X-Industry

The education sector tops the list of industries with the most vulnerable cloud assets, APIs and web applications, according to a new study from CyCognito.  The security vendor analyzed a random sample of two million internet-exposed assets between January and June, simulating real-world attacker behavior including:

• Black-box pen testing using over 90,000 exploit modules, credential stuffing simulations, data exposure detection and more
• Dynamic application security testing to spot runtime web a

Akamai recently published a report detailing criminal activity targeting the retail, travel, and hospitality market segments with attacks of all types and sizes between July 2018 and June 2020.  The report also includes numerous examples of criminal ads from the Dark web illustrating how they cash in on the results from successful attacks and the corresponding data theft.

So, what is credential stuffing?  Please visit and read our full report at: https://redskyalliance.org/xindustry/credential-s

Activity Summary - Week Ending 16 October 2020:

• Red Sky Alliance identified 52,441 connections from new unique IP addresses
• Analysts observed 159 unique email accounts compromised with Keyloggers
• 2,640 new IP addresses were observed participating in various Botnets
• SlothfulMedia
• New Dridex Malware Campaign
• Mobile Money being attacked in the retail world in Africa
• Securing Your Cell Enterprise against Retail Attacks
• Sam's West, Inc. Retail Giant - Analysis
• No Justice, No Peace at Sam’s Club
• Star