Research by IRONSCALES reveals that over 50,000 fake login pages targeted major brands across the world. PayPal, Microsoft, and Facebook topped the list.
German sportswear giant Adidas has confirmed that a third-party breach compromised customer data amid ongoing cybersecurity incidents rocking the company in other countries.
Finastra, a fintech service provider for 45 of the 50 largest banks in the world, has sent out data breach notifications to customers tied to postings on criminal underground outlet BreachForums that offered a total of 400 GB of zipped data.
Thycotic survey of global CISOs shows that board decisions about cybersecurity spending are decidedly reflexive, with the primary drivers being fear of regulatory penalties or the costs of a repeat breach.
Mysterious organization exposed tools and source code used by Iranian hackers, including personal information of some Iranian Ministry of Intelligence members responsible for state-sponsored cyber attacks.
Recently discovered TikTok's security flaws make it possible to spoof the source of SMS messages, alter people's feeds and accounts, and also access sensitive personal information via API calls.
Shadow code may pose a serious supply chain risk. Sampling 4,300 websites and applications ranked by traffic, researchers discovered that each website had an average of 12 third-party scripts and three fourth-party scripts.
Security researchers at SafeBreach discovered a method to collect millions of stolen user credentials through Google's malware analysis platform, VirusTotal without compromising any organizations.
Ukraine argues that Russian cyber attacks that target civilians via infrastructure impacts are coordinated with kinetic military attacks, and should be classified as war crimes.
A new study from ETH Zurich is causing some serious re-evaluation of the use of cloud-based password managers, as the researchers found an assortment of vulnerabilities in three of the most popular choices. This range of vulnerabilities make a similar range of known attacks possible, up to a dozen with the most readily compromised option.
