Black Arrow Cyber Threat Intelligence Briefing 06 December 2024:

-Generative AI Makes Phishing Attacks More Believable and Cost-Effective

-Nearly Half a Billion Emails to Businesses Contain Malicious Content

-65% of Office Workers Bypass Cyber Security to Boost Productivity

-Cyber Warfare Rising Across EU in Bid to 'Destabilise' Member States

-INTERPOL Arrests 5,500 in Global Cyber Crime Crackdown, Seizes Over $400 Million

-Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defences

-Russian Money Laundering Networks Uncovered Linking Narco Traffickers, Ransomware Gangs and Kremlin Spies

-UK Underestimates Threat of Cyber Attacks from Hostile States and Gangs

-Why You Must Beware of Dangerous New Scam-Yourself Cyber Attacks

-Security Must Be Used as a Springboard, Not Just a Shield

-Why Your Cyber Insurance May Not Cover Everything: Finding and Fixing Blind Spots

-Cyber Criminals Already Using AI for Most Types of Scams, FBI Warns

Black Arrow Cyber Threat Intelligence Briefing 29 November 2024:

-Phishing Attacks Dominate Threat Landscape in Q3 2024

-Rising Cyber Threat Driven by Single Point of Failure Risk

-Cloned Customer Voice Beats Bank Security Checks

-Avoiding Cyber Complacency as a Small Business

-Your IT Infrastructure May Be More Outdated Than You Think

-Cyber Attacks Cost UK Businesses £44 Billion During Past 5 Years, Howden Survey

-83% of Organisations Reported Insider Attacks in 2024

-Blue Yonder Ransomware Attack Disrupts Supply Chains Across UK and US

-North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn

-UK Scam Losses Surge 50% Annually to £11.4bn

-In a Growing Threat Landscape, Companies Must do Three Things to Get Serious About Cyber Security

-Russian Threat Actors Poised to Cripple Power Grid, UK Warns

Black Arrow Cyber Threat Intelligence Briefing 22 November 2024:

-Cyber Security Dominates Concerns Among the C-Suite, Small Businesses and the Nation

-Cyber Criminals Don’t Take Holidays Warns Expert

-The Urgent and Critical Need to Prioritise Mobile Security

-Companies Take Over Seven Months to Recover from Cyber Incidents

-Data is the New Uranium – Incredibly Powerful and Amazingly Dangerous

-‘Scam Yourself’ Attacks Just Increased Over 600% - Here’s What to Look For

-60% of Emails with QR Codes Classified as Spam or Malicious

-Coalition Highlights 68% Surge in Ransomware Claims Severity, as Active Ransomware Groups Increase 56%

-One Deepfake Digital Identity Attack Strikes Every Five Minutes

-Supply Chain Attacks Up Over 400 Percent Since 2021

-Rethinking Cyber Security from Cost Centre to Value Driver

-Majority of UK Businesses Lack Readiness for Rising AI-Led Phishing Attacks, Reveals Survey

Black Arrow Cyber Threat Intelligence Briefing 15 November 2024:

-Massive MOVEit Vulnerability Breach: Hacker Leaks Employee Data from Amazon, McDonald’s, HSBC, HP, and Potentially 1000+ Other Companies

-Phishing Attacks Surge in 2024 as Cyber Criminals Adopt AI Tools and Multi-Channel Tactics

-Critical Vulnerabilities Persist in Finance and Insurance Sectors

-AI-Based Attacks Top Gartner’s List of Emerging Threats – Again

-Here Are the Top 10 Passwords for 2024, and They're All Embarrassing

-Mishing: The Rising Mobile Attack Vector Facing Every Organisation

-80% Of Surveyed Businesses Don’t Have Plans for an AI-Related Crisis

-BoE and Regulators Set Out Digital Rules to Cut Cyber Attack Risks

-Employees Are Hiding Their AI Use from Their Managers. Here's Why

-CISOs in 2025: Balancing Security, Compliance, and Accountability

-48% of Small Businesses Don’t Offer Cyber Security Training

-Thousands of Employees Could be Falling Victim to Obvious Phishing Scams Every Month

