Email security

Despite only emerging in March 2021 in the BazarCall campaign that leveraged phishing emails purporting to be from various subscriptions in an effort to distribute the BazarLoader malware, callback phishing attacks have since become a formidable cybersecurity threat.

It’s not enough to tell your employees to create strong, unique passwords. You’ve got to actively manage and protect their login accounts, especially those belonging to privileged users. Many types of software can help you handle employee credentials to make your organization as safe and smooth-running as possible.

Turkey-based threat group Cobalt Terrapin has been deploying a more sophisticated business email compromise campaign involving both vendor and executive impersonation since July, ZDNET reports.

Numerous state-sponsored threat actors were able to compromise and exfiltrate data from a U.S.-based defense industrial base organization between January and November last year, BleepingComputer reports.

This week’s healthcare data breach roundup is led by a cyberattack on Family Medical Center Services in Texas that compromised a large trove of patient data, and includes multiple cyberattacks and email-related security incidents.

Threat actors could exploit the Application Mode feature in Chromium-based browsers Google Chorme, Microsoft Edge, and Brave Browser in a new phishing technique involving the creation of local login forms that impersonate desktop applications, reports BleepingComputer.

North Korean state-sponsored hacking group Lazarus has been engaging in a Bring Your Own Vulnerable Driver spear-phishing attack exploiting a Dell hardware driver since last autumn, BleepingComputer reports.