Threats
Stay informed on the latest cybersecurity threats and news to better protect your data, networks, applications, and devices. Our coverage includes emerging vulnerabilities, evolving attack techniques, and the latest security breaches to help you understand and mitigate risks.
-
Microsoft Unsure How Chinese Hackers Stole MSA Key to Breach U.S. Agencies
Microsoft has hardened security following a Chinese hack of U.S. government agency email accounts, but some details remain a mystery. Even as the threat has passed, Microsoft officials are still analyzing how a Chinese threat group was able to access U.S. government accounts using a stolen inactive Microsoft account (MSA) consumer signing key. Chinese hacker…
-
Malicious Microsoft Drivers Could Number in the Thousands: Cisco Talos
After Microsoft revealed that some signed Windows drivers are malicious, security researchers discussed how big the problem is.
-
Black Hat AI Tools Fuel Rise in Business Email Compromise (BEC) Attacks
ChatGPT-like black hat tools capable of spoofing and malware attacks are appearing in cybercrime forums. Here’s how to defend your organization.
-
Microsoft Patch Tuesday Addresses 130 Flaws – Including Unpatched RomCom Exploit
Microsoft’s latest vulnerabilities include more than 100 malicious drivers and an unusual announcement of an unpatched Office and Windows flaw.
-
Half of EDR Tools, Organizations Vulnerable to Clop Ransomware: Researchers
Alarming statistics revealed in Cymulate’s assessments as organizations continue to be at risk from MOVEit vulnerability.
-
Mockingjay Attack Evades EDR Tools with Code Injection Technique
Security researchers have identified a new attack method that bypasses endpoint security tools. Here’s how to defend against the Mockingjay attack.
-
Windows PGM Accounts for Half of Patch Tuesday’s Critical Flaws
Microsoft’s Patch Tuesday for June 2023 addresses 78 vulnerabilities, a significant increase from last month’s total of 37. While six of the flaws are critical, Microsoft says none are currently being exploited in the wild. The six critical vulnerabilities are as follows: Dustin Childs, head of threat awareness at Trend Micro’s Zero Day Initiative, noted…
-
How to Improve Email Security for Enterprises & Businesses
Learn various techniques, tools, and services to secure email against cybersecurity attacks such as phishing and ransomware.
-
How DMARC Can Protect Against Phishing & Ransomware
Learn how DMARC protects users from ransomware and other threats delivered through email.
-
Email Spoofing: What it Is & How to Prevent It
Learn what email spoofing is, how it works, and key email security techniques and tools to block it.
