Threat Report 25 November 2022 – NCSC.GOV.UK
Stress – the classic social engineering tactic
Threat actors have to find ways of breaking down our cyber security training – that is where social engineering comes in. They want to find some way to get you to do what they want – this usually means exploiting your trust, but a bt of stress in there to …
Continue reading “Stress – the classic social engineering tactic”
If you have a Dropbox account, change your password
Dropbox reported a cyber attack on 1 November 2022 which they are investigating as they cannot yet tell how the bad actor gained access. The attacker not only garnered the names and email addresses of Dropbox employees, they also managed to access source code. So far, the number of users …
Continue reading “If you have a Dropbox account, change your password”
If you need more evidence that you need to do something about email phishing and social engineering – here it is…
McAfee Fake Antivirus Phishing Campaign is Back! – SANS Internet Storm Center …and… New zero-day vulnerability in Windows being exploited Phishing emails in the wild – how can this infect you? The story of a phishing email I have written a lot lately about phishing campaigns, all of which have …
Newly discovered zero-day vulnerability in Windows is being exploited now
Zero-day attacks will always be a serious issue for anyone involved in cyber security. A zero-day cyber attack is one that happens in the gap between the hackers discovering a vulnerability in a system and putting an exploit out in the wild and the software vendors, discovering the same software …
Continue reading “Newly discovered zero-day vulnerability in Windows is being exploited now”