Weekly blog articles covering current, critical cybersecurity topics to help the world become more aware and more secure.
Urgent advisory on the Fortigate SSL VPN breach: Learn how to protect your organization by transitioning to secure, scalable cloud-based remote access solutions and eliminate risks associated with legacy VPN systems.
FireScam malware disguises itself as Telegram, stealing sensitive data from Android users. Learn how to stay protected.
This newsletter summarizes cybersecurity news from January, and boy there are some big events that happened.
Learn about the DoubleClickjacking exploit, how it bypasses traditional security, and essential tips to protect your online safety.
Protect your text messages from cyber threats with these essential tips, including encryption, avoiding smishing, and securing 2FA.
Learn how over 2,000 Palo Alto Networks firewalls were hacked using critical zero-day vulnerabilities and how to stay protected
Learn how brushing scams exploit your personal data through unsolicited packages and fake reviews. Stay alert and protect your privacy.
Learn about Microsoft’s Authquake MFA flaw, how hackers bypassed authentication, and key steps to protect your accounts.
This newsletter summarizes cybersecurity news from December, and boy there are some big events that happened.
Fake Email Phishing is broken in many ways. Google researchers liken it to early fire drills that caused more harm than good. Empirical research shows users clicking more not less after fake email phish testing. End users universally complain as do IT departments when chaos breaks out after sanctioned fake email testing. Enter HootPhish, a solution that eliminates the negatives, and empowers end users to spot and avoid this scourge of modern internet email.
Discover how AndroxGh0st malware exploits IoT device vulnerabilities, creating powerful botnets for cyberattacks, and learn steps to protect your devices.
Learn about Midnight Blizzard’s spear-phishing campaign using malicious RDP files and discover practical tips to stay protected.
Learn how CyberHoot’s HootPhish Challenge gamifies phishing detection, helping users quickly and accurately identify phishing threats!
Learn how to protect your Git repositories and cloud credentials following the massive global operation called EmeraldWhale.
This newsletter summarizes cybersecurity news from November, and boy there are some big events that happened.
Explore 5 essential strategies for SaaS security, including identity management, data encryption, SSPM tools and more!
This article dives into the Meta lawsuit for the 2019 breach that exposed 600 million unencrypted passwords in plain text.
Learn how social media accounts pose a cybersecurity risk and how SSPM can protect your business through multiple different ways!
This newsletter summarizes cybersecurity news from October, and boy there are some big events that happened.
Learn how to protect yourself from evolving Session Hijacking threats with expert tips on secure connections, encryption, 2FA, and more.
Learn expert tips to spot phishing links and protect yourself from cyber threats, including how to check URLs, avoid scams, and stay secure online.
Explore the shift toward passwordless and keyless authentication, its benefits for cybersecurity, and how businesses can prepare for this future
Learn about the cybersecurity risks of using in-flight Wi-Fi and discover essential tips to protect your data while traveling, from VPNs to device updates.
This newsletter summarizes cybersecurity news from August, and boy there are some big events that happened.
Learn about critical vulnerabilities in Veeam Backup & Replication and SonicWall SonicOS, including active exploits. Apply patches and follow key security measures to protect your systems.
Learn how to protect your business from the new Rust-based Cicada 3301 ransomware. Discover key strategies to safeguard your data and prevent ransomware attacks.
Learn how to protect your business from zero-day exploits like those recently used by Chinese hackers targeting U.S. internet providers. Discover key cybersecurity strategies to stay ahead of emerging threats.
Learn how to protect your organization from the new Qilin ransomware attack, which exploits VPN vulnerabilities. Discover essential tips for strengthening your cybersecurity defenses and preventing ransomware threats
Discover the extensive impact of the NPD breach that exposed 3 billion personal records, underscoring significant privacy risks and highlighting essential steps for safeguarding personal information against identity theft and cyber fraud.
Discover prevention techniques for the top 10 common cyber attacks. Learn how to identify the attacks through scenarios and then take steps to mitigate the damage and protect your business and data from harm.
