Keep Aware@keepaware_sec

Simple security built into every workday

Joined August 2022
A writeup of our findings so far from the Cyberhaven extension compromise, and why browser detection and response capabilities are so important. keepaware.com/blog/cyberhave…

Cyberhaven Browser Extension Compromise

Cyberhaven, a data loss prevention cybersecurity company, suffered a breach through the compromise of a Chrome Web Store administrative account. A malicious extension was published under its account.

keepaware.com
269
Malicious Chrome extensions with 75M installs removed from Web Store - @billtoulas bleepingcomputer.com/news/se…

Malicious Chrome extensions with 75M installs removed from Web Store

Google has removed from the Chrome Web Store 32 malicious extensions that could alter search results and push spam or unwanted ads. Collectively, they come with a download count of 75 million.

bleepingcomputer.com
52
71
17,638
Researchers discovered another large-scale adversary-in-the-middle (AiTM) campaign targeting #Google Workspace enterprise users with advanced #phishing kits that bypass multi-factor authentication. Read details: thehackernews.com/2022/08/re… #infosec #cybersecurity #hacking

Researchers Warn of AiTM Attack Targeting Google G-Suite Enterprise Users

Researchers discovered another large-scale adversary-in-the-middle (AiTM) phishing campaign targeting Google Workspace enterprise users.

thehackernews.com
3
60
80
Keep Aware retweeted
Threatpost
@threatpost
27 Aug 2022
Four newly discovered attack paths could lead to PII exposure, account takeover, even organizational data destruction. threatpost.com/risks-okta-ss…

Authentication Risks Discovered in Okta Platform

Four newly discovered attack paths could lead to PII exposure, account takeover, even organizational data destruction.

threatpost.com
10
11
Keep Aware makes web security and user awareness simple. Get in touch to see how. keepaware.co/introducing-kee… #securityawareness #phishing #CyberSecurityAwareness

Keep Aware | Enterprise Browser Security

Keep Aware transforms the web browser into a cornerstone of enterprise security, providing robust, real-time defense against advanced challenges such as phishing, credential theft, social engineeri...

keepaware.com
2
3
Twilio breach let hackers gain access to Authy 2FA accounts - @Ionut_Ilascu bleepingcomputer.com/news/se…

Twilio breach let hackers gain access to Authy 2FA accounts

Twilio's investigation into the attack on August 4 reveals that hackers gained access to some Authy user accounts and registered unauthorized devices.

bleepingcomputer.com
1
51
81
Keep Aware retweeted
Threatpost
@threatpost
23 Aug 2022
Networking giant says attackers gained initial access to an employee’s #VPN client via a compromised Google account. threatpost.com/cisco-network…

Cisco Confirms Network Breach Via Hacked Employee Google Account

Networking giant says attackers gained initial access to an employee’s VPN client via a compromised Google account.

threatpost.com
2
14
15
Twilio hackers also breached over 130 orgs in massive phishing attack - @billtoulas bleepingcomputer.com/news/se…

Twilio hackers hit over 130 orgs in massive Okta phishing attack

Threat analysts have discovered the phishing kit responsible for thousands of attacks against 136 high-profile organizations that have compromised 9,931 accounts.

bleepingcomputer.com
3
73
102
Keep Aware retweeted
Lance Spitzner@lspitzner
25 Aug 2022
One of my favorite ways to visualize why people have become the primary attack vector. Over the past 20 years we have become very good at securing Operating Systems, but have done very little to secure the HumanOS, i.e. making security simple for people. sans.org/mgt433
3
9
14
Load more