Laura French

Jan 8, 2025 | scworld.com | Laura French

Attackers exploit PayPal’s email notifications to trick users into linking their accounts to attacker emails.

Jan 6, 2025 | scworld.com | Laura French

PhishWP imitates trusted payment services and sends stolen information directly to Telegram.

Dec 12, 2024 | scworld.com | Laura French

More than 90% of survey respondents reported taking measures to counter AI-enhanced attacks.

Oct 6, 2024 | scworld.com | Laura French

Session hijacking is an emerging entry point for ransomware actors but few orgs invalidate open sessions after a malware infection.

Oct 1, 2024 | scworld.com | Laura French |Shaun Nichols |David Balaban

Four vulnerabilities in SAP, D-Link, DrayTek and Motion Spell products were added to the Known Exploited Vulnerabilities (KEV) catalog Monday by the Cybersecurity & Infrastructure Security Agency (CISA)The vulnerabilities, most of which are several years old, pose risks including privilege escalation and remote command execution. Due to targeting of these flaws by threat actors, federal civilian executive branch agencies are required to remediate these vulnerabilities by Oct. 21, 2024.