Email security

Bad actors were able to raise eyebrows in security circles after accessing some of the code Dropbox stores in GitHub by bypassing multi-factor authentication (MFA).

Major U.S. home goods retailer Bed, Bath & Beyond has been impacted by a data breach stemming from a phishing attack against an employee, reports TechCrunch.

In the wake of the discovery of an August breach that led to the data of 209 customers and 93 Authy end users being accessed by threat actors, cloud communications firm Twilio disclosed another breach that took place June 29, according to BleepingComputer.

Ukrainian military entities are being targeted by a spear-phishing campaign spreading the RomCom remote access trojan since Oct. 21, The Hacker News reports.

Extensive exploitation by threat actors for malware delivery, credential theft, and financial fraud schemes has prompted LinkedIn to unveil new security features aimed at combating phony profiles and malicious platform utilization, reports BleepingComputer.

Researchers reported on a social engineering scam targeting Instagram users with a copyright infringement notice that uses a WhatsApp redirector to steal credentials.

Email-based attacks continues to be a threat to organizations, but strong email security policies and an incident response plan can minimize the risk of damage and data loss. Here’s what to do before, during and after an email security incident.

As part of our Cybersecurity Awareness Month package, SC Media spoke to Stacy Hughes of Voya to find out how the financial services company manages the heightened risks tied to email.