The SURF Security Lifeguard Report
Keeping you afloat in dangerous times
Welcome to the first Surf Lifeguard Report, a roundup of the top cybersecurity stories of the past fortnight. Below you’ll find news and context to improve situational awareness and help craft your organisation’s security strategy.
Remember to subscribe to receive every report. Here we go:
Mandiant: Snowflake breach victims didn’t have MFA enabled
Google-owned Mandiant has released more details of a major extortion campaign against customers of data cloud firm Snowflake. Around 165 customers have had their accounts breached by threat group UNC5537 – primarily via credentials previously stolen by infostealer malware, Mandiant said. The customers in question did not have multifactor authentication (MFA) enabled.?
It may surprise you to hear that enforcing MFA at login can be done extremely easily via an advanced enterprise browser.
Phishing attacks on EU/US organisations double
The volume of phishing attacks targeting European organisations surged by 112% between April 2023 and April 2024, and by 92% in the US, according to Abnormal Security. It highlights the enduring popularity of email-borne social engineering attacks as a primary initial attack vector. Phishing can be used either to harvest credentials for network intrusion, or to install malware on endpoints.
Your organisation can eliminate the human risk factor through multi-layered protection in SURF Security's browser or extension, including reputation, domain, and SSL certificate checks.
Employee malware download led to massive breach
A ransomware breach at one of America’s largest healthcare providers started when an employee mistakenly downloaded a malicious file onto a company device. The incident forced the provider to halt non-emergent elective procedures, tests and appointments and divert emergency patients elsewhere. The staffer was tricked into clicking on a malicious link in a phishing email.
Both the initial phishing email and subsequent malware download could have been blocked.
Phishing email led to credential theft and breach of 200,000 LA citizens
Los Angeles County Department of Public Health (DPH) has revealed a data breach impacting? over 200,000 citizens. Highly sensitive and regulated information including social security numbers, financial details, names and dates of birth were compromised after 53 employees had their logins stolen via a phishing email.
领英推荐
Infostealer malware spread via Vortax fake meeting software?
Threat actors are finding clever new ways to spread malware. The latest is a campaign in which they hide infostealer malware in fake meeting software dubbed ‘Vortax”, and lure users to download it via social media posts. The campaign, which is designed to steal crypto account credentials, was legitimised via a fake Vortax blog site on Medium populated by AI-generated content.
There is a way to block malicious downloads at the browser level.
Lack of MFA to blame for massive health insurer breach
An absence of MFA enabled hackers to access the IT systems of an Australian health insurer and compromise the personal data of nearly 10 million customers, the country’s data protection regulator has claimed. The breach was one of Australia’s biggest when it happened in 2022. Specifically, the insurer didn’t require employees to log-in to their VPN using MFA.
Prompt injection flaw could enable AI leakage from EmailGPT
A new vulnerability has been discovered in Google Chrome extension EmailGPT which could enable hackers to force the system to divulge sensitive information and perform other unauthorised actions. Worryingly, the security researchers received no response from the software’s developers within their 90-day disclosure period, prompting them to advise customers to remove it.
Your organisation can place granular restrictions on what users can access and download via a secure browser like SURF.
Ready to take your browser security to the next level?
Talk to us at SURF Security to learn how our enterprise browser can help you secure your endpoints and protect your business.
Remember to subscribe to receive every report.
#cybersecurity #endpointsecurity #enterprisebrowser #zerotrust
Helping customers Do Cloud Right so they capture all the benefits of Cloud Adoption for their business
8 个月Great idea, guys!
Information Security, Business Strategy
8 个月good info thanks for sharing!
VP Ops|SURF Security|Your Zero-Trust Browser and Ext |Pro Surfer| DeepFake Detection
8 个月Interesting!