In the contemporary landscape where fashion and technology merge, even the most renowned brands face risks associated with the digital age. This month, the luxury fashion titan Dior reported a cyberattack that may have compromised sensitive customer information. A message it sent to customers read: “We are writing to inform you that, on May 7, […]
The FBI has recently issued a warning about an increase in scam websites that offer free online file conversion services. Rather than providing genuine conversions, these sites often download malware onto victims’ computers. The FBI emphasized the risk of malware leading to ransomware attacks and the installation of browser hijackers and adware from similar sites. […]
CISO Update #77 Attackers frequently target help desks to gain unauthorized access to user accounts. This is achieved through social engineering tactics, where scammers impersonate legitimate users and request password resets. Scammers will fabricate scenarios that require immediate password resets. They often use urgency or authority to pressure help desk personnel into bypassing standard verification […]
Stay vigilant online! FIT’s 2025 Cybersecurity Training is now live! This training equips our employees with essential cyber security training to identify and combat threats and protect personal and institutional data. This mandatory training for faculty and staff is updated annually and is available through our vendor, Knowbe4. The training is 30 minutes long, […]
Preauthorized purchase scams involve fraudsters posing as representatives from well-known retailers like Walmart, Amazon, or Apple. They falsely claim a large unauthorized purchase has been made on the victim’s account, often creating a sense of urgency to pressure them into action. “A preauthorized purchase of an Apple MacBook Pro and Apple AirPods is being ordered […]
Here’s a story about a malicious application that almost seems like it needs to be an April Fools’ Day joke, but unfortunately it’s all too real. Security researchers have uncovered a strain of Android malware that can secretly intercept your phone calls. Disguised as a mobile app from popular South Korean banks, KB (Kookmin Bank) […]
Amazon recently launched a new product, called Amazon One, that claims to simplify the everyday shopping experience by putting your payment method quite literally in the palm of your hand. Walk into any one of several Amazon four-star locations around the country to set up this service—all you need is your hand, a mobile number, […]
This month, in recognition of National Cybersecurity Awareness Month and Halloween, we wanted to outline a “spooky” vulnerability in Apple’s Express Transit feature. Cybersecurity researchers from the University of Birmingham and University of Surrey have revealed a flaw which could allow hackers to bypass Apple’s security functions and make contactless payments even with the screen locked. The […]
This month we’re going to look at a growing phenomenon that pulls together a couple of themes that we’ve touched on in these updates and in other aspects of our Cybersafe campaigns: online misinformation, attackers taking advantage of crises in the news, and oversharing online. Recently an industry has emerged of people selling fake vaccination […]
One of the recurring themes of these monthly updates has been the growing arsenal of methods that bad guys have at their disposal to attack us. This month brings together two of those methods: IoT devices and unverified content. IoT stands for “internet of things” and refers to all those non-computer devices that connect to […]