Name That Toon: Bridge the Gap

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

darkreading – ​Read More

Cyberattack Knocks Out Pensacola City Government Phone Lines

City spokesperson Jason Wheeler told Recorded Future News that officials are experiencing phone issues across city departments that are causing delays in receiving service through the 311 Citizen Support system.

Cyware News – Latest Cyber News – ​Read More

‘PhantomBlu’ Cyberattackers Backdoor Microsoft Office Users via OLE

The cyber campaign uses social engineering and sophisticated evasion tactics, including a novel malware-delivery method, to compromise hundreds of Microsoft Office users.

darkreading – ​Read More

Mintlify Says Customer GitHub Tokens Exposed in Data Breach

In a blog post on Monday, Mintlify blamed its March 1 incident on a vulnerability in its own systems but said 91 of its customers had their GitHub tokens compromised as a result.

Cyware News – Latest Cyber News – ​Read More

Nations Direct Mortgage Alerts 83,000 to Personal Data Breach From December 2023 Cyberattack

In filings with regulators in Maine and California, the company said it discovered a cybersecurity incident on December 30 that prompted an investigation. Law enforcement and other governmental agencies were notified of the cyberattack.

Cyware News – Latest Cyber News – ​Read More

Chinese APT Hacks 48 Government Organizations

Earth Krahang, likely a penetration team of Chinese government contractor I-Soon, has compromised 48 government entities worldwide.

The post Chinese APT Hacks 48 Government Organizations appeared first on SecurityWeek.

SecurityWeek – ​Read More

Nations Direct Mortgage Data Breach Impacts 83,000 Individuals

Nations Direct informs 83,000 individuals that their personal information was compromised in a data breach.

The post Nations Direct Mortgage Data Breach Impacts 83,000 Individuals appeared first on SecurityWeek.

SecurityWeek – ​Read More

‘Conversation Overflow’ Cyberattacks Bypass AI Security to Target Execs

Credential-stealing emails are getting past artificial intelligence’s “known good” email security controls by cloaking malicious payloads within seemingly benign emails. The tactic poses a significant threat to enterprise networks.

darkreading – ​Read More

Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks

Threat actors are leveraging digital document publishing (DDP) sites hosted on platforms like FlipSnack, Issuu, Marq, Publuu, RelayTo, and Simplebooklet for carrying out phishing, credential harvesting, and session token theft, once again underscoring how threat actors are repurposing legitimate services for malicious ends.
“Hosting phishing lures on DDP sites increases the likelihood

The Hacker News – ​Read More

Update: 133k+ Fortinet Appliances Still Vulnerable to CVE-2024-21762

The wide geographic distribution of vulnerable SSL VPNs highlights the extensive attack surface for the critical vulnerability, with Asia having the highest number of exposed appliances.

Cyware News – Latest Cyber News – ​Read More