Business Email Compromise Losses Up 2,370 Percent Since 2015
The FBI says Business Email Compromise scams are growing at astronomical rates, and businesses have lost $5.3 billion since 2013; $346 million in the U.S. alone in the second half of 2016.
Michael Mimoso
Stealthy RAT Targeting North Korea Since 2014
Cisco has uncovered a remote administration tool called Konni that it says has been used in attacks against government agencies and public organizations linked to North Korea.
1 Million Gmail Users Impacted by Google Docs Phishing Attack
Researchers said good social engineering and users’ trust in the convenience afforded by the OAUTH mechanism guaranteed Wednesday’s Google Docs phishing attacks would spread quickly.
Google has removed offending accounts involved in a widespread phishing attack today impersonating Google Docs.
NIST’s latest password guidelines focus less on length and complexity of secrets and more on other measures such as 2FA, throttling, and blacklists.
USB drives shipped with some IBM’s Storwize storage products are infected with malware, and the tech giant advises customers destroy the devices.
A new crawler from Shodan and Recorded Future called Malware Hunter seeks out command and control servers managing endpoints infected with remote access Trojans and other malware.
Fuze addressed two issues that publicly exposed recordings of private business meetings made over the collaboration platform.
Dan Geer’s Source Boston keynote included a declaration that cybersecurity and humanity’s future are forever conjoined.
Yahoo has patched an account takeover vulnerability on its Flickr image-hosting service that earned an independent security researcher a $7,000 bounty.
