Email security

Almost all email attacks have increased in prevalence last year, compared with 2021, with phishing attacks rising by 70% in 2022, compared with 63% in 2021, reports TechRepublic.

Cloud-focused credential harvesting malware tool targets 19 different cloud services.

There’s still a lot of work ahead in deploying DMARC, but configured well and coupled with employee training, DMARC can help mitigate phishing attacks.

Rather than compromising a corporate account hackers are simply signing up for QuickBooks and PayPal and sending phony invoices to targets.

In a March 28 filing, a D.C. Circuit Court judge refused to join three data breach lawsuits against CareFirst into a class action.

Russian state-sponsored advanced persistent threat operations have been leveraging an already patched critical zero-day in Microsoft Outlook, tracked as CVE-2023-23397, as early as last April, SecurityWeek reports.

The action is related to a 2021 ransomware attack on legal firm Heidell, Pittoni, Murphy & Bach (HPMB) that exploited months-old Microsoft Exchange vulnerabilities compromised the private data of nearly 115,000 hospital patients, including names, dates of birth, social security numbers, and health information.