_helper” and “Wi-Fi Updater” A new cyber campaign using fake Zoom applications is targeting organizations across…
Read More