March 27, 2024

CyberSec Roundup
A synopsis of the Latest Cybersecurity News

Cayman Avoids Breach

In February the Cayman Islands Government was hit with a cyber-attack but none of its systems were compromised nor data exposed, according to the Cyber Security Office. This claim was backed up by an independent review conducted by Deloitte. The company is still accessing the attack and will provide more details on the incident shortly.

Tech Giant Hacked

Tokyo-based Fujitsu Limited confirmed that malware was found on its IT systems, and customer information was stolen by threat actors. The company didn’t give details on how the breach occurred but confirmed the breach was limited to the offices in Japan.

Sekoia Detects New Phishing Kit

The cybersecurity analysts at Sekoia discovered a phishing kit, called Tycoon 2FA, that aims to harvest Microsoft 365 and Gmail session cookies to bypass the MFA process. The sophisticated attack is starting to increase in popularity and starts with an email with an attachment, URL, or QR code that redirects users to Tycoon 2FA phishing pages, where users eventually are prompted for their credentials at a fake login page. As phishing is still one of the most popular attack vectors, people must be very careful when following links from emails.

By: David Pinder
IT & Cybersecurity Consultant
Certified Ethical Hacker (Master) | CCSK | AZ-500