Page 3 - Rapid Digitization News Today

Tweets used by attackers to demonstrate previous "exploits" theyd discovered (Source: Google) North Korean hackers have been "targeting security researchers working on vulnerability research and development at different companies and organizations" to trick them into installing backdoored software, warns Googles Threat Analysis Group. The groups Monday blog post describes what it says is a monthslong attack campaign that has already notched up multiple victims. The campaign traces to "a governm...

Jim Clark, chairman and co-founder, Beyond Identity When he co-founded the firm Beyond Identity in 2020, serial entrepreneur Jim Clark said he felt somewhat responsible for the proliferation of passwords. Now he and partner Tom Jermoluk are doing something about it. They are providing access to their passwordless technology for free. The giveaway is part of a new marketing campaign. Starting Jan. 26, Beyond Identity says, it will provide access to its passwordless identity platform free of cha...

An email with the attached Google Form, (Source: Proofpoint) Fraudsters are using Google Forms to target retail, telecom, healthcare, energy and manufacturing companies in an apparent reconnaissance campaign to identify targets for follow-up business email compromise attack. "Unfortunately, Google services are often abused for malware distribution, credential phishing and, in this case, as part of email fraud. Google is often a trusted source in many organizations, so threat actors leverage tha...

LinkedIn From heightened risks to increased regulations, senior leaders at all levels are pressured to improve their organizations risk management capabilities. But no one is showing them how - until now. Learn the fundamentals of developing a risk management program from the man who wrote the book on the topic: Ron Ross, computer scientist for the National Institute of Standards and ...

Jeremy Grant of Venable and Rebecca Archambault of Blue Cross Blue Shield The security challenges presented by the COVID-19 pandemic, including managing a remote workforce, point to the need to prioritize identity management, say Rebecca Archambault of Blue Cross Blue Shield and Jeremy Grant of the law firm Venable. ”Put identity is at the center of your cybersecurity program. Make sure identity is sitting in the middle, and not at the outside of it,” Archambault says. “Make sure your se...

GovInfoSecurity March 31, 2021 gsuparna) • December 24, 2020     Simon Marchand, chief fraud prevention officer at Nuance Communications Data collected through customer identity and access management can play an important role in fraud investigations, says Simon Marchand, chief fraud prevention officer at Nuance Communications. In this video interview with Information Security Media Group, Marchand also discusses: ...

Malicious domain designed to look like an Office 365 logon page (Source: Abnormal Security) A spear-phishing campaign detected earlier this month that uses messages that appear to originate with legitimate companies is targeting enterprise users in an effort to steal Microsoft Office 365 credentials, according to a report from Abnormal Security. The fraudsters appear to have compromised hundreds of legitimate accounts to help craft realistic-looking emails, the researchers say. In one case, the...

GovInfoSecurity SecurityEditor) • December 14, 2020     Gen. Gregory Touhill (ret.), First U.S. CISO & president, Appgate Federal He was the first U.S. federal CISO, and before that he was an Air Force general. So when Gregory Touhill reacts to the coordinated supply chain attack on SolarWinds, he does so in military terms. His message to the global cybersecurity community: “Shields up.” Touhill, now president o...

Example of fake Facebook page used to help deliver Molerats malware to victims (Source: Cybereason) "Molerats," an Arabic-speaking advanced persistent threat group that has been targeting victims mainly in the Middle East for several years, is now abusing Facebook accounts, as well as other cloud-based platforms, to deploy previously undocumented malware as part of an ongoing espionage campaign, according to security firm Cybereason. The hacking group, which is also known as the Gaza Cybergang,...