Microsoft has added a new security feature to the Authenticator app. This feature blocks suspicious notifications that occur during the account login process. Microsoft Authenticator is an app that provides multi-factor authentication, password auto-fill, and password-less sign-in to Microsoft accounts. When a user tries to log into an account with …
Read More »Microsoft Authenticator
Duke University research found
US military personnel data up for sale, sold for 12 cents per person
According to a study from Duke University, it is possible to purchase data on thousands of military personnel, including personal details such as health issues and gambling habits, for less than $0.50 per person. Researchers from Duke University conducted a data brokerage project. They reached out to 12 data brokers …
Read More »
Account detail sent every 5 minutes
Telegram users victims more than 3 lakh cyber attacks in October
Telegram is one of the most popular social media platforms in the world. The platform is constantly being updated. But recently cyber security experts have discovered a new malware. The malicious ‘WhatsApp Spy Mode’ has already attacked messaging platform Telegram users at least 340 thousand times. According to the researchers, …
Read More »
HHS’ Department Report
Healthcare Data Breaches affect 88 Million Americans
The US Department of Health and Human Services (HHS) has reported that threat actors have accessed sensitive health data of tens of millions of American patients this year. The HHS reported a significant increase in “large breaches” and ransomware incidents to its Office for Civil Rights (OCR). In 2023, there …
Read More »
ZDI published the vulnarabilities
New Microsoft Exchange zero-days allow RCE, data theft attacks
Trend Micro’s Zero Day Initiative (ZDI) Thursday (02.11.23) published four zero days vulnerabilities of Microsoft Exchange which can exploit remotely to execute arbitrary code or disclose sensitive information on affected installations. Bleeping Computer reported, these vulnerabilities were reported to Microsoft on September 7th and 8th, 2023. Microsoft acknowledges the reports …
Read More »
Data breach cause prediction
90% of data breaches in 2024 will feature a human element
According to an analyst, there will be major data breaches and fines for application developers who use generative AI (GenAI) extensively next year. Forrester made the claims in its 2024 predictions for cybersecurity, risk and privacy and trust. Alla Valente, a senior analyst, issued a warning about the excessive use …
Read More »
FIRST CVSS 4.0
FIRST releases new vulnerability scoring system CVSS 4.0
The Forum of Incident Response and Security Teams (FIRST) has recently announced the release of CVSS v4.0, the latest version of the Common Vulnerability Scoring System (CVSS) standard. This update comes more than eight years after the release of CVSS v3.0 in June 2015. Version 4.0 of CVSS aims to …
Read More »
International Counter-Ransomware Initiative
40 countries to sign a agreement not to pay ransom
40 countries will sign a pledge to stop paying ransoms demanded by cybercriminal groups at the International Counter-Ransomware Initiative summit in Washington, D.C. Anne Neuberger, Deputy National Security Adviser for Cyber and Emerging Technology at the White House, suggested that this initiative is a response to the increasing global threat …
Read More »
Corvus threat intel report
Ransomware Attacks Up More Than 95% Over 2022
In its Q2 2023 Global Ransomware Report, Corvus noted a significant resurgence in global ransomware attacks, which has continued through the third quarter. Now, with two months remaining in the year, the number of ransomware victims in 2023 has already surpassed what was observed for 2021 and 2022. If the …
Read More »
For security issue
Canada bans Kaspersky Apps and Wechat On Government Devices
The President of the Canadian treasury board, Anita Anand, announced yesterday (30 October) a ban on the use of the WeChat and Kaspersky suite of applications on government-issued mobile devices. The press release stated, the Government of Canada is committed to keeping government information and networks secure. We regularly monitor …
Read More »