It's not a surprise that there has been a significant increase in healthcare cyber attacks, but the numbers revealed by a new Bitglass study are nevertheless eye-popping: an increase of over 55% in 2020.
A New York City SIM farm recently seized by the Secret Service was being put to use in a variety of criminal activities and had the capability of disrupting local communications networks, according to officials. In total the scheme was thought to have cost millions of dollars to set up.
New security-by-design and security-by-default guidelines from a collection of federal agencies provide the first guidance of its type issued to urge manufacturers to ship devices with adequate security for the modern threat landscape.
New proposed Washington Privacy Act will have provisions on facial recognition technology that require explicit opt-in consent for companies to collect and use biometric data.
Two zero-day vulnerabilities in Ivanti products that were disclosed in January (and patched weeks later) have turned out to be the source of a breach of MITRE, the US government-funded cybersecurity research center. China's nation-state hackers are suspected to be behind the attack given similarities in exploiting these same vulnerabilities in other incidents, but this is not confirmed as of yet.
Latest variant of Fakebank Android malware adds even more functional threats to banking clients – in the form of ‘vishing’ (voice phishing). It can now intercept outgoing and incoming calls which is then redirected to scammers which allows them to pose as legitimate employees of the bank.
Security researchers have discovered an EvilProxy phishing campaign targeting 120,000 Microsoft 365 users with a focus on business executives with access to financial assets or sensitive information.
Research by IRONSCALES reveals that over 50,000 fake login pages targeted major brands across the world. PayPal, Microsoft, and Facebook topped the list.
The Biden administration has taken the first step toward implementing a government-wide zero trust strategy with a memorandum addressed to all federal agencies, outlining the basic goals to be reached by the end of fiscal year 2024.
Publishing platform Substack has disclosed a data breach that leaked nearly 700,000 user records after an unauthorized third-party exploited a security flaw.