Black Arrow Cyber Advisory 13 November 2024 – Microsoft, Ivanti, Adobe, Fortinet, Citrix, AMD, Intel, Chrome and Zoom Security Updates

Black Arrow Cyber Threat Intelligence Briefing 08 November 2024:

-Fake Copyright Infringement Emails Spread Rhadamanthys Malware

-Use Public Wi-Fi? You Might Not Want to After You Read This

-New MacOS Malware Linked to North Korean Hackers

-Disaster Recovery Planning is Key in the Modern-Day Business Environment

-The Biggest Underestimated Security Threat of Today? Advanced Persistent Teenagers

-Ransomware Attacks Hit Record Levels in 2024 Despite Law Enforcement Crackdowns

-The West Must Respond to Russia’s Rapidly Escalating Hybrid Warfare

-China’s Elite Hackers Expand Target List to European Union

-How Early-Stage Companies Can Go Beyond Cyber Security Basics

-How AI Will Shape the Next Generation of Cyber Threats

-Cyber Security Trends and Tips for Small and Medium Businesses to Stay Protected

-What are the key Threats to Global National Security?

Black Arrow Cyber Threat Intelligence Briefing 01 November 2024:

-Banks and Regulators Warn of Rise in ‘Quishing’ QR Code Scams

-Russia Carrying Out Targeted Attacks In UK, Microsoft Warns

-Spoof Eventbrite Phishing Emails Lure in Victims in Major Attack

-Business Email Compromise Scams Dominate Q3 2024 Threats

-This Nasty Android Trojan is Hijacking Calls to Your Bank and Sending Them to Hackers

-What Military Wargames Can Teach About Cyber Security

-Businesses Expect Cyber Threats to Rise, but Aren’t Ready for Them

-The Overlooked Importance of Identifying the Riskiest Users

-Hackers Targeted a $12 Billion Cyber Security Company with a Deepfake of Its CEO. Here's Why Small Details Made It Unsuccessful.

-Small Businesses Boosting Cyber Security as Threats Grow

-The Rise of the vCISO: From Niche to Necessity?

-Five Eyes Agencies Offer Security Advice for Small Businesses

Black Arrow Cyber Threat Intelligence Briefing 25 October 2024:

-Overconfidence in Cyber Security: A Hidden Risk

-Gallagher Re Study Links Cyber Security Gaps to Higher Insurance Claims

-AI and Deepfakes Fuel Phishing Scams, Making Detection Harder

-AI-Generated Cyber Threats Have C-Suite Leaders on Edge

-The Single Biggest Vulnerability in Your Cyber Security Is You

-Why Cyber Security Acumen Matters in the C-Suite

-Cyber Incidents Surge, Damaging Brand Trust and Business Relationships – Hiscox

-Cyber Resilience vs Cyber Security: Which is More Critical?

-Phishing Attacks Snare Security and IT Leaders

-CISO Role Gaining Influence as 20% Report Directly to CEOs, Finds Survey

-Threat Actors Are Exploiting Vulnerabilities Faster Than Ever

-Employees Lack Fundamental Security Awareness

Black Arrow Cyber Threat Intelligence Briefing 18 October 2024:

-70% of Senior Executives Targeted by Cyber Attack in Past 18 Months, New Study Reveals

-Defenders Must Adapt to Shrinking Exploitation Timelines

-Supply Chain Vulnerabilities are Facilitating a Surge in Ransomware

-Limited Visibility and Tool Proliferation Prevent CISOs from Detecting Breaches

-Organisations Need to Better Prepare Swiftly from Cyber Attacks, New NCSC Head Warns

-Microsoft Logs 600 million Identity Attacks Per Day as Nation-States Team Up with Cyber Criminals for Attacks

