Phishing attacks targeting insecure communication channels have become increasingly prevalent, allowing cybercriminals to deceive victims into unwittingly divulging sensitive information. A particularly worrying evolution in this strategy is the emergence of “Mishing,” where attackers specifically exploit mobile devices through phishing…
Insights from Identity Theft Resource Center’s Lee on Lessons from 2024’s Major Cyber Breaches Anna Delaney (annamadeline) • January 29, 2025 James E. Lee, President, Identity Theft Resource Center In 2024, the cybersecurity landscape witnessed an unprecedented surge in data…
Trial of Alleged Neofascist Plotter Highlights Cybersecurity Concerns Brandon Russell, a notable figure in the recent American neofascist movement, is facing trial this week for allegedly planning an attack to disrupt Baltimore’s power grid, potentially inciting a race war. The…
Cyber threats are evolving rapidly, necessitating a more than just basic system patching approach to vulnerability management. As part of Cyber Rhino Threat Week—scheduled from December 9-13, 2024—that aimed to disseminate threat intelligence insights and best practices among customers, partners,…
Data Breach Notification, Data Security, Fraud Management & Cybercrime Experts Discuss the Complexity of UnitedHealth Group’s Recent Data Breach Assessment Marianne Kolbasuk McGee (HealthInfoSec) • January 28, 2025 UnitedHealth Group has announced the data breach has affected approximately 190 million…
Security Breach Exposes Vulnerabilities in Azure Key Vault Access Policies In a recent analysis, cybersecurity professionals uncovered significant vulnerabilities associated with Azure Key Vault’s access policies following the compromise of Entra ID (formerly Azure Active Directory) credentials. The detailed walkthrough…
IntelBroker, a hacker notorious for previous cyber incidents, has once again targeted Hewlett-Packard Enterprise (HPE), claiming to have infiltrated the company’s internal systems. This latest assertion involves the theft of around 500 MB of data from HPE’s repositories; while this…
Recent reports have brought to light serious cybersecurity vulnerabilities within Whitehall, the hub of British government administration located in central London. The National Audit Office (NAO) has highlighted that outdated IT infrastructure is leaving critical government departments susceptible to cyber…
Artificial Intelligence & Machine Learning, Next-Generation Technologies & Secure Development, Standards, Regulations & Compliance China’s DeepSeek AI Model Ignites Policy Discourse in the U.S. Amid Rising Industry Anxiety Chris Riotta (@chrisriotta) • January 28, 2025 DeepSeek, a Chinese AI startup,…
MGM Resorts International has reached a settlement agreement of $45 million to address multiple class action lawsuits stemming from a significant data breach in 2019 and a ransomware attack that occurred in 2023. This agreement was announced in a federal…
