News

Latest news on the subject of B2B cyber security >>> PR agencies: Add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

Phishing: 200.000 emails imitating Microsoft, McAfee and Adobe
B2B Cyber ​​Security ShortNews

Security researchers have discovered 200.000 phishing emails that misused URL information to disguise phishing links. The scam was first observed on January 21, 2025, and is still ongoing, although the daily threat volume is decreasing. The cybercriminals behind this campaign aim to target as many organizations and individuals as possible. The hackers do not appear to be targeting specific industries, so a wide range of companies could be targeted by the attacks unless they have an advanced email security solution. Because the operational mechanisms of this campaign are quite sophisticated, most…

Read more

Phishing attacks via SVG graphic files
SophosNews

An analysis shows a sharp increase in phishing attacks with SVG graphic files. A lot of malware is currently being distributed via the SVG graphic and image files used. This has been the observation of Sophos X-Ops since January 2025. In a new report from Sophos X-Ops, the security experts report a sharp increase in malware and phishing attacks carried out using SVG files. Cyber ​​criminals are increasingly using the widely used SVG graphic format for their own purposes and are trying to circumvent the automatic detection of phishing and spam protection solutions. The malicious machinations with the SVG image format have been under observation since 2024. The scalable...

Read more

EMA: Cloud Connector for Microsoft 365
EMA: Cloud Connector for Microsoft 365 Image: Bing - AI

For easier connection of the data management and archiving solution EMA to Microsoft 365 Exchange Online and to local Exchange infrastructures, it is now even more secure and user-friendly. The new version of the ARTEC Cloud Connector for Microsoft 365 is now available. The further developed Cloud Connector offers a new web interface that provides an immediate first overview of the current system status with three clearly defined icons, each color-coded according to the status. In addition to the quick overview, the new Cloud Connector can also display more comprehensive information. For example, the last data query by EMA...

Read more

Negligence: No .de DMARC protection against phishing
Negligence: No .de DMARC protection against phishing Image by Gerd Altmann on Pixabay

Most organizations with a .de domain are inadequately protected against phishing and spoofing. A study by EasyDMARC has shown that only 4,55 percent of organizations with the top-level domain .de use DMARC for email authentication. Google & Co, on the other hand, already reject emails without DMARC. The email security provider EasyDMARC has examined organizations with a .de domain to find out how they are using DMARC (Domain-based Message Authentication, Reporting and Conformance). The email security experts found that of 6.428.99 country domains in Germany, only 292.796 use the DMARC policy. This corresponds to 4,55 percent. Completely protected against phishing...

Read more

Report: 40 percent more phishing worldwide
B2B Cyber ​​Security ShortNews

The current spam and phishing report from Kaspersky for 2023 speaks a clear language: Users in Germany are still a popular target of phishing attacks: around 34 million phishing attacks in 2023. In total, the anti-phishing identified Kaspersky services worldwide reported an increase in attempts to access phishing links by over 40 percent to nearly 710 million. This significant increase confirms the trend from 2022, when the number had already doubled to 508 million compared to the previous year. Messaging services continue to be among the most popular targets for phishing scams. In 2023, Kaspersky solutions prevented…

Read more

Russian APT group attacked Microsoft 
B2B Cyber ​​Security ShortNews

According to its own information, Microsoft was attacked by Midnight Blizzard on January 12, 2024. The Russian-sponsored actors apparently had access to email accounts of high-ranking employees. However, the attackers are said to have had no access to the customer environments. On January 12, 2024, the Microsoft security team said it recognized an attack by a nation state on its corporate systems. A response process was then activated to disrupt the malicious activity, mitigate the attack, and deny further access to the threat actor. Microsoft has identified the threat actor as Midnight Blizzard, also known as Nobelium,…

Read more

Phishing: Extremely high number of malicious emails with Adobe InDesign links
B2B Cyber ​​Security ShortNews

A new phishing scam is on the rise that abuses Adobe InDesign and uses it to distribute malicious links. Apparently the campaign was so successful that Barracuda saw an increase in said phishing emails from 75 to 2.000 per day. Phishing attacks are becoming increasingly sophisticated, using various methods to evade detection and trap victims. There is currently an increase in phishing attacks that abuse Adobe InDesign, a well-known and trusted document publishing system. Increase by a factor of 30: Phishing with Adobe InDesign links According to Barracuda telemetry, the…

Read more

Welcome Distrust: Cybersecurity and ChatGPT
Welcome Distrust: Cybersecurity and ChatGPT

So far, organizations have had their biggest weakness in the fight against cybercrime well under control: employees have been successfully trained and sensitized. But with AI-generated social engineering scams comes a new wave. Until the technology is mature, humans have to play the watchdog, says Chester Wisniewski, Field CTO Applied Research at Sophos and makes three predictions for the future. Organizations have grappled with one of their most critical cybersecurity components: their people. They counter the "human weakness" with continuous training and now often trust that users, for example, avoid potential phishing attacks due to linguistic irregularities...

Read more

Phishing trap: Malicious HTML attachments in emails
Phishing trap: Malicious HTML attachments in emails

HTML attachments are commonly used in email communication. They are particularly common in system-generated e-mail reports that users receive in order to be directed to the actual report via a link. Dangerous: because this is where malicious phishing links are hiding more and more often. In this way, companies can protect themselves better. A comment from Dr. Klaus Gheri, General Manager Network Security at Barracuda. In an attack, hackers often take advantage of this form of email, embedding HTML attachments in emails disguised as reports to trick victims into clicking phishing links. So can…

Read more

Omikron boosts attacks on email accounts
Omikron boosts attacks on email accounts

As long as people in general have been struggling with the Corona pandemic, companies have been exposed to Corona-related attacks by cybercriminals on their email inboxes. Because depending on which topic is currently in focus in connection with Covid-19, the hackers also change course and switch to the current pandemic topics. In March 2020, Covid-related phishing attacks skyrocketed by more than 667 percent. And with the advent of vaccination campaigns came a new wave of email-based threats. The latest Omikron variant is currently not only leading to a massive increase...

Read more