This newsletter summarizes cybersecurity news from June and July, and boy there are some big events that happened. From CrowdStrike’s global outage to increased focus on credential stuffing attacks, hackers were hard at work during this period.
Discover the top 10 cyber attacks. Learn how to identify the attacks through scenarios and then take steps to mitigate the damage and protect your business and data from harm.
Learn about the CrowdStrike global outage, its potential causes, and essential risk mitigation strategies to protect your organization from similar cyber threats.
A unique ransomware scheme is seeking to extort money from Ticketmaster to prevent the release of printable tickets and concert chaos.
Discover how MFA failures are contributing to a 500% surge in ransomware costs and learn how adopting Passkeys can enhance your cybersecurity defenses.
Learn about the critical OpenSSH vulnerability CVE-2023-38408 that allows remote code execution via the ssh-agent’s forwarding feature. Discover immediate steps to protect your systems, including upgrading to OpenSSH 9.3p2, restricting PKCS#11 providers, and enhancing security measures.
Learn how to protect your business from the evolving SaaS kill chain by understanding the stages of cyber attacks, or kill chain links, and the nuances of on-premise vs. SaaS models of the kill-chain.
Learn how hackers exploit legitimate websites to launch sophisticated attacks and discover ways to protect yourself from these evolving cybersecurity threats.
Time-Intensive Mobile Hacks Are Causing Big Headaches for Companies Time-Intensive Mobile Hacks: Discover how time-intensive mobile hacks are evolving and what companies can do to protect themselves from these sophisticated …
Learn how Okta is addressing credential stuffing attacks and what steps users can take to protect their accounts from this growing cybersecurity threat.
Business Ninja’s interviewed CyberHoot’s co-Founder Craig Taylor. This interview outlines CyberHoot’s unique and positive outcome approach to cybersecurity program development at your company. Our Co-Founder details what’s working and what’s broken in the emergency Cybersecurity industry. Business owners need to watch to learn what they should be doing to protect their businesses from compromise. Doing so provides much needed peace of mind.
Discover the latest phishing tactics targeting unsuspecting victims, including Cloudflare Workers, HTML smuggling, and AI-generated emails. Learn how cybercriminals bypass security measures and how you can protect yourself from these sophisticated attacks. Stay informed and stay safe in the ever-evolving world of cybersecurity.
May 30th, 2024: Learn how to protect yourself after the Ticketmaster data breach affecting 60 million customers. Discover immediate steps, identity protection tips, and long-term security practices to safeguard your personal information.
Discover how time-intensive mobile hacks are evolving and what companies can do to protect themselves from these sophisticated cybersecurity threats.
Understanding the Change Healthcare Cyberattack Change Healthcare Cyberattack: Gain valuable insights into the attack’s origins, impact, and implications for your cybersecurity. Read now. Understanding Latrodectus: A Stealthy Cyber Threat Delve into …
Learn how to protect your systems from ransomware attacks by understanding the role of remote-access tools and implementing effective cybersecurity strategies.
Explore the implications of the Dropbox Sign Breach incident, emphasizing the critical role of cybersecurity measures in defending against API key and OAuth token theft. It discusses the methods used by attackers, offers practical insights for safeguarding data, and underscores the ongoing need for vigilance in today’s interconnected digital landscape.
For over 40 years, passwords have been the cornerstone of computer security, despite their many flaws. People turned to password managers to simplify and secure their login processes. Now, passkeys are set to revolutionize how we secure our online identities. Unlike traditional passwords, passkeys eliminate many common security risks, making them a crucial advancement everyone should understand. This article will explain what passkeys are, how they work, and why they represent the future of identity management online.
“CyberHoot’s Newsletter has been on a brief hiatus as we focused on critical product improvements, finished 2024 strategic planning, and addressed performance improvements. This newsletter is chock full of cyber …
Lessons learned from the Change Healthcare data breach can teach us immediate actions we can take to reduce the chance of a breach in our own companies, networks, and the loss of the data entrusted to us.
