Employee mistakes are having a potentially dire impact on enterprise cybersecurity, with 43% of workers admitting to making an error that had a negative impact on corporate digital security. This is according to The Psychology of Human Error, a report published today by email security company Tessian, which surveyed 2,000 employees in the US and the UK in April. Read more >>>
Cybercriminals are abusing cloud services, such as Google Cloud Services, to arrange a phishing campaign aimed at stealing Office 365 logins. Check Point reports attackers relied on Google Drive to host a malicious PDF document and Google’s "storage[.]googleapis[.]com" to host the phishing page. The page is designed to trick victims into providing their Office 365 logins or organization e-mail. WESTptotect recommendations include educating staff on phishing and not clicking on unknown links. Read more >>>
Businesses worldwide have seen a jump in cyber-attacks with most reporting an increase in COVID-19 related malware. The COVID-19 outbreak also unveiled gaps in business recovery planning. These gaps are reported as slight to severe in 89% of cases in the country, and another 86% uncovered gaps in their IT operations because of the pandemic. Additionally, 85% identified problems due to a remote workforce and 73.5% had issues related to the visibility of cybersecurity threats. Read more >>>
It's estimated around one billion online records have been exposed in a massive data breach, potentially affecting more than 20 million users of free Virtual Private Network (VPN) apps. vpnMentor cybersecurity researchers claim they found an unsecured server shared by several VPNs - software designed to protect users' privacy by hiding their identities. Read more >>>
Threat intelligence firm, Cyble has identified a credible actor selling personal details and SSNs of approximately 40,000 U.S. citizens on the dark web. The leaked records include name, Address, City, State, SSN, and Date of Birth. WESTprotect recommends you not share personal information, including financial information over the phone, email, or SMS, WESTprotect also recommends that you use multi-factor authentication where possible. Read more >>>
Microsoft Office 365 users are targeted by a new phishing campaign using fake Zoom notifications to warn those who work in corporate environments that their Zoom accounts have been suspended. This Phishing campaign impersonating automated Zoom account suspension alerts has landed in over 50,000 mailboxes with the end goal of stealing Office 365 logins. WESTprotect recommends you use extra caution before clicking suspicious links and ensure patches are up-to-date. Read more >>>