Executives are prime targets for hackers using pretexting, a social engineering technique that builds trust with a fabricated story or narrative. This approach is more effective than traditional phishing as it establishes rapport between the attacker and executive. Pretexting involves creating a false connection with executives, such as pretending to be an old acquaintance or…
A critical flaw has been found in PTC’s servers, allowing unauthorized remote access to affected systems. The vulnerability, tracked as CVE-2024-6071, was given a CVSS score of 10, the highest possible rating. The issue affects Creo Elements/Direct License Servers and is advised to be updated immediately. Read more
A newly discovered Eastern European threat actor is using a unique approach to deploy malware on infected systems. The “Unfirling Hemlock” campaign involves dropping up to 10 different malware files at once, making it a novel and complex attack vector. This cluster bomb-like tactic allows the attacker to deploy multiple types of malware without being…
Larger organizations have increased their cybersecurity workforce this year. According to Wavestone’s “Cyber Benchmark 2024” report, companies with more than $1 billion in revenue now have one cyber professional per 1,086 employees, up from one per 1,285 employees in 2023. Financial businesses have been particularly successful in cultivating a strong cybersecurity workforce, with an average…
Cyberinsurance premiums have decreased by around 15% since peaking in 2022, according to a report from broker Howden. This decline is attributed to improved security measures implemented by companies, which has reduced insurance claims. However, experts suggest that the real reason for the decrease is the insurance industry’s correction due to its cyclical nature. The…