Author: CyberMind

A financially motivated threat actor has been observed abusing free Notion accounts, malicious PDFs and device code phishing to harvest authentication tokens from targeted organizations. Sublime’s Threat Intelligence & Research team, which tracks the actor as Doubloon Dredger, identified the… Read More "Doubloon Dredger Abuses Notion to Harvest Authentication Tokens"

A fake Codex download campaign has used sponsored search results, legitimate Google Sites pages and ClickFix instructions to trick macOS users into executing malware. In a technical write-up published on August 24, Cato Networks researchers said they found the campaign… Read More "Fake Codex Download Uses Google Sites to Deliver macOS Malware"

The US government has warned organizations of the unique cybersecurity and compliance challenges presented by multi-cloud environments. The National Institute of Standards and Technology (NIST) highlighted how using multiple cloud service providers (CSPs) makes it more difficult for organizations to… Read More "NIST Warns of Unique Security Risks in Multi-Cloud Environments"

As organizations race to future-proof their systems against quantum-enabled attacks, questions remain around how to verify whether hardware is quantum-safe. A new industry benchmark aims to answer that question. The Trusted Computing Group (TCG) released new guidance on August 24… Read More "New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims"

Over 10,000 internet-facing SAP systems might be vulnerable to a maximum severity vulnerability in the SAP kernel, security vendor Onapsis has warned. The firm’s Onapsis Research Labs (ORL) discovered and responsibly disclosed to SAP the Memory Corruption vulnerability in SAP… Read More "SAP Patches Maximum Severity “Overpass” Flaw"

Compromised non-human identities (NHIs) including AI agents are nearly twice as likely to be a primary entry point into the enterprise than phishing, a new study from SpyCloud has claimed. The threat protection firm’s SpyCloud Identity Threat Report is based… Read More "NHIs Now the Number One Corporate Entry Point for Hackers"

A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject malicious JavaScript into their own browsers, in a scheme aimed at people willing to commit fraud. Cisco Talos said in research… Read More "ClickFix Moves into the Browser to Steal Cryptocurrency"

HTTP Strict Transport Security (HSTS) is a web security policy mechanism that enables web sites to declare themselves accessible only via secure connections. This helps protect websites and users from protocol downgrade and cookie hijacking attacks. Why Was HSTS Introduced?… Read More "What is HSTS (HTTP Strict Transport Security)?"

The Gigabud Android banking trojan has been equipped to clone banking apps into a separate Android work profile, giving fraudsters a way to break the link between a malware alert and the transaction that follows it. Group-IB said in research… Read More "Gigabud Uses Android App Cloning to Evade Fraud Detection"

Authenticity and non-repudiation are two core concepts in information security regarding the legitimacy and integrity of data transmission. Because we transmit data every day, it’s important to verify the sender’s origin (authentication) and ensure that during transmission, the data was… Read More "Authenticity vs. Non-Repudiation | UpGuard"