Huntress has released a report finding that business email compromise (BEC) attacks have risen in the third quarter of 2023. “64% of identity-focused incidents in Q3 2023 involved malicious forwarding or other malicious inbox rules, a key indicator of business email compromise (BEC),” the researchers write. “Another 24% of identity-focused incidents involved logins from unusual or suspicious locations.

New data sheds light on just how active the Initial Access Broker (IAB) business is, and the growth uncovered doesn’t bode well for potential victim organizations. There’s plenty of fodder in tech news about the use of IABs and their role in cyber attacks. But rarely do we get to see a more comprehensive analysis of just how much growth in both the number of brokers and posts of credentials for sale.

Lurking in the open source software (OSS) that pervades applications around the world are open source security risks technology leaders must be aware of. Software is one of technology’s most vulnerable subsets with over 70% of applications containing security flaws. Here are the open source security risks IT leaders must be aware of to protect technology and help it scale safely.

Welltok operates an online wellness program various organizations use to encourage healthy lifestyles. They’ve been in our news frequently as the global MOVEit breach continues. Around nine million people have had their information exposed resulting from Welltok’s breach in the last few weeks; this week, Welltok’s breach returns with a double threat target—Premier Health and Graphic Packaging International.

In the fast-paced world of cybersecurity, change is not only constant but crucial. The New York Department of Financial Services (NY-DFS) demonstrated that principle on Nov. 1, 2023, when it completed a sweeping set of updates to its cybersecurity regulation. If you find yourself apprehensive about these changes, fret not — I’m here to guide you through the process and to provide a comprehensive plan for successfully meeting the new regulations.

Know Your Customer (KYC) data is documentation and contact information obtained while creating a bank account. According to the RBI’s recommendations, banks may request Re KYC from customers at set periods to keep the data up-to-date, which can be done by the customer by filling out a Re KYC form. For example, if any of your personal or contact information has changed, the Re KYC procedure will update it.

Phishing attacks continue to plague individuals and businesses worldwide, with clone phishing emerging as a particularly cunning and deceptive variant. But fear not, as this blog post will arm you with the knowledge to spot the imposters and secure your inbox. Are you ready to outsmart the scammers and protect your sensitive information?

In a world where virtual communication has become an integral part of our lives, the risk of falling victim to phishing and social engineering attacks is higher than ever. Are you confident in your ability to spot a phishing attempt or defend yourself against a skilled social engineer? This post will guide you through understanding phishing and social engineering virtual communication awareness and our learnings from advising customers and empowering you to stay vigilant in the digital landscape.

Why do companies spend millions of dollars on security measures only to have their systems compromised by hackers? The answer lies in the ever-evolving landscape of cyber threats and the need to improve security practices continuously. One of the most effective ways to stay ahead of these threats is through software penetration testing–a proactive approach to discovering and fixing vulnerabilities before they can be exploited.

“The evolving threat landscape” sounds like an overused clichè; however, marked shifts in threat actor tactics in the past year are evidence of widespread and brazen growth in confidence among threat actors. Evident in recent incidents, such as ALPHV, AKA Black Cat’s exploitation of legal avenues, and the emergence of “The Five Families” alliance, cybercriminals are stretching their levels of coordination and reach.