Accessibility links

Not All WiFi Is Good WiFi

Education

Not All WiFi Is Good WiFi

WiFi has become a part of pretty much any device that has network access. From mobile phones and tablets to desktop computers and laptops. The time to plug in an Ethernet cable has long since passed. And while just a few years ago it was considered high risk to allow WiFi access in corporate offices, now it is just a standard part of doing business. Unfortunately, when dealing with technology that everyone is using, cybercriminals are generally also going to get involved. And when it comes to WiFi, there are plenty of opportunities for cybercriminals to attack. Fortunately, most of this risk can be easily eliminated through awareness and proper security controls. READ FULL STORY

Scams & Phishing

Warning Issued As Cyber Criminals Prey On Omicron Fears With More New Scams
January 18, 2022

Scammers are continuing to take advantage of fears surrounding the seemingly never-ending coronavirus pandemic by using the omicron COVID variant as a lure in recent phishing scams. This one isn’t just targeting higher education. The consumer group, Which? reported seeing one where rogue sites actually charge delivery fees to get a COVID home test to your door. Well, as we know, those home tests are few and far between and that is the first clue that it’s a scam. READ FULL STORY

State's Website Flaw Costs Millions And Leaks 100,000+ SSNs

Identity Theft

State's Website Flaw Costs Millions And Leaks 100,000+ SSNs

It all started when the “Show Me” state showed way too much on their Department of Elementary and Secondary Education (DESE) website. The Social Security numbers of over 100,000 DESE employees were exposed in the website’s public-facing source code. A reporter tried to help, but an unfortunate event followed. Data breaches are happening at break-neck speeds these days, tragically with many of them avoidable to begin with. IBM’s “Cost of a Data Breach 2021” finds the average data breach spiked to $4.24 million, up from last year’s $3.86 million. READ FULL STORY
Fake Browser Updates Source Of Ransomware And Banking Malware

Scams & Phishing

Fake Browser Updates Source Of Ransomware And Banking Malware

An all-out alarm reported by Surcuri finds bogus alerts circulating about the need to download the latest browser update. Although it’s always recommended to keep software up to date, this report finds hackers are exploiting that call to action in a big way. Using fake updates isn’t exactly a new hacking exploit, but hackers are getting better at it over time and this latest attack is a solid example of that. In this latest discovery, hackers use email links or script code to compromise a webpage. READ FULL STORY
Microsoft Warns Phishers Sneak In New Lures To Snag You

Scams & Phishing

Microsoft Warns Phishers Sneak In New Lures To Snag You

Detecting phishing is getting harder and harder as the days go by. Merely looking out for misspelled words, bad grammar, or unknown senders just isn’t enough anymore. A popular way the phishers lure unsuspecting victims is using well-known business names and/or products and Microsoft Office 365 has been a popular one of late. As if they weren’t hard enough to find anyway, Microsoft has recently warned of yet another one that is craftier at bypassing anti-phishing filters and succeeding at capturing user login credentials. READ FULL STORY

Scams & Phishing

BlackByte Ransomware Decryptor Key Returns Data, Foils Ransom Payments
January 14, 2022

The news is ransomware continues to be a growing threat against industry, critical infrastructure, and individuals alike. Holding data hostage for a ransom can cripple even the biggest of victims and bring their goods and services to a grinding halt until the ransom demand is paid. Free decryptor keys for some ransomware types, now including for BlackByte, are available at no cost to victims. This is fortunate because the cost to get that data back, can rather pricey. READ FULL STORY

Mobile Banking Apps Continue To Be A Hi Value Target For Cybercriminals

Mobile Security

Mobile Banking Apps Continue To Be A Hi Value Target For Cybercriminals

It’s that time of year when organizations that track cybersecurity stats and other information start to release their results. And to no one’s surprise, mobile banking has been under attack in 2021. The Nokia 2021 Threat Intelligence Report found the cybercriminals’ desire to steal your banking credentials has ramped up throughout the year by logging your keystrokes, taking screenshots, trying to snag those two-factor authentication (2FA) codes, and using overlays. There’s no lack of trying to get your confidential information…and your money. READ FULL STORY
Does Your State Rate? Top Five Worst States For Cybercrime In The U.S.

Your Security

Does Your State Rate? Top Five Worst States For Cybercrime In The U.S.

