Commentaries and Analyses

DigitNews reports: Two fifths (42%) of organisations reported an increase in malicious insider incidents over the past year, with the same amount reporting a rise in negligent incidents for the first time.  This is according to Mimecast’s State of Human Risk Report, which found that this parity marks a fundamental shift in enterprise security where international […]

Silent Push reports: A massive identity-theft campaign is currently active, targeting Okta Single Sign-On (SSO) and other SSO platform accounts across 100+ high-value enterprises. Silent Push has identified a surge in infrastructure deployment that mirrors the TTPs (Tactics, Techniques, and Procedures) of SLSH—a predatory alliance between Scattered Spider, LAPSUS$, and ShinyHunters. This isn’t a standard automated spray-and-pray attack; it is a […]

Risky Biz News reports: There are a handful of seminal reports in the cybersecurity industry, and lo and behold, three of them were released on Wednesday. Mandiant’s team, now part of Google Cloud, released M-Trends, Verizon released its Data Breach Investigations Report (aka DBIR), and the FBI Internet Crime Complaint Center (IC3) released its yearly Internet Crime Report [PDF]. […]

Sophos writes: Read more at Sophos.