CyberHoot

Learn about Microsoft’s Authquake MFA flaw, how hackers bypassed authentication, and key steps to protect your accounts.

This newsletter summarizes cybersecurity news from December, and boy there are some big events that happened.

Fake Email Phishing is broken in many ways. Google researchers liken it to early fire drills that caused more harm than good. Empirical research shows users clicking more not less after fake email phish testing. End users universally complain as do IT departments when chaos breaks out after sanctioned fake email testing. Enter HootPhish, a solution that eliminates the negatives, and empowers end users to spot and avoid this scourge of modern internet email.

Learn how over 2,000 Palo Alto Networks firewalls were hacked using critical zero-day vulnerabilities and how to stay protected

Discover how AndroxGh0st malware exploits IoT device vulnerabilities, creating powerful botnets for cyberattacks, and learn steps to protect your devices.

Learn about Midnight Blizzard's spear-phishing campaign using malicious RDP files and discover practical tips to stay protected.

Learn how CyberHoot's HootPhish Challenge gamifies phishing detection, helping users quickly and accurately identify phishing threats!

Learn how to protect your Git repositories and cloud credentials following the massive global operation called EmeraldWhale.

This HowTo article shows how to allow-list Avanan in Google Workspace.

This HowTo article shows how to allow-list Avanan in Microsoft O365.