Cyber Journal

Cyber Threat Trends

Articles and analysis on Cyber Threat Trends.

· Cyber News

Okta Post-Exploitation Method Exposes User Passwords

Accidentally typing a password in the username field of the platform saves them to audit logs, to which threat actors can gain access and…

Read article
· Cyber News

Mass Ransomware Attack

A vulnerability in a popular data transfer tool has resulted in a mass ransomware attack: TechCrunch has learned of dozens of organizations…

Read article
· Cyber News

Malicious ChatGPT Chrome Extension Hijacks Facebook Accounts

Software was unwittingly downloaded thousands of times

Read article
· Cyber News

German and South Korean Agencies Warn of Kimsuky’s Expanding Cyber Attack Tactics

German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue…

Read article
· Cyber News

Smashing Security podcast #314: Photo cropping bombshell, TikTok debates, and real estate scams

It could be a case of aCropalypse now for Google Pixel users, there’s a warning for house buyers, and just why is TikTok being singled out…

Read article
· Cyber News

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app.

Read article
· Cyber News

Lightspin Launches Remediation Hub to Identify and Fix Cloud Security Threats

Post Content

Read article
· Cyber News

The hidden danger to zero trust: Excessive cloud permissions

Graham Cluley Security News is sponsored this week by the folks at Sysdig.

Read article
· Cyber News

10 Vulnerabilities Types to Focus On This Year

A new Tech Insight report examines how the enterprise attack surface is expanding and how organizations must deal with vulnerabilities in…

Read article
· Cyber News

Chinese Warships Suspected of Signal-Jamming Passenger Jets

Attackers claiming to be part of the Chinese navy are making calls to commercial Qantas pilots midair, while GPS, comms systems, and…

Read article
· Cyber News

8 best enterprise accounting software for 2023

Enterprise accounting software is designed for large companies and businesses.

Read article
· Cyber News

Attackers Are Probing for Zero-Day Vulns in Edge Infrastructure Products

Nearly 20% of the zero-day flaws that attackers exploited in 2022 were in network, security, and IT management products, Mandiant says.

Read article
· Cyber News

Pipeline Cybersecurity Rules Show the Need for Public-Private Partnerships

The government should not issue infrastructure regulations without the involvement of the industries it’s regulating.

Read article
· Cyber News

New Android Banking Trojan ‘Nexus’ Promoted As MaaS

Nexus offers overlay attacks and keylogging activities designed to steal victims’ credentials

Read article
· Cyber News

How to Keep Incident Response Plans Current

Review and update plans to minimize recovery time. Practice and a well-thumbed playbook that considers different scenarios will ensure…

Read article
· Cyber News

Medium Analytics and Placement for a Premium

A new feature request for the Medium Wishlist Continue reading on Bugs That Bite »

Read article
· Cyber News

BreachForums Shuts Down in Wake of Leader’s Arrest

Administrator shutters the forum on fears that it had been breached by federal authorities but assured members it’s not the end for the…

Read article
· Cyber News

aCropalypse now! Cropped and redacted images suffer privacy fail on Google Pixel smartphones

Have you ever shared a photograph where you’ve redacted some sensitive information?

Read article
· Cyber News

Preventing Insider Threats in Your Active Directory

Active Directory (AD) is a powerful authentication and directory service used by organizations worldwide.

Read article
· Cyber News

ScarCruft’s Evolving Arsenal: Researchers Reveal New Malware Distribution Techniques

The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to…

Read article
· Cyber News

CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS) advisories on Tuesday,…

Read article
· Cyber News

Ask Smart Questions to Set Security Service Levels

Service Levels are the best way to align Security with the Business Continue reading on Medium »

Read article
· Cyber News

ChatGPT Privacy Flaw

OpenAI has disabled ChatGPT’s privacy history, almost certainly because they had a security flaw where users were seeing each others’…

Read article
· Cyber News

Security Researchers Spot $36m BEC Attack

Threat actors impersonated target company’s vendor

Read article

We are here to answer your questions 24/7

Ready To Achieve Next-Level Performance?