Sam Fay

Articles from Sam Fay

Cybersecurity Weekly: Gift card scams, IKEA breached, cyber knowledge gaps

November 29, 2021

New twists on gift card scams flourish on Black Friday. IKEA was hit by a cyber attack that uses stolen internal reply-chain emails. Cybersecurity knowledge gaps at any level of the organization pose security risks. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Palo Alto bug, Robinhood breach, Costco finds card skimmer

November 17, 2021

A zero-day bug was found in Palo Alto firewalls using GlobalProtect portal VPN. A Robinhood data breach exposes 7 million users' information. Costco discloses a data breach after finding a credit card skimmer. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Ransomware training, holiday package phishing attack, $10 million DarkSide bounty

November 10, 2021

Should companies subject employees to ransomware-specific security training? Tis the season for the wayward package phish. The U.S. puts a $10 million bounty on DarkSide ransomware hackers. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Babuk decryptor, QR codes in phishing attacks, cloud supply chain threat

November 1, 2021

Avast released a free decryptor for Babuk ransomware. QR codes help attackers sneak emails past security controls. The SolarWinds attacker targets cloud service providers in a new supply chain threat. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: REvil shuts down, PowerShell flaw, iOS 15 hacked

October 18, 2021

REvil ransomware shuts down again after Tor sites were hijacked. Microsoft asks admins to patch PowerShell to fix WDAC bypass. Experts hacked a fully patched iOS 15 running on an iPhone 13. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: REvil decryptor, AT&T loses millions, OMIGOD flaw

September 20, 2021

A free decryptor for past REvil ransomware victims was released. AT&T lost $200 million to an illegal phone unlocking scheme. Mirai Botnet started exploiting the OMIGOD flaw. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Cobalt Strike beacon, REvil is back, IT training pitfalls

September 15, 2021

Linux Cobalt Strike beacon is being used in ongoing attacks. REvil ransomware is back in full attack mode and leaking data. 7 signs your IT training sucks. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Fake NFT scam, Atlassian flaw, security analyst interview questions

September 7, 2021

An NFT collector was tricked into buying fake Banksy. An Atlassian Confluence flaw is being actively exploited to install cryptominers. 8 must-ask security analyst interview questions. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Phishing attacks using redirects, intermittent file encryption, Ragnarok shuts doors

September 1, 2021

Widespread phishing attacks are using open redirects. LockFile ransomware bypasses protection using intermittent file encryption. Ragnarok ransomware gang shuts shop and releases decryption key for free. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Geico breach, Morse code phishing attack, CMMC's role in cybersecurity

August 17, 2021

A Geico breach exposed customers' driver's license numbers. Hackers are using Morse code in phishing attacks to evade detection. How CMMC can help counter current cyberattacks. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: LemonDuck malware, REvil decryptor, XCSSET MacOS malware

July 27, 2021

Microsoft warns of LemonDuck malware. Kaseya obtains a universal decryptor for REvil ransomware. The MacOS malware XCSSET now targets Google Chrome. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Safari zero-day, Windows printer vulnerability, iPhone hack

July 22, 2021

A Safari zero-day was used in a malicious LinkedIn campaign. A researcher finds another unpatched Windows printer spooler vulnerability. A low-risk iOS Wi-Fi naming bug can hack iPhones remotely. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More