A new sophisticated group of threats attacks organizations without implementing DMARC and extracting as much money from victims as possible, based on compromise in business emails.
https://threatpost.com/a-new-age-of-sophisticated-business-email-compromise-is-coming/157332/
Microsoft warns that remote work extends the problem of using applications that are used for collaboration. It enables attackers to intensify application-based attacks using the OAuth 2.0 protocol.
https://threatpost.com/microsoft-warns-oauth-attacks-cloud-app/157331/
The report prepared after collecting advertisements from dark internet markets from the period of 2.5 years reveals how confidential banking data and social media data are currently sold on the Dark Web.
https://www.hackread.com/dark-web-15-billion-credentials-100000-data-breaches/
Beware of Netgear, Linksys, D-Link, and similar devices; it turns out that they contain dangerous security holes that even updates do not fix.
https://threatpost.com/report-most-popular-home-routers-have-critical-flaws/157346/
The threat of corporate networks attack by Conti Ransomware is coming. It has new features through which it performs faster and more targeted attacks.
Google will update its headquarters to ban spyware and surveillance advertising globally.
The problem is that with such programs, we have no control over where the victims’ data goes. It can be assumed with a high probability that they will become not only the property of the “attacker” but also the application developers who use those interested in this type of tool to infect victims themselves. Imagine – it’s an ideal form of infection.
Railway systems have recently become more digital; this is the most open way for sophisticated bad actors and the possibility of malicious cyber attacks.
https://threatpost.com/podcast-securing-railway-systems-against-hacks/157149/
The problem with identity theft is enormous, but unfortunately, a user in the UK may feel threatened because his online activity is not very well protected from criminals.
https://www.itproportal.com/news/brits-need-to-up-their-identity-fraud-protection/
The Google Play Store distributes the Cerberus banking Trojan, where malicious alpine currency conversion has been discovered for Android. Even worse, the app has 10,000 downloads. Malicious software steals bank credentials bypassing security measures and has access to text messages.
https://threatpost.com/cerberus-banking-trojan-unleashed-google-play/157218/
Modern technology is changing rapidly. All boundaries between organizations are blurred. Our technological dynamic immediately attracts organized crime groups that, through their anonymity on the network, regularly attack organizations and clients, especially those most vulnerable to attacks. Approaches to asset protection used for years and their improvement have unfortunately ceased to be effective. Losses in organizations heavily dependent on technology are significant, which means that they will not have a chance to learn from their own mistakes and cease to exist as a result of a cyber-attack.
Cyber resistance foundations:
1) Be aware that cybercriminals will attack any organization.
2) It is important to react quickly to the attack so that the organization can face the attack.
3) It is important to continually educate and exercise to be ready to face the imminent attack.
4) Drawing information and knowledge from the experience of other organizations.
5) Using artificial intelligence, we will gain a better position in the fight against cyber threats.