Food delivery firm DoorDash has disclosed a data breach exposing customer and employee data that is linked to the recent cyberattack on Twilio. In a security...
https://player.vimeo.com/video/740662440?h=b26b1336a9&badge=0&autopause=0&player_id=0&app_id=58479&dnt=1 During AWS re:Inforce, Amazon executives emphasized how important access control is when it comes to cloud security and why IT leaders need to ask who...
Veracode released data revealing that the financial services industry ranks among the best for overall flaw percentage when compared to other industries, but has one of...
“An unauthorized party gained access to portions of the LastPass development environment through a single compromised developer account and took portions of source code and some...
A critical command injection vulnerability in a Bitbucket product could allow an attacker to execute arbitrary code, researchers warn. Bitbucket is a Git-based source code repository hosting service...
Twilio’s investigation into the attack on August 4 reveals that hackers gained access to some Authy user accounts and registered unauthorized devices. Authy is a two-factor authentication (2FA) service...
Threat actors are dumping the Cobalt Strike penetration testing suite in favor of similar frameworks that are less known. After Brute Ratel, the open-source, cross-platform kit...
A phishing campaign caught yesterday was seen targeting maintainers of Python packages published to the PyPI registry. Python packages ‘exotel’ and ‘spam’ are among hundreds seen laced with...
Group-IB has discovered that the recently disclosed phishing attacks on the employees of Twilio and Cloudflare were part of the massive phishing campaign that resulted in 9,931 accounts...
https://player.vimeo.com/video/740648684?h=298be03acf&badge=0&autopause=0&player_id=0&app_id=58479&dnt=1 As payment fraud increases, global losses are projected to reach $40.62 billion by 2027. Governments and businesses are turning to meaningful customer authentication to crack...