Here are the key takeaways: * Passkeys can be managed by password managers, but this comes with a tradeoff of relying on master passwords and second secret codes. * Magic links for account recovery are considered a secure method, but they rely on email or SMS networks, which can be compromised. * Ward links require…
A financially motivated East European threat actor, dubbed “Unfurling Hemlock,” is distributing malware using a unique approach that involves compressing multiple files into a single Microsoft Cabinet (CAB) file. This file can contain up to 10 different types of malware, including information stealers and loaders. The attacker has distributed hundreds of thousands of these CAB…
Papua New Guinea (PNG) has recently announced its National Data Protection and Governance Policy 2024, which aims to secure sensitive data that needs to be shared externally. The policy encourages responsible data sharing among government agencies, businesses, and stakeholders while ensuring compliance with privacy regulations. PNG’s commitment to establishing a robust data protection framework is…
As digital business grows, so does the potential for AI-enhanced digital fraud, highlighting the need for ethical AI use to combat fraud and maintain trust in the digital world. A new report emphasizes consumer concerns about AI’s impact on digital privacy and its potential misuse in elections. Consumers fear AI-generated content undermining election confidence, with…
The pursuit of a “secure” state through advanced defensive capabilities and resources is ultimately futile, as cyber attackers will always have an advantage due to their singular focus on disrupting systems. Instead, cybersecurity professionals should focus on dissuasion and resilience in the face of inevitable attacks. Several reasons make it impossible to truly “get ahead”…
