Ripples from the hack are still rippling. I have spent all day doing forensic analysis and discussing everything with friends, ad infinitum. In the last couple of days, I've downloaded an authentication app and have linked it up with 20+ of my accounts so far.

Then I composed a warning email (though it's way late for that) and picked through the 200+ email addresses that were spammed from my account so that I wouldn't be warning people who already knew about it or people I just didn't want to contact.

After I sent the email, I got a bunch of 'could not be delivered' replies, plus a number of people did actually reply, so I've been having conversations with them about this and that.

My goal is to clean up my contact list by removing all the people whose addresses have bounced back. And then close this whole chapter, unnerved but wiser. Heavy sigh.

#PhishingAttack, ramifications of

OpenAI Confirms Data Exposure After Mixpanel Breach; API Users Warned Of Phishing Risks

https://fed.brid.gy/r/https://in.mashable.com/tech/103018/openai-confirms-data-exposure-after-mixpanel-breach-api-users-warned-of-phishing-risks

Hàng trăm sinh viên Đại học Western Sydney (Úc) hoang mang khi nhận được email giả mạo thông báo "thu hồi bằng tốt nghiệp". Nhà trường xác nhận đây là cuộc tấn công lừa đảo mạng, không đến từ hệ thống chính thức, và đã chuyển vụ việc cho cảnh sát New South Wales điều tra. Sinh viên được khuyến cáo không mở link hay cung cấp thông tin cá nhân từ email đáng ngờ.

#CyberSecurity #PhishingAttack #Education #ĐạiHọcWesternSydney #AnToànMạng #LừaĐảoTrựcTuyến #GiáoDục #TinTứcÚc #CampusNews #TinTứcSinhVi

VoidProxy phishing-as-a-service bypasses MFA & SSO for Microsoft 365/Google accounts. Okta Threat Intelligence reveals sophisticated AitM attacks defeating modern authentication. Enterprise security teams: reassess your defenses NOW.

#SecurityLand #ThreatHorizon #CyberSecurity #PhishingAttack #EnterpriseSecurity #AitM #Phishing #VoidProxy

Read More: https://www.security.land/voidproxy-emerges-as-advanced-phishing-as-a-service-platform-targeting-enterprise-authentication-systems/

OneDrive Phishing Attack Targets Corporate Executives for Credential Theft
https://gbhackers.com/onedrive-phishing-attack/

#Infosec #Security #Cybersecurity #CeptBiro #OneDrive #PhishingAttack #CorporateExecutives #CredentialTheft

Le cyberespace est-il sous tension ?

Les cyberattaques ne sont plus l’exception, elles sont devenues la règle. Et il faut vivre avec. Google, Orange et même l’armée argentine figurent parmi les dernières victimes d’une vague coordonnée qui expose des milliards de données sensibles.

Derrière ces opérations : des groupes de hackers aux motivations financières et géopolitiques, capables d’exploiter la moindre faille dans nos infrastructures numériques. Une alerte mondiale qui rappelle que la souveraineté numérique n’est plus un luxe, mais une nécessité vitale.

https://librexpression.fr/tensions-dans-le-cyberespace

#Belgique #Chine #cyberattack #databreaches #europe #France #Google #informatique #librexpression #ORANGE #PhishingAttack #ransomware #russie #shinyhunters #spearphishing #threats

(Crédits : Ron Lach/Pexels)

#ShinyHunters + Scattered Spider?

New campaign targets Salesforce with vishing, fake "connected apps," and data exfiltration. High-profile victims in retail, aviation, and insurance.

🔒Your Salesforce data deserves better protection.
#Phishing #Salesforce #PhishingAttack

PyPI maintainers alert users to email verification phishing attack
https://securityaffairs.com/180585/hacking/pypi-maintainers-alert-users-to-email-verification-phishing-attack.html

#Infosec #Security #Cybersecurity #CeptBiro #PyPImaintainers #AlertUsers #EmailVerification #PhishingAttack

Phishing Attack Spoofs Facebook Login Page to Capture Credentials
https://gbhackers.com/phishing-attack-spoofs-facebook-login-page/

#Infosec #Security #Cybersecurity #CeptBiro #PhishingAttack #Facebook #LoginPage #CaptureCredentials