Phishing

The two email attacks employed a broad range of techniques to get past traditional email security filters and pass the “eye tests” of unsuspecting end users.

The threat actors are “quite clever” in using Google Alerts as an attack vector to prompt users to "update" Adobe Flash Player.

Better integration between email and web security systems could serve as a defense.

Future plans for the methodology include the incorporation of operational data gathered from multiple organizations.

Public Interest Registry (PIR), the non-profit best known for overseeing the .org top-level domain, launched a centralized resource to help stomp out domain name system (DNS) abuse.

At least tens of thousands of sensitive medical files were posted to a blog on the dark web that the hackers used to extort the two hospital chains.