-Over 90% of Phishing Campaigns Lead Victims to Malware

-Here’s How Attackers Are Getting Around Phishing Defences

-Firm Hacked After Accidentally Hiring North Korean Cyber Criminal

-Rampant Ransom Payments Highlight Need for Urgent Action on Cyber Resiliency

-October is Cyber Security Awareness Month – It’s a Good Time to Update Your Training Programme

-Phishing Tactics: The Top Attacks Trends in 2024

Black Arrow Cyber Threat Intelligence Briefing 11 October 2024:

-Your IT Systems Are Being Attacked. Are You Prepared?

-Board-CISO Mismatch on Cyber Responsibility, NCSC Research Finds

-Mounting Phishing Attacks Enabled by AI, Deepfakes

-AI is Most Serious Threat to Orgs, According to Security Professionals

-MI5 Chief Warns of Cyber Threats to the UK

-Walking the Tightrope Between Innovation and Risk

-Ransomware Severity Up 68% in First Half of 2024

-31 New Ransomware Groups in 12 Months

-Lack of Cyber Risk Quantification Leaves Companies Financially Exposed: PwC Report

-Software Supply Chain Weaknesses are Increasingly Putting Businesses at Risk

-UK Businesses Cite Economic Risks and Cyber Crime as Top 2024 Concerns: Marsh McLennan

-Cloud Security Risks Surge as 38% of Firms Face Exposures

-Insider Threat Damage Balloons as Visibility Gaps Widen

Black Arrow Cyber Advisory 09 October 2024 – Microsoft Patch Tuesday and Adobe Security Updates

Black Arrow Cyber Threat Intelligence Briefing 04 October 2024:

-How Snoozing on Cyber Security Fails Modern Businesses

-Cyber Criminals Capitalise on Poorly Configured Cloud Environments

-90% of Cyber Security Incidents Could Be Avoided, Survey Reveals

-The Cyber Industry Needs to Accept It Can't Eliminate Risk

-Cyber Teams Say They Can’t Keep Up with Attack Volumes

-C-Level Executives are a Weak Point for Cyber Security

-Email Phishing Attacks Surge as Attackers Bypass Security Controls

-Security Threats Are More Pressing Than Ever for Business Leaders, With Cloud Worries Taking Top Spot

-Ten Million Brits Hit by Fraud in Just Three Years

-Is the Weakest Link in Cyber Security Becoming Even Weaker?

-Cyber Incidents are the Achilles Heel for Major UK CEOs, Report Finds

Black Arrow Cyber Threat Intelligence Briefing 27 September 2024:

-Cyber Threats Top the 2024 Travelers Risk Index, Fourth Time in Six Years

-Preparing for the Cyber Security and Fraud Risks of Deepfakes: What Executive Teams Need to Know

-Organisation Data on Dark Web Increases Cyber Attack Risk: Marsh McLennan

-84 Percent of Enterprises Suffered Security Incidents in the Last Year

-It's Estimated That 91% of Cyber Attacks Begin with Phishing Emails

-82% of Phishing Sites Now Target Mobile Devices

-UK Firms Are Dangerously Overconfident About Paying Ransoms to Cyber Criminals

-Preparing To Fail is a Vital Part of Cyber Security

-Over a Third of Employees Secretly Sharing Work Info with AI

-Fortifying the Weakest Link: How to Safeguard Against Supply Chain Cyber Attacks

-Underfunding and Leadership Gaps Weaken Cyber Security Defences

-Racist Network Rail Wi-Fi Hack was Work of Malicious Insider

Black Arrow Cyber Threat Intelligence Briefing 20 September 2024:

-Cyber Threats and AI Disruption Top Business Risks for 2024

-Half of UK Firms Lack Basic Cyber Security Skills

-Beyond A Buzzword: What Resilience in Cyber Really Means

-Do Boards Understand Their New Role in Cyber Security?

