The ClickFix attack is a sophisticated phishing campaign that impersonates Booking.com to deliver infostealers and Remote Access Trojans (RATs) to hospitality workers. This phishing attack specifically targets individuals in hospitality organizations in North America, Oceania, South and Southeast Asia, and Northern, Southern, Eastern, and Western Europe, who are most likely to work with Booking.com. Attackers […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently identified critical vulnerabilities in Cisco, Hitachi, Microsoft, and Progress Software, exposing organizations to potential cyberattacks that could compromise sensitive data, disrupt operations, and facilitate unauthorized access. These vulnerabilities are actively being exploited by threat actors, heightening the urgency for immediate mitigation. As attackers continuously evolve […]
The PayPal data breach settlement has made headlines as the company agreed to pay $2 million after a 2022 security incident exposed sensitive information of approximately 35,000 users. The breach, which occurred due to a credential stuffing attack, compromised personal details such as names, addresses, Social Security numbers, and tax identification numbers. This settlement not […]