W3LL Store: How a Secret Phishing Syndicate Targets 8,000+ Microsoft 365 Accounts

A previously undocumented "phishing empire" has been linked to cyber attacks aimed at compromising Microsoft 365 business email accounts over the past six years.
"The threat actor created a hidden underground market, named W3LL Store, that served a closed community of at least 500 threat actors who could purchase a custom phishing kit called W3LL Panel, designed to bypass MFA, as well as 16

https://thehackernews.com/2023/09/w3ll-s...shing.html

9 Alarming Vulnerabilities Uncovered in SEL's Power Management Products

Nine security flaws have been disclosed in electric power management products made by Schweitzer Engineering Laboratories (SEL).
“The most severe of those nine vulnerabilities would allow a threat actor to facilitate remote code execution (RCE) on an engineering workstation,” Nozomi Networks said in a report published last week.
The issues, tracked as CVE-2023-34392 and from CVE-2023-31168

https://thehackernews.com/2023/09/9-alar...ed-in.html

Three CISOs Share How to Run an Effective SOC

The role of the CISO keeps taking center stage as a business enabler: CISOs need to navigate the complex landscape of digital threats while fostering innovation and ensuring business continuity. Three CISOs; Troy Wilkinson, CISO at IPG; Rob Geurtsen, former Deputy CISO at Nike; and Tammy Moskites, Founder of CyAlliance and former CISO at companies like Time Warner and Home Depot – shared their

https://thehackernews.com/2023/09/three-...ctive.html

Alert: Phishing Campaigns Deliver New SideTwist Backdoor and Agent Tesla Variant

The Iranian threat actor tracked as APT34 has been linked to a new phishing attack that leads to the deployment of a variant of a backdoor called SideTwist.
“APT34 has a high level of attack technology, can design different intrusion methods for different types of targets, and has supply chain attack capability,” NSFOCUS Security Labs said in a report published last week.
APT34, also known by

https://thehackernews.com/2023/09/alert-...r-new.html

Authentication Outage Underscores Why 'Fail Safe' Is Key

Duo's service outage last week, impacting schools and businesses, highlights how companies should build in resiliency and business continuity into their authentication schemes.

https://www.darkreading.com/dr-tech/auth...afe-is-key

5 Ways to Prepare for Google's 90-Day TLS Certificate Expiration

With bad guys frequently upping their game, security can't leave these protections to a once-a-year upgrade.

https://www.darkreading.com/attacks-brea...expiration

London Police Warned to Stay Vigilant Amid Major Data Breach

Hackers hit a third-party contractor's IT systems, but they didn't steal any addresses or financial details, officials say.

https://www.darkreading.com/attacks-brea...ata-breach

Financial Firms Breached in MOVEit Cyberattacks Now Face Lawsuits

TD Ameritrade, Charles Schwab named in new class action data breach lawsuit, following last week's filing against Prudential.

https://www.darkreading.com/attacks-brea...e-lawsuits

Considerations for Reducing Risk When Migrating to the Cloud

Proper planning is an essential part of reducing security and compliance risks before, during, and after a migration to a new cloud environment. 

https://www.darkreading.com/google-cloud...-the-cloud

Cybercriminals Harness Leaked LockBit Builder in Wave of New Attacks

Enterprising, or simply lazy, cybercriminals are using Lockbit v3 to cut corners on ransomware.

https://www.darkreading.com/remote-workf...ew-attacks