-All Smoke, No Fire: The Bizarre Trend of Fake Data Breaches and How to Protect Against Them

-Threat Actors Continue to Utilise HR-Related Phishing Tactics

-80% of Organisations Experienced an Email-Related Security Breach in the Last Year

-The Growing Danger of Visual Hacking and How to Protect Against It

-Cyber Warfare: A Growing Concern for the British Public

-The Rising Cost of Vulnerable APIs and Bot Attacks – A $186 Billion Wake-Up Call for Businesses

-Attackers are Exploiting Vulnerabilities at a Record Pace—Here’s What to Do About It

-What Can Businesses Learn from the Rise of Cyber Espionage?

-When Startup Founders Should Start Thinking About Cyber Security

Black Arrow Cyber Threat Intelligence Briefing 13 September 2024:

-Trustwave Report Highlights Critical Cyber Threats to Financial Services Sector

-Old Habits, New Threats, Why More Phishing Attacks are Bypassing Technical Controls

-Prolific Threat Actor Group Scattered Spider Sets Sights on Finance, Insurance Firms’ Cloud Infrastructure

-Cyber Criminals Target Smaller Firms as Larger Companies Beef Up Security

-The Rise of Deepfakes Means CEOs Need to Rethink Trust

-What now? Ransomware Victim Pays Hacker, but Decryption Key Fails

-UK Regulator to Significantly Reduce Maximum Fraud Losses Banks are Forced to Cover

-Enterprise Mobile Devices See Increased Attacks

-Business Email Compromise Costs $55bn Over a Decade

-Half of IT Decision Makers Have Had to Recover Data from a Backup with a Third Unable to Make Full Recovery

-Insurers and Asset Managers Continue to Invest in Longer Term Cyber Security Planning: Moody’s

-Russia's Top-Secret Military Unit Reportedly Plots Undersea Cable 'Sabotage’

-Think You Could Never Fall Victim to Cyber Crime? Think Again

Black Arrow Cyber Threat Intelligence Briefing 06 September 2024:

-Active Ransomware Groups Surge by 56% in 2024

-Authorised Push Payment (APP) Fraud Dominates as Scams Hit All-Time High

-Phishing Remains Top Cyber Threat, Credential Exposure Incidents Surging

-When Cyber Security Breaches Are Inevitable, It's Time to Call for A New Approach

-Critical infrastructure Sustained 13 Cyber Attacks per Second in 2023

-How Phishing Messages Break Through Email Filters

-Can Every Business Afford to Be a Target?

-To Beat Cyber-Crime Your Business Needs a Cyber Hygiene Review

-UK Public Growing Anxious Over Dependence on IT Systems

-Russia’s Most Notorious Special Forces Unit Tied to Assassinations and Sabotage, Now Has Its Own Cyber Warfare Team

Black Arrow Cyber Threat Intelligence Briefing 23 August 2024:

-Why C-Suite Leaders Are Prime Cyber Targets

-Most Ransomware Attacks Occur Between 1am and 5am When Security Staff are Asleep,

Study Finds

-Companies are Not as Resilient as They Think, Cyber Resilience Overestimation Leads to Business Continuity Issues, Ransom Payments

-Third of Firms Put Money Aside to Pay Cyber Ransoms

-AI-Powered Cyber Threats Are Too Overpowering for Over 50% of Security Teams

-Five Novel Email Phishing Attacks and What to Do About Them

-NFC Traffic Stealer Targets Android Users and Their Banking Info

-91% of Cyber Attacks Targeted Multiple Organisations Using Mass Scanning to Uncover and Exploit Vulnerabilities

-You Really Need to Stop Using Work Laptops for Personal Use. Here's Why

-Human Nature is Causing Our Cyber Security Problem

-Cyber Crime Consolidation: The Big Fish Are Getting Bigger

-Why End of Life for Applications Is the Beginning of Life for Hackers

-Beyond Prevention: Why Breach Readiness Is Your Cyber Security Lifeline