Insurance companies are among the businesses more reliant than ever on technology and information systems for daily processes. Insurance technology, or insurtech, improves the efficiency of the insurance industry but can also increase attack surfaces, making the data insurers collect… Read More "How Cybersecurity Affects the Insurance Industry"
Security misconfigurations are a common and significant cybersecurity issue that can leave businesses vulnerable to data breaches. According to the latest data breach investigation report by IBM and the Ponemon Institute, the average cost of a breach has peaked at… Read More "Top 5 Security Misconfigurations Causing Data Breaches"
An infostealer strain known as ‘Acreed’ could become the new market leader in credential theft malware, according to ReliaQuest. The cybersecurity company’s threat research team investigated Russian Market, one of the most popular platforms for selling and buying stolen credentials… Read More "Acreed Emerges as Dominant Infostealer Threat Following Lumma Takedown"
The HECVAT (Higher Education Community Vendor Assessment Toolkit) was developed by the Higher Education Information Security Council (HEISC) as an initiative to help higher education institutions better protect their data, prevent the risk of data breaches, and measure the cyber… Read More "Most Common HECVAT Violations (And How to Avoid Them)"
Jun 02, 2025Ravie LakshmananSpyware / Vulnerability Qualcomm has shipped security updates to address three zero-day vulnerabilities that it said have been exploited in limited, targeted attacks in the wild. The flaws in question, which were responsibly disclosed to the company… Read More "Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU"
“Cybercriminals don’t just create malware; they perfect it for maximum destruction,” said the release, citing FBI Houston Special Agent in Charge Douglas Wiliams. “By leveraging counter antivirus services, malicious actors refine their weapons against the world’s toughest security systems to… Read More "FBI cracks down on crypting crew in a global counter-antivirus service disruption"
Researchers claim to have discovered the first case of threat actors using misconfigured HashiCorp Nomad deployments as an attack vector. The popular DevOps platform, which enables firms to deploy and manage containers and non-containerized applications, is being targeted alongside other… Read More "Cryptojacking Campaign Targets DevOps Servers Including Nomad"
The financial industry is no stranger to data breaches. Financial institutions have access to millions of personally identifiable information (PII) records, which they must secure to the highest standard. The value of this data is open knowledge – hackers will… Read More "6 Ways Finance Companies Can Prevent Data Breaches"
Jun 02, 2025Ravie LakshmananMobile Security / Vulnerability Three security vulnerabilities have been disclosed in preloaded Android applications on smartphones from Ulefone and Krüger&Matz that could enable any app installed on the device to perform a factory reset and encrypt an… Read More "Preinstalled Apps on Ulefone, Krüger&Matz Phones Let Any App Reset Device, Steal PIN"
Im Darknet ist ein Hinweis auf einen Datendiebstahl bei der Volkswagen Gruppe aufgetaucht. r.classen – shutterstock.com Die Volkswagen Gruppe mit Sitz in Wolfsburg zählt weltweit zu den größten Autokonzernen und ist damit ein attraktives Ziel für Cyberkriminelle. Die Ransomware-Bande Stormous… Read More "Ransomware-Bande erpresst Volkswagen | CSO Online"
