Email security

Ukraine has been facing a continuous onslaught of attacks against its state services from Russian hacking group Gamaredon, also known as Armageddon, with the country's Computer Emergency Response Team noting the group's targeting of an information infrastructure facility and thousands of government computers, according to The Record, a news site by cybersecurity firm Recorded Future.

An attack against multiple organizations using the company’s cloud email services, including U.S. government agencies, was “invisible” to many of the victims because they hadn’t paid extra to access security logs. One senator likened the extra costs to “selling a car and then charging extra for seatbelts and airbags."

Businesses need to take a layered approach that includes leveraging MFA, strong vulnerability management, and AI-based email protection tools.

Cybercriminals are cashing in on the generative AI hype with a dedicated version of the technology catering to crooks

Microsoft said the APT group used forged authentication tokens to gain access to about 25 organizations, including in the U.S. and Western Europe.

BleepingComputer reports that organizations supporting Ukraine amid its ongoing war with Russia and other guests in this week's NATO Summit, which will tackle Ukraine's membership in the organization, have been targeted by the RomCom threat operation.

The QBot ransomware family comprised nearly 88% of malicious payloads tracked by Fortra's PhishingLabs in the first quarter of 2023.