Email attachments are far from sinister. They are a part of the regular flow of everyday work and personal life. From business-related documents and invoices to family photos and videos, a wide range of email attachments regularly land in a standard inbox. However, email attachments are also a favorite vehicle of threat actors looking to…
Enterprises around the globe consider Amazon Web Services (AWS) Simple Storage Service (S3) buckets to be highly reliable and secure storage destinations for company data. However, with hackers relentlessly pursuing new attack grounds, previously secure AWS S3 buckets can be compromised and are at risk for malware and ransomware attacks. Those responsible for securing cloud…
Security analysts have uncovered a new malware campaign in which hackers are spreading malware hidden in space images from the James Webb telescope. The full-color images of galaxies, stars, planets, and other cosmic life were first shared by scientists in July 2022 and have unwittingly become the conduit of malicious payloads in a technique known…
It’s a well-known fact that collaboration tools also come with unique security risks, like users inadvertently sharing malicious files. Last week yet another more insidious risk became public knowledge. One of the most popular and arguably the most shared image file types, .gif, is being weaponized to create a remote shell allowing attackers to sneak…
On March 23, 2022, Sky Mavis, the developer of the popular blockchain-based video game Axie Infinity suffered a breach that caused the loss of hundreds of millions of dollars in assets. A company engineer targeted in a socially engineered phishing scheme accidentally downloaded malware through an infected PDF file and caused the company to get hacked…
The legal industry is facing an uptick in cyber-attacks and database breaches. Lawyers and law firms are attractive targets to hackers, as they often own treasure troves of sensitive data, such as trade secrets, personally identifiable information (PII), legal evidence, and other privileged client data. The American Bar Association’s 2021 Legal Technology Survey Report indicates…
Ransomware has become a significant problem for enterprises and organizations. Ransomware attacks have been steadily increasing since 2018, reaching 68.5% of attacks in 2021. Due to the danger it poses, organizations should know how to prevent ransomware and take steps to better protect their network. What is a ransomware attack? Ransomware is malware that locks access…
Employees in every enterprise regularly receive emails with content and attachments from within and outside the organization, involving multiple business units, vendors, partners, and other third parties. With all of the emails and attachments entering your organization each day, any employee with an email address – especially those that often interact with the world outside…
Recently, a new remote code execution vulnerability was discovered in Microsoft Office documents. Read on to learn more about this new threat and what steps you can take to prevent it from wreaking havoc on your organization. What is the Follina Zero-Day Vulnerability? Security researchers recently discovered a new Microsoft Office zero-day vulnerability that leverages…
