Cyber Defense Advisors

Year: 2023

  • by
  • September 2, 2023

IAM for Multi-Cloud Security

Multicloud.11 IAM is challenging and one of your biggest cloud security risks Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • September 2, 2023

What Would Make Cloud Security Easier?

Multicloud.12 A proposed standard for cloud deployments and drift detection Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • September 2, 2023

Okta Warns of Social Engineering Attacks Targeting Super Administrator Privileges

Identity services provider Okta on Friday warned of social engineering attacks orchestrated by threat actors to obtain elevated administrator permissions. “In recent weeks, multiple US-based Okta customers have reported a consistent pattern of social engineering attacks against IT service desk personnel, in which the caller’s strategy was to convince service desk personnel to reset all

Cyber News, Cyber Threat Trends
  • by
  • September 1, 2023

Revisiting 16shop Phishing Kit, Trend-Interpol Partnership

In this entry, we summarize the security analyses and investigations done on phishing-as-a-service 16shop through the years. We also outline the partnership between Trend Micro and Interpol in taking down the main administrators and servers of this massive phishing campaign.

Cyber News, Cyber Threat Trends
  • by
  • September 1, 2023

Drift Detection for Multi-Cloud Security

Multicloud.10 How drift detection can help you find non-compliant resources Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • September 1, 2023

Medium Deleting Claps Or?

In search of explanation for negative claps on Medium Continue reading on Bugs That Bite »

Cyber News, Cyber Threat Trends
  • by
  • September 1, 2023

Classiscam Scam-as-a-Service Raked $64.5 Million During the COVID-19 Pandemic

The Classiscam scam-as-a-service program has reaped the criminal actors $64.5 million in illicit earnings since its emergence in 2019. “Classiscam campaigns initially started out on classified sites, on which scammers placed fake advertisements and used social engineering techniques to convince users to pay for goods by transferring money to bank cards,” Group-IB said in a new report. […]

Cyber News, Cyber Threat Trends

Smashing Security podcast #337: The DEA’s crypto calamity, and scammers’ blue tick bonanza

Seized cryptocurrency is stolen from the DEA, blue-ticks are being exploited, a bath full of dollar bills, the comfort offered by an ostrich’s head, and how Graham is refusing to call Twitter “X”. All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole […]

Cyber News, Cyber Threat Trends