- Cyber Safety
- Posts
- $10.5T Hygiene Risks, npm Landmines & AI Red Teams
$10.5T Hygiene Risks, npm Landmines & AI Red Teams
Cybercrime is projected to cost $10.5 trillion by 2025—and poor cyber hygiene is still the easiest entry point. This guide breaks down seven essential habits that secure people practice daily.
• Human error accounts for up to 50% of security breaches—and remote work only increases that risk
• Public Wi-Fi, outdated devices, and phishing remain top attack vectors in 2024
• VPNs, email filtering, and privacy screens are now table stakes, not nice-to-haves
Smart habits aren’t optional anymore. Check out the 7 habits that secure people practice daily.
He’s already IPO’d once – this time’s different
Spencer Rascoff grew Zillow from seed to IPO. But everyday investors couldn’t join until then, missing early gains. So he did things differently with Pacaso. They’ve made $110M+ in gross profits disrupting a $1.3T market. And after reserving the Nasdaq ticker PCSO, you can join for $2.80/share until 5/29.
This is a paid advertisement for Pacaso’s Regulation A offering. Please read the offering circular at invest.pacaso.com. Reserving a ticker symbol is not a guarantee that the company will go public. Listing on the NASDAQ is subject to approvals. Under Regulation A+, a company has the ability to change its share price by up to 20%, without requalifying the offering with the SEC.
The recent cyber incident at M&S highlights that no organization is immune from targeted attacks. While facing a £300 million loss, M&S’s response is what truly matters:
• Collaborated with the NCSC for threat intelligence sharing
• Maintained business continuity under pressure
• Emphasized transparent communication
Cybersecurity expert Mark Hughes commends M&S's integrity and collaboration during recovery, reminding us that proactive responses are key in this evolving threat landscape. Their experience serves as a valuable lesson for others in the industry, showcasing resilience in the face of adversity.
Operant AI has launched Woodpecker, an innovative open-source red teaming engine aimed at enhancing cybersecurity for organizations of all sizes. This automated tool simulates cyberattacks to help identify and address security vulnerabilities.
Highlights:
• Woodpecker targets critical areas:
- Kubernetes Security: Identifies configuration flaws and vulnerabilities.
- API Security: Uncovers weaknesses in authentication and data handling.
- AI Security: Tests AI systems for emerging threats like data poisoning.
With Woodpecker, cybersecurity becomes accessible and essential, ensuring no organization is left vulnerable to modern threats.
A new wave of cybercrime is shaking the JavaScript community! Hackers are unleashing weaponized npm packages targeting popular frameworks like React and Node.js. Here are some alarming highlights:
• Over 6,200 downloads of malicious packages that masquerade as legitimate plugins.
• Attackers cleverly release both harmful and helpful versions to gain trust.
• Targeting popular tools like Vite (28M+ weekly downloads) through typosquatting techniques.
• The notorious “js-hood” package subtly corrupts core JavaScript functionality without triggering immediate failures.
Developers are urged to audit dependencies and implement security measures to combat these sophisticated attacks!
💻What Do You Do?We'd love to get to know you! Which option describes you the best? If you click "other",please hit reply and let us know what you do. |
KrebsOnSecurity recently weathered a monumental 6.3 Tbps DDoS attack, launched by the Aisuru botnet, showcasing the alarming vulnerabilities of IoT devices. This attack, one of the largest ever recorded, lasted about 45 seconds and targeted Brian Krebs' high-profile blog.
Highlights:
• Aisuru botnet primarily consists of compromised IoT devices.
• Attack was ten times larger than a previous assault on the site in 2016.
• Emphasizes the urgent need for better security in consumer-grade devices.
Despite the onslaught, KrebsOnSecurity remained online, thanks to Google’s Project Shield. The incident underscores the growing threats posed by modern botnets.
IBM's latest report reveals that one-third of cyber attacks now leverage highly sophisticated tactics to steal login credentials rather than traditional hacking methods. Key highlights include:
• 30% of incidents involved attackers using valid credentials.
• Credential harvesting was noted in 28% of victimized organizations.
• The Asia-Pacific region saw a 13% rise in attacks, accounting for 34% of global incidents.
• A significant 84% annual increase in infostealers from phishing emails was identified.
As attacks become more advanced, organizations must enhance their security measures to combat these growing threats effectively.