Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Phishing for Gamers: Fake Offers Invite Gamers to Test New Gaming Titles

A phishing campaign is targeting users with phony offers to beta test new video games, according to researchers at Malwarebytes. The phishing messages are sent via Discord, email, or text message. The messages purport to come from a game developer, and include a link to download an archive supposedly containing the game’s installer.

Data Exfiltration: What It Is, Examples, and Prevention Tips

Data security is vital to your organization’s well-being. A single data breach costs $4.88 million on average, according to IMB’s Cost of a Data Breach Report 2024. Besides financial losses, data exfiltration may damage a brand’s reputation, cause operational disruptions, and result in legal actions. Therefore, giving maximum attention to your cybersecurity measures and constantly enhancing them is a must.

Using Structured Storytelling for Effective Defense with Microsoft Security Copilot

In my experience, computers are only as smart as the person in front of them. Same with AI. The results are dependent on the prompts given. Today, users typing prompts from their brains into Microsoft Security Copilot may find it hard to get value. Prompts with adequate specificity are difficult to create, let alone repeat.

Stored XSS Vulnerability Discovered in Joomla 5.1.4 - CVE-2024-40748

On September 19th, 2024, a critical vulnerability (CVE-2024-40748) was discovered in Joomla version 5.1.4, exposing their website to stored cross-site scripting (XSS) attacks. Stored cross-site scripting (second-order or persistent XSS) arises when an application receives data from an untrusted source and unsafely includes it within its later HTTP responses. This could lead to attackers injecting malicious scripts into the website, which would be executed whenever a user visits a specific page.

Seven Cyber Threats Facing the Retail Industry and How To Defend Against Them

Some common cyber threats facing the retail industry include ransomware attacks, social engineering, system intrusions and insider threats. The retail sector is often targeted by cybercriminals because of the valuable customer data it processes, including credit card information, Personally Identifiable Information (PII) and shopping patterns. This data is often collected and sold on the dark web for financial fraud or identity theft.

The Future of Cybersecurity: Insights and Predictions for 2025

2024 marked a transformative shift in cybersecurity with AI and data driven cyber security leading the change. As the threat landscape evolves, the stage is set for further advancements in continuous risk management, threat monitoring, resilience, and governance in 2025, shaping a more secure and dynamic digital landscape where cybersecurity is becoming a catalyst for business success and compliance.

Public Data at Risk: Key Breaches of Q4 2024

In 2024, the public sector faced a number of data breaches, highlighting the vulnerability of government agencies and public institutions in the face of evolving cyber threats. From leaked sensitive data to ransomware attacks targeting critical infrastructure, these incidents exposed significant gaps in cybersecurity measures. As cybercriminals grow more sophisticated, the stakes for protecting personal and national data have never been higher.

Opti9 and Backblaze Partner to Enable Expansion into Canadian Market

Opti9’s partnership with Backblaze has reached an important new milestone: the launch of the Canada East (CA East) data region. By leveraging Opti9’s expertise in Canadian data centers, Backblaze is now able to expand its footprint and meet the growing demand for compliant, high-performance cloud storage solutions in Canada.