
The Cyber Bulletin:
June 2024
Brought to you by DP Solutions
Welcome to DP Solutions' Cyber Bulletin!
This monthly cyber recap, curated by our Cybersecurity Team, lists recent significant cybersecurity events, news, and breaches to keep you in-the-know on current cyber-incidents and provide recommendations.
These articles are meant to be informative, and we encourage everyone to do their own research.
Scroll down to read this month's cyber bulletin! ↓
Subscribe to the Cyber Bulletin
How to meet evolving MFA demands in the current threat landscape
In order to combat cyber-attacks, regulatory requirements for multi-factor authentication (MFA) are increasing globally. MFA is essential in protecting against cybercrime by adding additional layers of security. As cybercrime constantly evolves, so must the regulatory environment and an organization's cybersecurity plan.
CISA warns of criminals impersonating its employees in phone calls
Phone scammers are impersonating CISA employees in an attempt to extort money from potential victims, even using real employees' names and titles. CISA will never contact you to request money or ask that your conversation be kept secret.
Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs
Threat actors exploited a zero-day vulnerability on TikTok that allowed malicious code to be sent right when the message was opened. The affected users appear to be high-profile accounts, though the total number of users affected is unclear at the time of this post.
Security Brief: Scammers Create Fraudulent Olympics Ticketing Websites
Cyber criminals are creating fraudulent websites to sell tickets to the 2024 Summer Olympics in Paris. One site, that was listed as the second search result on Google, was recently identified by Proofpoint's Team who worked to suspend the domain. There have been 338 fraudulent Olympic ticketing sites identified.
New phishing toolkit uses PWAs to steal login credentials
Many sites use Progressive Web Apps (PWAs) as a desktop app experience, but cyber criminals are now utilizing PWAs for phishing. Threat actors create fake sites, that mirror well-known brands, with a button to install their software. When the PWA is opened, the login form looks very similar to the targeted business allowing attackers to gain a user's credentials.
City of Cleveland shuts down IT systems after cyberattack
Cleveland, Ohio's City Hall is investigating a cyber incident that caused officials to take citizen-facing services offline and reduce to essential operations.