Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

Urgent Text from the CEO? Think Twice Before Responding

Imagine this: You’ve just started a new job at a new company when you get a text message that says it's from the CEO. They are requesting that you take care of a time-sensitive task. At first, you may think it’s a real request, but it’s more likely a pernicious form of SMS phishing known as executive impersonation, or CEO fraud. As we continue to rely on mobile devices for work, attackers are getting smarter about how they exploit our trust in these devices against us.

Exfiltration over Telegram Bots: Skidding Infostealer Logs

In recent years, Telegram has emerged as a popular messaging platform among cybercriminals, driven by its combination of simplicity, security, and efficiency. Telegram's encrypted messaging capabilities, real-time communication, and the ability to send large data files make it an ideal platform for cybercriminal activities, making it an attractive alternative to traditional underground forums.

Addressing counterparty risk and unlocking new opportunities with Fireblocks' Off Exchange

In recent years, the digital asset market has experienced both explosive growth and sobering setbacks. The collapse of FTX in November 2022 highlighted a significant vulnerability within the crypto ecosystem – the inherent counterparty risk that emerges when exchanges serve as both trading venues and custodians, roles traditionally held separately to protect market participants.

U.S. Department of Justice Indicts Hacktivist Group Anonymous Sudan for Prominent DDoS Attacks in 2023 and 2024

Collaboration is critical to take down today’s most advanced adversaries. CrowdStrike regularly works with law enforcement agencies and industry leaders to identify, track and stop cyber threats. We recently cooperated with the Department of Justice as part of a broader effort to disrupt two individuals heavily involved in operating Anonymous Sudan.

What Is the Digital Operational Resilience Act (DORA)?

The Digital Operational Resilience Act (DORA) is a regulation that strengthens digital security among financial institutions in the European Union (EU). Although DORA came into effect in 2023, it will be fully adopted by all EU financial entities and third-party service providers of Information Communication Technologies (ICT) beginning in January 2025 to improve their defenses against potential cyber threats.

Can Google Ads Be Scams?

Yes, it is possible for Google Ads to be scams. According to the 2023 Google Ads Safety Report, Google successfully blocked and removed over five billion fake ads and suspended almost 13 million advertiser accounts. Even though fake Google Ads are prohibited by Google’s policies, many phony ads go undetected if no one reports them, which could lead to you falling for their scams.

Finance and Insurance API Security: A Critical Imperative

API security is a critical concern for industries that are undergoing digital transformation. Financial services and insurance sectors are particularly vulnerable due to the increasing number of APIs they need to manage. As early adopters of digitalization, these sectors face unique challenges requiring a customized API security approach.

What is a virtual CISO (vCISO) and should you have one on your team?

Most people know what a chief information security officer (CISO) is and how they’re essential to improving an organization’s security posture. The problem is that many organizations have limited hiring resources and it makes little sense to appoint an in-house CISO without tangible ROI. ‍ A virtual CISO or vCISO becomes an excellent solution for organizations that need to enhance their security framework within resource constraints.