Email security

Threat actors have launched a new phishing campaign leveraging Amazon Web Services in an effort to avert security scans, according to TechRepublic.

Scammers will delay being detected as a malicious site by restricting which people see the malicious page and which ones are instead directed to a clean “legit” page.

Increasingly prevalent remote desktop protocol threats, ransomware incidents, business email compromise attacks, and phishing campaigns have triggered an increase in cyber insurance claims and insurance costs for companies, reports The Record, a news site by cybersecurity firm Recorded Future.

Government, humanitarian, and think tank organizations around the world have been targeted in a years-long mass credential theft campaign by Chinese state-sponsored threat group RedAlpha, The Hacker News reports.

Cloud infrastructure provider DigitalOcean had "a very small number" of its customers' email addresses compromised following a phishing and social engineering campaign against Mailchimp aimed at exfiltrating cryptocurrency-related firms' data and information, reports TechCrunch.

Report by Proofpoint and the Cloud Security Alliance finds that vast majority of industry pros are concerned about supply chain risks.

Microsoft has disrupted suspected Russian state-sponsored advanced persistent threat group SEABORGIUM, which has been launching cyberespionage attacks against government officials, military officials, journalists, and think tanks across Europe and South Caucasus during the past five years, SecurityWeek reports.

Ukraine has been facing escalating cyberattacks from Russian state-sponsored hacking group Gamaredon, also known as Shuckworm or Armageddon, since Russia's invasion began six months ago, with the latest wave of attacks reported from July 15 to Aug. 8, according to BleepingComputer.