Email security

An attack against multiple organizations using the company’s cloud email services, including U.S. government agencies, was “invisible” to many of the victims because they hadn’t paid extra to access security logs. One senator likened the extra costs to “selling a car and then charging extra for seatbelts and airbags."

Businesses need to take a layered approach that includes leveraging MFA, strong vulnerability management, and AI-based email protection tools.

Cybercriminals are cashing in on the generative AI hype with a dedicated version of the technology catering to crooks

Microsoft said the APT group used forged authentication tokens to gain access to about 25 organizations, including in the U.S. and Western Europe.

BleepingComputer reports that organizations supporting Ukraine amid its ongoing war with Russia and other guests in this week's NATO Summit, which will tackle Ukraine's membership in the organization, have been targeted by the RomCom threat operation.

The QBot ransomware family comprised nearly 88% of malicious payloads tracked by Fortra's PhishingLabs in the first quarter of 2023.