Last year was a wild ride for many reasons, least of all the continuing coronavirus pandemic. Hacking levels hit historic highs when scammers and hackers set their sights on new criminal opportunities created by the pandemic. Marketing company GetResponse took a closer look at hacking activity by individual state in their report “State of Online Hacking in America.” Their findings are based on the FBI’s “Internet Crime Report 2020,” which studied cybercrime in America during 2020. READ FULL STORY
TrickBot Malware Improves Again, Finds New Distribution Channels

Scams & Phishing

TrickBot Malware Improves Again, Finds New Distribution Channels

Since TrickBot opened its doors five years ago as a credential-stealing banking trojan, it’s made quite a name for itself. But what that name means depends on who’s being asked. Cybercriminals appreciate TrickBot for its stealth in effective email phishing campaigns, the ability to improve its nefarious abilities and for the profit it rakes in from attacks. Cybersecurity pros and everyday users, on the other hand, dislike TrickBot for those very same reasons, perhaps most of all for being the gateway for ransomware attacks. And now, it’s back again for added improvements and new distribution channels for its gang of thieves. READ FULL STORY
From Fitness To QR Scanners -- Malicious Apps Get 300K+ Downloads On Google Play

Mobile Security

From Fitness To QR Scanners -- Malicious Apps Get 300K+ Downloads On Google Play

Just when we hoped it was safe to download apps from Google Play Store again, there’s news of malicious apps hiding there in plain sight. Despite additional app security restrictions by Play Store earlier this year, over 300,000 app fans unknowingly gave these malicious scoundrels a new home on their Android smartphones. Four malware families successfully escaped Google Play security, spreading their malware droppers in everything from fitness apps to QR scanners. READ FULL STORY
Random WordPress Plugin Attacks Steal Payment Info-1.6 Million And Counting

Your Security

Random WordPress Plugin Attacks Steal Payment Info-1.6 Million And Counting

There is so much cybersecurity news that sometimes, important information gets bypassed. In this case, WordPress is in the news again. Websites created using WordPress, now over 455 million sites, are in danger of random plugin attacks by cybercriminals. While this is nothing new, recent attacks target the various 58,000+ plugins offered when building a website, including those facilitating online commerce payments. Over 1.6 million WordPress victims have already had their payment information stolen thanks to these plugin exploits. READ FULL STORY
Laundering Cryptocurrency: Hackers Claim Old School Tactics Still Work Best

Your Security

Laundering Cryptocurrency: Hackers Claim Old School Tactics Still Work Best

If what a hacker does with a large pile of stolen cryptocurrency is the question, then laundering it, much like the way it’s done with illegal drug money and traditional financial heists, is the answer. Large-scale financial cybercrime, it seems, follows the roadmap that other more traditional financial crimes have used for decades to hide the haul. A recent report by SWIFT, a company that safeguards the global financial ecosystem, sheds light on the problem of large-scale money-laundering that stolen cryptocurrency creates. READ FULL STORY
CloudLinux Imunify360 Security Flaw Requires Patch Now

Corporate Security

CloudLinux Imunify360 Security Flaw Requires Patch Now

The Linux Imunify360 Server Security Suite provides its customers with real-time website and web server protections and was recently in need of a security patch itself. A flaw in the CloudLinux’s Imunify360, part of the Security Suite, exposed a code vulnerability putting users in the path of potential arbitrary code execution and web server takeovers. This flaw was enough to earn a security severity rating of “high” and fortunately, the security patch created by Linux is available specifically for those using CloudLinux’s Imunify360 versions 5.8 and 5.9. READ FULL STORY
Big $$ And Personal Privacy – Organizations And The Cost Of Email Phishing

Scams & Phishing

Big $$ And Personal Privacy – Organizations And The Cost Of Email Phishing

Employees and even children learning with remote set-ups can inadvertently lose their privacy to hackers, adding to the personal cost of these attacks. The FBI’s 2020 IC3 (Internet Crime Complaint Center) report found phishing attacks are some of the most prevalent cybercrimes, with organizations in the US losing $54 million to this attack vector that year. The report also finds that BEC (business email compromise) is the costliest type of email phishing, with the IC3 finding close to $1.8 billion in losses to U.S. businesses. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.