SafeGuard Cyber’s Post

This is an example of the next generation of #phishing attacks that can defeat Multi-Factor-Authentication (MFA). This is exactly what we predicted in Oct 2022 when we wrote this article: “Multi-Factor Authentication will soon be useless” https://lnkd.in/gjQZdaPX #cybersecurity

Scanning #QR codes can be even more dangerous than clicking on malicious links, as phones are often less secure than the rest of the company’s network, AT&T explains." Be like Doomsday Dave, just don't scan any QR codes... #QRCodes #cybercrime #quishing #phishing #scams #fraud #cybersecurity

Here's a friendly reminder to think twice before clicking on links in text messages -- especially from senders you do not recognize. The latest smishing scams are masquerading as messages from UPS and USPS claiming they cannot reach you and need additional information. Learn more about what smishing is here! https://lnkd.in/e6PUub-8 Eye on Tech #cybersecurity #smishing #scams #smsphishing

The threat actors behind the BazaCall call back phishing attacks have been observed leveraging Google Forms to lend the scheme a veneer of credibility. https://ow.ly/8lic50QiVpE #phishing #cybersecurity #itsecurity #googleforms

We wish this was talked about more, so we at Dapple Security will talk about it every chance we get...most MFA does not protect us any better than a plain password does. And your company does not have to be a big fish to be phished! Cheap toolkits are making MFA bypass ubiquitous. Informed companies will select a more modern, phishing-resistant MFA such as those that comply with FIDO Alliance #FIDO2 standards. #phishing #MFA #cybersecurity https://lnkd.in/g2dR_C8Z

New research found that in the first three months of 2024, the number of attacks that passed detection increased by 52.2%. This trend highlights the importance of being proactive when it comes to tracking potentially risky behavior.  https://lnkd.in/e7cumj5u #phishing #fraud #fraudprevention

QR codes are often an overlooked attack vector, yet they pose significant risks. It’s essential for organizations to implement policies to manage these risks effectively. As a senior security professional with extensive experience in policy governance, I’ve seen how convenience can overshadow security. The recent rise in QR code phishing attacks, especially those exploiting platforms like Microsoft Sway, highlights the importance of including QR code management in our security awareness training. Is your organization addressing this potential gap? #securityawareness #riskmanagement #phishing #CISO

MFA/2FA: Attackers Successfully Bypassed MFA "The researchers noted that it is “relatively simple” for attackers to abuse legitimate third-party solutions like Dropbox for phishing attacks, rather than relying on their own infrastructure." "[Researcher] Darley noted that generative AI technologies are having a huge impact in enabling attackers to craft more sophisticated phishing messages." https://lnkd.in/eu7R8GcN #MediaHighlights #infosecurity #darley #mfa #2fa #totp #dropbox #breach #insecure #security #cybersecurity #infosec #ictsecurity #itsecurity #threat #ai #phishing

Cybercriminals are now using digital document publishing sites like FlipSnack, Issuu, and Marq for #phishing and credential theft. These sites look legitimate, making them harder to detect. Learn more: https://lnkd.in/dKkeJGeC #cybersecurity #hacking #infosec