Sam Fay
News
Cybersecurity Weekly: Gift card scams, IKEA breached, cyber knowledge gaps
New twists on gift card scams flourish on Black Friday. IKEA was hit by a cyber attack that uses stolen internal reply-chain emails. Cybersecurity knowledge gaps at any level of the organization pose security risks. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: Palo Alto bug, Robinhood breach, Costco finds card skimmer
A zero-day bug was found in Palo Alto firewalls using GlobalProtect portal VPN. A Robinhood data breach exposes 7 million users' information. Costco discloses a data breach after finding a credit card skimmer. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Should companies subject employees to ransomware-specific security training? Tis the season for the wayward package phish. The U.S. puts a $10 million bounty on DarkSide ransomware hackers. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: Babuk decryptor, QR codes in phishing attacks, cloud supply chain threat
Avast released a free decryptor for Babuk ransomware. QR codes help attackers sneak emails past security controls. The SolarWinds attacker targets cloud service providers in a new supply chain threat. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: REvil shuts down, PowerShell flaw, iOS 15 hacked
REvil ransomware shuts down again after Tor sites were hijacked. Microsoft asks admins to patch PowerShell to fix WDAC bypass. Experts hacked a fully patched iOS 15 running on an iPhone 13. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: REvil decryptor, AT&T loses millions, OMIGOD flaw
A free decryptor for past REvil ransomware victims was released. AT&T lost $200 million to an illegal phone unlocking scheme. Mirai Botnet started exploiting the OMIGOD flaw. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: Cobalt Strike beacon, REvil is back, IT training pitfalls
Linux Cobalt Strike beacon is being used in ongoing attacks. REvil ransomware is back in full attack mode and leaking data. 7 signs your IT training sucks. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: Fake NFT scam, Atlassian flaw, security analyst interview questions
An NFT collector was tricked into buying fake Banksy. An Atlassian Confluence flaw is being actively exploited to install cryptominers. 8 must-ask security analyst interview questions. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Widespread phishing attacks are using open redirects. LockFile ransomware bypasses protection using intermittent file encryption. Ragnarok ransomware gang shuts shop and releases decryption key for free. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: Geico breach, Morse code phishing attack, CMMC's role in cybersecurity
A Geico breach exposed customers' driver's license numbers. Hackers are using Morse code in phishing attacks to evade detection. How CMMC can help counter current cyberattacks. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: LemonDuck malware, REvil decryptor, XCSSET MacOS malware
Microsoft warns of LemonDuck malware. Kaseya obtains a universal decryptor for REvil ransomware. The MacOS malware XCSSET now targets Google Chrome. All this, and more, in this week’s edition of Cybersecurity Weekly.
News
Cybersecurity Weekly: Safari zero-day, Windows printer vulnerability, iPhone hack
A Safari zero-day was used in a malicious LinkedIn campaign. A researcher finds another unpatched Windows printer spooler vulnerability. A low-risk iOS Wi-Fi naming bug can hack iPhones remotely. All this, and more, in this week’s edition of Cybersecurity Weekly.