The focus of China’s proposed Digital Identity proposal revolves around three key items: minimization of data sharing, user rights, and legal compliance, with data security being the fulcrum, an industry…
Clutch Security is the latest cybersecurity startup looking to secure and manage non-human identity. – Read More
According to the study, around 400 stolen GenAI credentials are being sold by threat actors per day. – Read More
With sufficient privileges in Active Directory, attackers only have to create an “ESX Admins” group in the targeted domain and add a user to it. – Read More
Phishing campaigns that spoof well-known global brands such as Disney, IBM, Nike, Best Buy, and Coca-Cola to trick recipients into clicking on malicious emails should be a thing of the…
The incident serves as a stark reminder of the fragility of our digital infrastructure. By adopting a diversified, resilient approach to cybersecurity, we can mitigate the risks and build a…
Data thieves heisted the HSA provider’s data repository for 4.5 million people’s HR information, including employer and dependents intel. – Read More
Three critical vulnerabilities in the ServiceNow IT service management platform have been disclosed and reported to have been under active exploitation. The vulnerabilities have exposed sensitive information from over 105…
A new iteration of a sophisticated Android spyware called Mandrake has been discovered in five applications that were available for download from the Google Play Store and remained undetected for…
The NCSC produces advice for practitioners working with victims who are being tracked, stalked, or virtually monitored. – Read More
As more people work remotely, IT departments must manage devices distributed over different cities and countries relying on VPNs and remote monitoring and management (RMM) tools for system administration. However,…
Cybersecurity researchers have detailed widespread phishing campaigns targeting small and medium-sized businesses (SMBs) in Poland during May 2024 that led to the deployment of several malware families like Agent Tesla,…
Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill’s threat experts. Each story shines a light on underground activities, the threat actors…
At 4 a.m. UTC on July 19, cybersecurity giant CrowdStrike sent out what it thought was a routine content configuration update to its Falcon product, which analyzes internet connections for…
The nation-state threat actor known as SideWinder has been attributed to a new cyber espionage campaign targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea. The BlackBerry…