CL3RITY

"BEC proves a successful attack vector" linkedin.com/pulse/bec-prove… by @jaymclaughlin of @cl3rity on @LinkedIn

Cyber threats don’t stand still — neither do attackers. Phishing has evolved from simple fake login pages to sophisticated AI-driven campaigns designed to bypass traditional defenses, exploit trust, and target both people and business processes. #CyberSecurity #Phishing #AI

#Malware continunes to impact city governments >> ow.ly/ZLev50uHdqu << Cleveland, Baltimore, San Antonio, Greenville are past victims -> the latest #ransomware attack has paralyzed the city government of Riviera Beach FL

After a two-year absence, the hacking group known as FIN8 has returned with a new campaign mainly targeting point-of-sale machines in the hotel industry in an effort to steal credit card and other payment data >> bankinfosecurity.com/fin8-gr…?

Microsoft Security Response Center is strongly urging users affected by the Windows BlueKeep (CVE-2019-0708) bug to patch ASAP. The flaw, which lies in the Remote Desktop Protocol (RDP), can be exploited without user interaction & could be used to spread self-replicating malware.

Vendor management is not about the #risk of the #vendor themselves, but rather the risk of the service they are providing and how it impacts your organization. #assessments

"Omen of repressive government #surveillance" -- San Francisco to become the first city to adopt a ban on government use of facial recognition >> nbcnews.com/news/us-news/san… << escalating battle over public opinion #privacy

Two years after Equifax's massive data breach, which began in May 2017, the event continues to sting the credit reporting giant >> bankinfosecurity.com/equifax… << data breach reportedly costing over $1.4B #cybersecurity #databreach

Researchers reveal data breaches at three (3) US-based antivirus software vendors >> arstechnica.com/information-… << attackers managed to steal source code antivirus agents and are reportedly selling access into the compromised companies for $300K

Buffer overflow vulnerability in WhatsApp allows remote exploitation simply by making a call to the target/victim device and then sending a special set of manipulated packets to the device. >>ow.ly/9oRq50ubLDU? << users should update their mobile apps ASAP #cybersecurity

Baltimore city government computers were infected this week with #ransomware - the second time in just over a year that hackers demanding payment disrupted the city’s technology systems >> ow.ly/7gpI50u5DxP #cyberattacks

Office 365 accounts compromised via account takeover #attacks (#ATO) -> then used in business email compromise (#BEC) scams ow.ly/5k6B50u5Dvr << important to PROTECT your online accounts/profiles using unique #passwords and #2factor authentication!

IRS educating tax professionals on cyber-security issues - warning about risks of #phishing #attacks ow.ly/QOkx30dycqg

Fourth #ransomware campaign against Ukraine has surfaced ow.ly/yPa130ddhHS "designed" to look like WannaCry, but not an actual clone

British police arrested two suspects part of an international group that hacked into Microsoft's network ow.ly/Kqkl30cR9Fh

New #malware, dubbed “Judy”, is potentially one of the most widely spread pieces of Android malware seen to date ow.ly/H1Vz30c9D8c

Using Employees as Breach Detectors ow.ly/Ikmm30bZxoi via @InfosecurityMag < 4 reminders for CISO's