Phishing

North Korean state-backed advanced persistent threat operation Kimsuky had an 8.9 GB data trove stolen and exposed by hackers 'Saber' and 'cyb0rg' in retaliation for the APT's wrongful attacks that were advanced by "political agendas" and "financial greed", reports BleepingComputer.

The Picus Security report indicates a significant escalation in password cracking incidents within enterprise environments, with a notable increase compared to previous years.

The group sent emails from purported job seekers with a malicious archive attached.

The malware brute forces WordPress sites to upload and spread the trojan.

All that phishing training you have to go through barely moves the needle in making your organization safer, two researchers said at the Black Hat security conference.

The attackers gained unauthorized access through voice phishing, convincing employees to authorize a malicious connected application in Salesforce.

The report reveals a nine percent decrease in the global average cost of a data breach, attributed to faster containment through AI-powered defenses.

Cisco had its website's user data pilfered following the compromise of its third-party customer relationship management system stemming from a vishing attack against one of its representatives, according to SecurityWeek.