What are HTTP security headers? HTTP security headers are those HTTP headers that are related specifically to security, exchanged between a client (like a web browser) and a server to define the security of HTTP communication. These include dedicated security headers and several others that can indirectly affect privacy and security. Setting the right security […]
According to research from Proofpoint, a new malware campaign called “Voldemort” has been growing. The campaign reportedly started on August 5, 2024, and has affected over 70 organizations globally with more than 20,000 emails sent. The majority of the targets are from the insurance, transportation, aerospace, and education sectors. While the identity of the threat […]
The Federal Trade Commission (FTC) will require security camera firm Verkada to develop and implement a comprehensive information security program to settle allegations the company failed to use appropriate information security practices, which allowed a hacker to access customers’ security cameras. Under a proposed order, which must be approved by a federal judge before it […]
The Cybersecurity and Infrastructure Security Agency (CISA) announced its Voluntary Cyber Incident Reporting portal is now live. This portal is part of an ongoing effort to support cyber incident reporting, providing users with resources to help them understand who should report cyber events, when and why these incidents should be reported, what to report, and […]
OPSWAT and Dark Survey conducted a joint study that revealed concerns from IT and corporate leaders regarding organizational preparedness. The survey findings indicate a lack of readiness for advancing cybersecurity threats, with only 25% of respondents feeling fully equipped to handle DDoS attacks. Preparedness levels for threats like botnets, Advanced Persistent Threats (APTs), API security […]
It was recently announced by Young Consulting that a data breach affecting Blue Shield of California subscribers occurred in late August 2024. During April 2024, an unauthorized actor gained access to Young Consulting’s computer network and downloaded certain files. It was later determined that this data belonged to Blue Shield of California subscribers. Young Consulting […]
Recent findings from the GuidePoint Research and Intelligence Team have shed light on a sophisticated phishing campaign that has targeted more than 130 organizations. This campaign focuses on employees by imitating the VPN providers used by their respective organizations, registering domain names that closely resemble the legitimate ones. Insights from Security Experts Patrick Harr, CEO […]
Microsoft was alerted to a vulnerability in early 2024 that could potentially lead to the theft of sensitive user information. This vulnerability, which has since been fixed, impacted Microsoft 365 Copilot and introduced the possibility of ASCII smuggling. As a result of the vulnerability, a series of attack methods could be strung together to create […]
Bot attacks and security concerns were examined in a recent report by Kasada. The report revealed that 98% of organizations that were targeted by bots in the previous year experienced a loss in revenue. The most significant threats were web scraping (web crawling) and account fraud, leading to over 5% revenue loss for more than […]
Software supply chain attacks have been occurring at a rate of at least one every two days in 2024. According to research from Cyble, these attacks are on the rise globally, with the United States being the most targeted country. Other frequently targeted countries include the United Kingdom, Australia, Germany, India, and Japan. Between February […]
We hate spam, we obviously will not spam you!
Copyright © TSP 2024. All rights reserved. Designed by Enovate LLC