News

The new attacks are part of an ongoing phishing operation, dubbed the "Compact" Campaign, which has been active since early 2020. The campaign, which has already stolen an estimated 400,000 OWA and Office 365 credentials has now begun abusing new legitimate services in an effort to bypass secure email gateways (SEGs). As a result, Microsoft security experts have issues a warning: "Phishers continue to find success in using compromised accounts on email marketing services to...

Feedzai, the cloud-based financial risk management platform, today announced a $200 million Series D investment round led by leading global investment firm KKR, with participation from existing investors Sapphire Ventures, and Citi Ventures. The company states that the new investment will be used to accelerate its global expansion, further develop its product offerings, and boost its partner strategy to strengthen its position as one of the most comprehensive financial crime prevention and risk management solution...

A California State Controller's Office employee fell for a phishing link, leading to a data breach that resulted in the theft of around 9,000 records. The employee, who worked in the Unclaimed Property division clicked on a phishing link received in an email and then proceeded to enter a user ID and password. This gave an attacker access to the employee login details, and consequently the employee's account, on the 18th and 19th of March....

Deepanshu Kher has been sentenced to two years in prison after hacking into the network of a Carlsbad, California-based firm. The former IT contractor worked for the IT consultancy firm for around 1 year in 2017, helping a client with migration to a Microsoft 365 Office environment. The client was not satisfied with Kher's work, who was fired once this feedback reached the head office. Two months after returning to India, Kher took revenge on...

The Michigan based bank Flagstar, has contacted its customers informing them of a data breach during which hackers accessed their SSNs. The bank finally admitted that the attack resulted in the loss of customers' Social Security Numbers, home addresses, full name and phone numbers - a detail that was not publicly disclosed when the data breach was announced two weeks ago. It appears the breach even affected people who are no longer Flagstar customers. According...

Royal Dutch Shell has revealed that they have been affected by the Accellion FTA file transfer appliance hack. Last week Shell posted a company statement which said, "Shell has been impacted by a data security incident involving Accellion’s File Transfer Appliance. Shell uses this appliance to securely transfer large data files." According to the statement posted on their website, Shell has said that there is no evidence that their core IT systems have been impacted...

Beech Tree Private Equity has announced a significant investment in Performanta, a fast-growing global provider of managed cyber security services to enterprise customers. Performanta provides an end-to-end security solution for customers, advising on security strategies as well as monitoring their environments 24/7 - including full Managed Detection and Response (MDR) and Incident Response services. Beech Tree will support Performanta with its plans to scale up rapidly, enhancing sales to accelerate its focus on enterprise customers...

A new report released by the FBI has revealed that Americans had over $4 billion stolen due to cybercrime in 2020. Also found in the 2020 Internet Crime Report was the fact that the Internet Crime Complaint Center (IC3) saw an increase of 69% compared to what was reported 2019. Further research has shown that the top three crimes reported by victims in 2020 were phishing scams, non-payment/non-delivery scams, and extortion. It was highlighted that...

Can it be done? And if so, how? We give our thoughts regarding online pokers ongoing arms race Before the days of online poker, cheating at the table meant smuggling in sophisticated devices – the earliest forms of these would simply allow you to keep an extra ace or two up your sleeve, but that was a risky proposition – what happens when two identical cards are spotted on the table at the same time?...

In January, Mimecast reported that a certificate compromise took place following the SolarWinds espionage campaign. However, Mimecast has recently confirmed that the firm’s source code repositories were also stolen during the attack. Initially, it was thought that the SolarWinds attackers had only stolen a small amount of Mimecast's customers' personal data, such as email addresses and certain hashed credentials. Now, it has emerged that the attacks did in fact also steal a "limited" number of...