Ransomware gang Cl0p has exploited a vulnerability in file transfer software MOVEit to compromise companies around the world. Security researcher Kevin Beaumont estimates “there are over one hundred” organizations affected by the attack, with British Airways, the BBC and Boots already confirmed as victims. Cl0p posted a message to companies who use MOVEit on their …
Valéry Marchive, a cybersecurity journalist, has published chat logs of negotiations between ransomware gangs and their victims. The goal, he explained in a Twitter thread, is to provide a resource for ransomware victims and researchers, since “What happens during #ransomware negotiations is rarely widely shared.” Background to the chats The chats take place after companies …
2-factor authentication (2FA) keeps your online accounts safe by requiring more than just your password to log in. But there are a variety of different 2FA methods to choose from, so how do you know which one is right for you? Here I’ll give you the low-down on each method to help you decide. There …
Did you know anyone can now register a domain name that ends in .zip or .mov? That’s thanks to Google, who opened up registrations for these domain extensions earlier this month. This has riled up many in the security community, who warn that .zip and .mov domains can be used maliciously. The potential for scams …
Authy and Aegis are two popular authenticator apps, but how do you know which one is right for you? This post will help you decide by comparing them in the following areas: compatibility, privacy, backups, security incidents, customization and secret key export. Table of contents Compatibility Authy has apps for pretty much any device: Android, …
The Bl00dy Ransomware Gang is exploiting a vulnerability in print management software PaperCut to target schools, according to an advisory by CISA. While PaperCut fixed this vulnerability in March, not all organizations applied the patch immediately. CISA recommends these organizations consider themselves compromised and look for malicious activity. The Bl00dy Ransomware Gang The Bl00dy Ransomware …
Sophisticated phishing attacks that clone legitimate webpages and bypass two-factor authentication (2FA) are on the rise. Email security firm Cofense reported a 35% increase in phishing emails for these types of attacks compared to last year. How the phishing attacks work The links in these phishing emails direct victims to fraudulent sites that act as …
Twitter is failing to stop an account run by a ransomware gang from using its platform to distribute stolen information. Safe Not Scammed is not naming the gang or providing its account handle to avoid giving the criminals additional publicity. The ransomware account has posted links to stolen files it claims are from Socrates Academy …
At the end of April, Notion, a popular free productivity app, released an update with an important new feature: two-factor authentication (2FA). Setting it up is a fantastic way to give your notes and projects extra protection. Here’s how it works and how to enable it. How does Notion’s 2FA work? Once you’ve turned on …
YouTube videos claiming to help viewers download premium software for free are instead tricking them into downloading malware. An internet researcher going by the handle idclickthat raised the alarm about two such malware campaigns on Twitter earlier this week. Lumma info stealer campaign The first campaign targeted popular software, including Adobe Animate, AutoCAD by Autodesk …
T-Mobile needs to reset its “days since a data breach” counter back to 0, as Bleeping Computer reports the beleaguered wireless carrier has suffered its second data breach of 2023. What happened? According to information submitted to the Office of the Maine Attorney General, T-Mobile was breached by hackers between February 24th and March 30th, …
