A growing number of phishing campaigns have been observed leveraging trusted online document platforms to evade secure email gateways (SEGs) and steal credentials. Threat analysts at Cofense Intelligence have identified that platforms such as Adobe, DocuSign, Dropbox, Canva and Zoho are being misused in phishing attacks due to their widespread adoption by businesses and individuals. In 2024, these online document services reportedly accounted for 8.8% of all credential phishing campaigns, with 79% of observed cases…

A newly discovered malware campaign has leveraged malicious npm packages to deliver highly sophisticated reverse shells. Researchers at ReversingLabs identified two malicious packages, “ethers-provider2” and “ethers-providerz,” which infiltrated development environments by covertly modifying legitimate npm dependencies. The ethers-provider2 package closely mimics the legitimate ssh2 package, embedding harmful code within its installation script. Upon execution, the script downloads a second-stage payload from an external server, executing it before erasing any traces of the download. This payload continuously monitors for the installation of the…

Do you rely on SAP maintenance contracts to keep vulnerabilities in check? Here’s a question: have you felt the sting of renewal season? Those spiraling costs are hard to ignore—just like the rising threats and security compliance headaches. No wonder so many organizations, maybe even yours, are asking: Do we really need to keep paying for vendor protection, or could we handle SAP security ourselves? Yes, ditching the maintenance contract can save cash, but it’s…

Como centro global de referencia para toda la compañía, integra talento especializado de Brasil, España y Estados Unidos. Gracias a esta diversidad en los perfiles, Mapfre cuenta con una capacitación acorde con la geografía y con la regulación, lo que le permite adaptar su estrategia a las necesidades locales para así estar más cerca de clientes y negocio, siempre garantizando la protección de los datos y robustez de los modelos. Siguiendo esta misma línea, insisten…