Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

SIM swapping, an ongoing threat

Although SIM swap scams or SIM swapping have been around for a number of years, it’s hard to pinpoint exactly when they first appeared. An ENISA report states that as early as April 2016, the British media reported an incident of bank account theft using this technique. In the United States, the first documented case of large-scale SIM swapping was the Joel Ortiz case in 2018.

CVE-2024-24919: Check Point's Quantum Gateway comes under Attack as Hackers exploit Zero-Day Vulnerability

Check Point Cybersecurity has issued hotfixes to address a zero-day vulnerability in its VPNs that has been exploited to gain remote access to firewalls and potentially infiltrate corporate networks. On 27.04.2024 (Monday), the company initially alerted customers to an increase in attacks targeting VPN devices, offering guidance on how administrators can safeguard their systems.

Hackers Phish Finance Organizations Using Trojanized Minesweeper Clone

In a concerning development, hackers are leveraging a Python clone of Microsoft’s iconic Minesweeper game to target financial organizations across Europe and the United States. This novel approach involves concealing malicious scripts within the game code, posing a significant challenge to enterprise risk management and endpoint security. As organizations grapple with these evolving threats, Foresiet remains steadfast in its commitment to providing cutting-edge cybersecurity solutions.

New Transparent Phishing Attacks Leverage Cloudflare Worker Serverless Computing

An increasing number of phishing campaigns from several threat groups are being tracked as they leverage legitimate Cloudflare services as part of account compromise attacks. Security analysts at Netskope take an expository look at the misuse of Cloudflare services for the purpose of enabling phishing attacks that leverage HTML Smuggling and Transparent Phishing tactics. We’ve seen HTML Smuggling attacks for several years, including its continued use this year.

Security Testing in Software Development: Assessing Vulnerabilities and Weaknesses

The critical role of security testing within software development cannot be overstated. From protecting personal information to ensuring that critical infrastructure remains unbreachable, security testing serves as the sentry against a multitude of cyber threats.

Protecto Unveils Enhanced Capabilities to Enable HIPAA-Compliant Data for Generative AI Applications in Snowflake

San Francisco, CA - Protecto, a leading innovator in data privacy and security solutions, is proud to announce the release of new capabilities designed to identify and cleanse Protected Health Information (PHI) data from structured and unstructured datasets, facilitating the creation of safe and compliant data for Generative AI (GenAI) applications. This advancement underscores Protecto's commitment to data security and compliance while empowering organizations to harness the full potential of GenAI.

Understanding and Mitigating Snowflake Data Risks Amid Increased Cyber Threat Activity

In today's digital landscape, data security is more crucial than ever. Recently, Snowflake, a leading cloud data platform, has observed a significant uptick in cyber threat activity targeting some of its customers' accounts. This development has prompted an in-depth investigation to understand and mitigate these risks.

911 S5 Botnet Operation Disruption Highlights the Need for MDR and Email Security

A major botnet operation that controlled an estimated 19 million IP addresses and was responsible for $99 million in illegal gains was shut down this week, and an international law enforcement operation arrested its primary operator. Botnet operations may not be as top of mind as ransomware, but these attacks are still responsible for millions in losses and pose a massive threat to businesses and consumers.

How to Create a GDPR-Compliant Password Policy?

If your company has ever worked with businesses in European Union countries, you probably had to follow the EU’s General Data Protection Regulation (GDPR). This rule, which started on May 25, 2018, gives customers more control over their data and makes data collection and use more transparent. A big part of the GDPR is protecting people’s privacy and data from unauthorized access. To do this, companies need a strong password policy.