Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

tripwire

Report Reveals BEC Cryptocurrency Scams Rose by 344%

May 13, 2025 By Katrina Thompson In Tripwire
APWG's Q4 2024 Phishing Activity Trends Report, published March 19th, revealed that more than eight in ten Business Email Compromise (BEC) attacks last quarter were sent by attackers favoring Google's free webmail service. By comparison, only 10% used Microsoft's free email web app, Outlook.com.
Read Post
centripetal

Security Bulletin: Magecart Skimming Campaign

May 8, 2025 By Anna Balabushko In Centripetal
Magecart is a long-running digital skimming threat attributed to multiple financially motivated cybercriminal groups specializing in the theft of payment card data from e-commerce websites. First identified in 2015, Magecart attacks have continuously evolved, leveraging compromised third-party services, supply chain vulnerabilities, and increasingly sophisticated obfuscation tactics to inject malicious JavaScript skimmers into checkout pages.
Read Post
knowbe4

Warning: Phishing Campaign Impersonates the US Social Security Administration

May 7, 2025 By Cindy Zhou In KnowBe4
Researchers at Malwarebytes warn that phishing emails are impersonating the US Social Security Administration (SSA) to trick users into installing the ScreenConnect remote access tool. ScreenConnect is a legitimate tool used for remote IT management, but it can be abused by hackers to take control of victims’ computers.
Read Post
The Evolving Threat Landscape: How Authentication Management Is Key to Protecting Your Business from Fraud

The Evolving Threat Landscape: How Authentication Management Is Key to Protecting Your Business from Fraud

May 6, 2025 By SecuritySenses In SecuritySenses
As cybercrime continues to evolve, businesses face an increasing number of sophisticated fraud attempts. From identity theft to financial fraud, the digital age has brought about new challenges in maintaining security. One of the most effective ways to mitigate the risks associated with these threats is through strong authentication management. By employing robust authentication measures, companies can significantly reduce the likelihood of fraud, ensuring their operations remain secure and trustworthy.
Read Post
splunk

Imposters at the Gate: Spotting Remote Employment Fraud Before It Crosses the Wire

May 5, 2025 By Alex Orleans In Splunk
Have you ever sat in an interview and felt that something wasn't quite right? Your intuition may have been closer to the truth than you realized. A new kind of adversary has emerged, and they aren’t trying to break through your firewall; instead, they are logging in through your VPN using their freshly issued business credentials.
Read Post
knowbe4

Xfinity Scam Might Explain Similar Scams

May 1, 2025 By Roger Grimes In KnowBe4
Recently, I covered a T-Mobile scam where a friend of mine narrowly avoided losing money. In that scam, the attackers called up pretending to be from T-Mobile offering him a cannot-pass-up 30% discount on future T-Mobile bills. While he was initially suspicious of the unexpected callers, they gained his confidence by repeating the amounts of his last two T-Mobile bills, billing address, and knew that his wife was also on the account.
Read Post

Roger Grimes talks AI Deepfake Threats with theCUBE at RSAC 2025

May 1, 2025 By KnowBe4 In KnowBe4
Roger Grimes, KnowBe4's Data-Driven Defense Evangelist, reveals how autonomous, and AI-powered deepfake malware is transforming the cybersecurity landscape in this eye-opening RSAC 2025 interview with @siliconangle. Discover why organizations must urgently prepare for sophisticated social engineering attacks that leverage AI technology to bypass traditional security measures. KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
View Video
knowbe4

A Sneaky T-Mobile Scam and Lessons That Were Learned

Apr 30, 2025 By Roger Grimes In KnowBe4
A friend of mine got a call on his phone and he regrettably picked it up. The number was 267-332-3644. The area code is from Bucks County, PA, where he used to live many years ago. But since his multiple anti-scam phone filter apps did not flag the number as a scam, and it was from a place he used to live, he picked it up.
Read Post
Security Threats to Payroll Data: How Can Your Firm Manage Them?

Security Threats to Payroll Data: How Can Your Firm Manage Them?

Apr 30, 2025 By SecuritySenses In SecuritySenses
In modern, connected workplaces, security is a perpetual concern. Some departments in your organization handle high-risk information, such as personal employee data and company finances. Any data breach can bring on a reputational crisis and endanger internal strategic approaches. In February 2025, HR Dive reported the impact of a data breach at an employee screening services provider. The breach affected an unnerving 3.3 million people, leaking people's names and financial account information. Social Security numbers and other ID numbers also got compromised.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.