Box 2FA Bypass Opens User Accounts to Attack
A security bug in the file-sharing cloud app could have allowed attackers using stolen credentials to skate by one-time SMS code verification requirements.
UPDATE
A security hole in Box, the cloud-based...
40% of all received emails are potentially dangerous: report
As email remains the primary mode of communication both for businesses and individual users, cybercriminals are lurking to take advantage of it. According to the recent research by Hornetsecurity,...
Troubling trend: it takes nine months to detect and respond to a cyberattack
Cyber leaders consider ransomware a danger and threat to public safety. Yet they don’t feel consulted on business decisions and struggle to hire and retain talent, and that’s what...
Log4j used to deploy WhisperGate malware in Ukraine cyberattack
Several government computers were wiped using the novel WhisperGate malware in a coordinated attack against Ukraine. Last week Ukraine was hit with a massive cyberattack, affecting the websites of...
Nigerian police busts prolific cybercrime syndicate
Many of the arrested are thought to be members of ‘SilverTerrier,’ a network known for Business Email Compromise (BEC) scams that have harmed thousands of companies globally.
The Nigerian...
How chaos engineering can help DevSecOps teams find vulnerabilities
The words “chaos” and “engineering” aren’t usually found together. After all, good engineers keep chaos at bay. Yet lately software developers are deploying what they loosely call “chaos” in...
A top Ukrainian security official on defending the nation against cyber attacks
Editor’s Note: In November 2020, The Record published an interview between Recorded Future expert threat intelligence analyst Dmitry Smilyanets and Serhii Demediuk, the Deputy Secretary of Ukraine’s National Security...
