Aggregator

TikTok has found itself at the center of a new scandal following an investigation by 404 Media: through TikTok Shop, vast numbers of GPS trackers and covert audio devices are being sold, brazenly advertised...

The post TikTok Shop Is Selling GPS Trackers and Audio Recorders for Stalking Partners appeared first on Penetration Testing Tools.

The HexStrike AI repository has released HexStrike AI MCP Agents v6.0—a powerful framework for automating penetration tests. The system integrates more than 150 security tools and 12 autonomous AI agents operating through the FastMCP...

The post “Automated and Dangerous”: A New AI Framework Can Run 150+ Hacking Tools Autonomously appeared first on Penetration Testing Tools.

In the latest issue of the hacker magazine Phrack, a vast archive has been published detailing the operations of North Korean cybercriminal groups. The leak includes exploitation techniques, information on compromised systems, and a...

The post “A True Nightmare”: Leaked Archive Reveals a Highly Sophisticated Linux Rootkit appeared first on Penetration Testing Tools.

Cybercriminals have discovered a way to weaponize Cisco’s own security mechanisms against its users. Researchers at Raven have documented a credential theft campaign in which attackers learned to exploit Cisco’s Safe Links technology—a tool...

The post The Ultimate Betrayal: How Attackers Are Weaponizing Cisco’s Own Safe Links to Phish Users appeared first on Penetration Testing Tools.

iOS 18 comes with several privacy and security features that many iPhone users overlook. Knowing how to use them can help you protect your personal information and control which apps can access your data. USB Accessories Lock iOS 18 allows you to control whether accessories can connect to your iPhone, iPad, or iPod touch while it’s locked. By default, this setting is off, which helps prevent unauthorized access to your device through USB or other … More →

The post iOS security features you should use to protect your privacy appeared first on Help Net Security.

根据美国联邦贸易委员会（FTC）数据显示，2024年，60岁及以上的美国人在网络诈骗中损失高达7亿美元，针对老年人的欺诈案件呈急剧上升趋势。

该机构在最新的《消费者保护数据聚焦》中公布的这一数字与前几年相比，三类损失金额均有所增加。值得注意的是，损失超过10万美元的人群，其损失金额较2020年增长了8倍。以下是具体金额分析：

·损失超过10万美元：4.45亿美元

·损失在1万至10万美元之间：2.14亿美元

·损失低于1万美元：4100万美元

2020年的总损失为1.21亿美元，因此2024年的7亿美元损失意味着增长了6倍。与前一年（2023年）相比，60岁以上人群的损失为5.42亿美元，2024年的损失增加了约30%。

60岁以上老年人因诈骗造成的年度损失金额

常见的诈骗手段

联邦贸易委员会强调，2024年针对老年人的常见诈骗手段包括冒充身份、制造虚假危机场景以及电话诈骗。

诈骗者通常会编造谎言制造紧迫感，例如声称受害者的银行账户存在可疑活动、社保号码涉及犯罪，或者电脑感染恶意软件并遭到黑客攻击等。

诈骗者会冒充政府机构（包括联邦贸易委员会）或企业（如微软、亚马逊）的工作人员，假意提出帮助受害者解决所谓的问题。

有报告显示，这些诈骗者会要求人们将资金转出账户，将现金存入比特币自动取款机，甚至将大量现金或黄金交给快递员——而这些都是真正的联邦贸易委员会绝不会做的事情。

联邦贸易委员会提到，这些诈骗大多始于网络，但随后往往会跟进电话，以便在受害者处于脆弱、孤立的状态时加大压力，对其进行情感操控。

老年人之所以经常成为诈骗目标，是因为他们通常拥有较多的金融储备，对权威机构抱有信任或尊重，且对技术的了解相对较少。在许多案例中，这些受害者损失了全部毕生积蓄，甚至是退休账户，导致他们在经济和情感上都遭受重创。

为防范此类诈骗，切勿向陌生来电者或信息发送者转账或分享财务信息。相反，人们应挂断电话，通过公开渠道获取相关机构或公司的联系方式，直接联系核实情况。

尽管2024年60岁以上人群损失的4.45亿美元无疑是一笔巨额数字，但与美国人在2024年因欺诈造成的总损失相比仍相形见绌——根据联邦贸易委员会的数据，全年总损失高达125亿美元。这一数字创下历史新高，较2023年增长了25%，由此可见诈骗造成的损失在持续上升。

The quantum cliff is coming. Q-Day is the point in time when quantum computers become powerful enough to break most data encryption. It is inevitable that legacy algorithms will be undermined and the race is on to proactively migrate to modern tools to protect sensitive data.

In our latest episode of Cybersecurity Insights, I sat down with Michael Fasulo from Commvault to discuss the need and transition to Post-Quantum Cryptography (PQC) standards.

- The universal risks of advancements in quantum computers to undermine current and long-term data security

- Why timing is key to migrate to Post-Quantum Cryptography capabilities before attackers achieve an advantage.

- The challenges that technology and security companies have in successfully migrating to Post-Quantum Cryptography.

- Why organizations should hold vendors responsible for providing secure, user-friendly solutions without additional costs.

- The importance of cryptography agility, allowing organizations to adapt quickly to evolving threats and maintain robust security measures.

Discover how these new algorithms are set to safeguard sensitive data against emerging threats and why crypto agility is essential for future-proofing your security strategy.

Join the conversation and learn how to navigate the complexities of this quantum future.

Sponsored by Commvault

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/

Visit Cybersecurity Insights at https://www.cybersecurityinsights.us

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

The post Defending Enterprise Data Against Quantum Encryption Attacks appeared first on Security Boulevard.