#phishing-and-social-engineering

[ follow ]
#multi-factor-authentication #credential-theft #session-hijacking #identity-lifecycle-security
Information security
fromSecuritymagazine
22 hours ago

Reframing MFA Bypass: Four Identity Gaps Attackers Exploit

MFA is often not bypassed; attackers exploit post-authentication or identity lifecycle gaps, so defenses should focus on session monitoring and risk evaluation.
Information security
fromSecurityWeek
2 months ago

Cloned AI Tool Sites Distribute Malware in 'InstallFix' Campaign

InstallFix campaign uses cloned webpages and malvertising to distribute information-stealing malware through fake installation pages for popular development tools.
Information security
fromTheregister
2 months ago

Suspected Nork intruders infecting US healthcare, education

North Korean-linked hackers deployed a new backdoor called Dohdoor to infect US education and healthcare institutions since December for financial gain.
fromSecuritymagazine
2 months ago

How AI Could Impact Tax Season Security This Year

Tax season is stressful for many, making it an ideal time for scammers to target unsuspecting and distracted taxpayers. Awareness is our first, and best, line of defense. Criminals often pose as the IRS, payroll companies, tax preparation services, or even trusted financial institutions in an effort to steal money and sensitive information.
Information security
Information security
fromTheregister
3 months ago

AI-powered cyberattack kits are 'just a matter of time'

Cybercriminals will soon chain AI tools into automated, end-to-end attack toolkits, forcing CISOs to prepare for large-scale, automated cyberattacks.
[ Load more ]