Context Is King in the Fight Against Modern Cyberattacks
Etay Maor, Security Week
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
For most of its history, cybersecurity has been reactive by design. Spot the bad event, shut it down. But as cyberattacks evolve, this thinking must evolve too. In the past, attackers relied on a single dramatic exploit to access the crown jewels. But the nature of attacks has changed…
Read more14 Ways Attackers Abuse Cloud Services to Hack Your Enterprise
John Leyden, CSO Magazine
As enterprises increasingly depend on cloud services, ‘living off the land’ for attackers has evolved into ‘living off the cloud.’
Attackers are increasingly abusing trusted SaaS platforms, cloud infrastructure, and identity systems to blend malicious activity into legitimate enterprise traffic…
Read more
#StopRansomware: SafePay Ransomware
Cybersecurity & Infrastructure Security Agency
This advisory details recent activity by the SafePay ransomware group.
SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America, South America, Europe, and Australia. SafePay actors typically gain access by stealing or guessing passwords, exploiting security system vulnerabilities, and using phishing tactics…
Read moreFake Amazon Music x YouTube Deal Lures Creators into a Google Login Trap
Stefan Dasic, MalwareBytes
On August 27, YouTube announced that Amazon had joined its Shopping Affiliate Program. Eligible creators can now tag Amazon products in their videos and earn a commission on sales.
Weeks later, we found a wave of sites offering YouTube creators what looks like another Amazon opportunity: an invite-only advertising deal with Amazon Music. The site shows creators their own channel stats, then asks them to “verify” their channel with Google before it reveals a personalized offer…
Read more