Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Russian state-sponsored threat actor “COLDRIVER” is launching phishing campaigns against “high profile individuals in NGOs, former intelligence and military officers, and NATO governments,” according to researchers at Google’s Threat Analysis Group (TAG). “COLDRIVER continues its focus on credential phishing against Ukraine, NATO countries, academic institutions and NGOs,” TAG says.

I am not scared of AI. What I mean is that I do not think AI is going to kill humanity Terminator-style. I think AI is going to be responsible for more cybercrime and more realistic phishing messages, but it is already pretty bad. Social engineering, without AI, is already involved in 70% - 90% of successful cyber attacks.

BleepingComputer describes a phishing scam that’s been running rampant on Facebook for the past several months, in which threat actors use hacked accounts to post links to phony articles implying that someone has been killed in an accident. The Facebook posts have captions like “I can't believe he is gone,” accompanied by thumbnails of news articles involving car accidents or crime scenes.

Background verification involves gathering details about a candidate’s work history, criminal record, academic qualifications, and proof of residence. This step is critical in the lengthy and intricate process of hiring and onboarding. It means that applicants might experience a delay as employers thoroughly review their employment backgrounds. The transition from completing background checks to reaching a “good to hire” decision usually spans 3-5 days.

In the ever-evolving landscape of the sharing economy, where trust is the currency and safety is paramount, the decision to rent a room in a stranger’s home or rely on someone you’ve never met for a ride home is not taken lightly. The success of companies in this dynamic sector hinges on their ability to establish and maintain trust and safety.

In the vast landscape of the internet, where information and services flow freely, the need to protect minors from age-restricted content has become more critical than ever. With the rise of online platforms dealing in alcohol, gambling, and adult-themed material, the battle between age verification and age gating has taken centre stage.

In today’s digital age, marked by advanced artificial intelligence and a heightened risk of identity fraud, the authenticity of individual identities has become a cornerstone concern for businesses. This challenge is acutely felt in the realm of employment screening, where the verification of candidate identities is not just a procedural step but a crucial safeguard in the integrity of the hiring process.

In today’s educational landscape, the integration of technology has fundamentally altered the way institution’s function. Among the plethora of technological advancements, the implementation of Student Attendance Management Systems has stood out as a game-changer. These systems, often referred to as online attendance management systems or attendance automation systems, have reshaped the traditional approach to attendance tracking in educational settings.

Modern slavery is a pervasive global issue all businesses must be aware of to ensure fair working conditions, liveable wages, and safe labor practices exist across their supply chain. Some organizations may be surprised to find out that slavery is still a global concern, as individuals often use the term in a historical context. However, this does not change the fact that victims of modern slavery continue to suffer behind closed doors around the globe.

Tracking key performance indicators (KPIs) will allow your organization to assess and elevate its third-party risk management (TPRM) program. By monitoring specific metrics over time, your risk management team will be able to reveal your TPRM program’s overall health and particular areas where personnel can implement changes to improve localized performance. According to one 2023 study, about 98% of organizations worldwide are connected to at least one breached third-party vendor.