Author: Admin

Some of the most effective tricks used for social engineering attacks are being overlooked or underestimated. That’s according to security vendor Proofpoint, whose 2022 Social Engineering report concluded that many companies mistakenly assume that cybercriminals are unwilling or unable to use tactics such as extended conversations, legitimate services and hijacked email threads in order to dupe their targets into opening malware and following phishing links. Proofpoint, which specializes in tools and services to counter…

Organizations are still neglecting to secure their supply chains, according to panellists at a session during Infosecurity Europe 2022. Panel chair and security consultant Peter Yapp warned that fewer than 10% of organizations have reviewed their suppliers’ security. “Attacks on the supply chain will only increase,” he said. Firms face a growing volume of attacks on their software vendors, and managed service providers. Criminal groups are following the lead of nation-state actors in using the…

On the opening day of Infosecurity Europe 2022, Professor Keith Martin delivered a keynote speech focusing on the critical yet often invisible role cryptography plays in our everyday lives, enabling us to protect our information and share it securely. The session saw Martin explain how cryptography is used and revealed the many crucial ways we depend on cryptographic technology. Martin began by asserting a common theme heard across the day from multiple speakers: emphasizing the responsibility we all…

A new wave of targeted voicemail phishing attacks has been hitting US companies in selected verticals since May 2022. The campaign’s goal is to collect Office 365 credentials of legitimate corporate users. Image: Rogatnev/Adobe Stock Email phishing campaigns are regularly hitting organizations in the U.S., but voicemail phishing is less common. A new report from Zscaler exposes a new attack scheme  begun in May 2022 that aims to collect valid credentials for Office 365 mailboxes….