A group of cybersecurity researchers examined the source code of Extensis Portfolio version 3.6.3 and found a total of five vulnerabilities that required immediate attention.
In this revised type of sextortion scam, the crooks typically add some widely-known data from an earlier data breach into the email to leverage the familiarity with the related brand.
More than nine in ten (91%) UK organizations were successfully compromised by an email phishing attack last year, according to Proofpoint’s 2022 State of the Phish report.
According to a Mobile Mentor study, 36 percent of employees admit to finding ways to work around security policies, and 72 percent value their personal privacy over company security.
The Ukrainian Cyberpolice has arrested a group of phishing actors who managed to steal payment card data from at least 70,000 people after luring them to fake mobile service top-up sites.
An Amazon S3 bucket owned by the company was left accessible without authentication controls in place, exposing sensitive and personal data for potentially hundreds of thousands of customers.
The information publicly available on the attack suggests the company was the victim of a ransomware attack and was forced to shut down its network to avoid the threat from spreading.
The firm, which is the largest distributor of cookware in the US, revealed the incident in a notification letter to employees posted to the website of the California attorney general’s office.
The scramble comes after Biden administration officials announced that they believed Russian-backed bad actors had targeted Ukraine banks, as well as the Ukraine Ministry of Defense.
Identity management solutions provider Beyond Identity announced raising $100 million in an oversubscribed Series C funding round that brings the total raised by the company to $205 million.