On Sunday, February 9, the world celebrated Safer Internet Day, an annual event that aims to make the Internet a safer and more responsible environment for everyone, with a focus on the protection of children and adolescents. The second day of the second week of February is often when this event occurs. It explains how each of us can help create a better, safer online community and provides an opportunity to focus on the positive uses of technology. Children, parents, educators, social workers, law enforcement, businesses, legislators and others are all encouraged to collaborate to improve the Internet. Each year, a theme addressing current issues and advancements in the digital realm is chosen to commemorate Safer Internet Day.

International legislative frameworks such as the [EU General Data Protection Regulation](https://gdpr.eu/what-is-gdpr/) aim to secure personal data with special protections for minors. Social networks have age restrictions, usually a minimum of 13, and require parental consent for users under 16 to comply with these regulations and increase security.

Age verification remains a big problem as companies try to balance security and user privacy. By monitoring activity and determining age, artificial intelligence and other advanced technologies can prevent children from viewing objectionable content or participating in harmful online activities.

To protect their young users, social media companies like TikTok, Instagram and Snapchat have implemented strict measures. These include content filters, privacy settings that restrict public viewing, and tools to block unsolicited messages from strangers. In an effort to protect children from inappropriate content, TikTok only allows users who are at least 18 years old to start live streaming. Instagram maintains the privacy of young users' accounts by enforcing rules prohibiting people over 19 from sending direct messages to children under 18. By limiting messages to connected people and maintaining private friend lists, Snapchat reduces social pressure.

Supervised modes are available on smartphones and apps, allowing parents to monitor and manage the content their children can access. Filtering specific words in searches is one of them. For example, YouTube is restricted to users who are at least 18 years old, but offers YouTube Kids as a substitute for younger viewers. With options like time limits and app usage periods, devices can further restrict access.

Improving Internet safety for all users is the ultimate goal if protecting children is the main goal of Safer Internet Day. This day reminds all users, regardless of age, of the continued efforts needed to ensure that the Internet continues to be a space of creativity, opportunity and safety. Since no software can completely replace parental supervision and guidance, it is ultimately the duty of parents to talk to their children about the possible dangers of social media. In response to emerging risks and the growing need for comprehensive online security, these platforms are continually improving their security protocols.

Online [Cybersecurity Courses](https://codelabsacademy.com/en/courses/cybersecurity) with Flexible Schedules | Code Labs Academy

thumbnail_annie-spratt-xKJUnFwfz3s-unsplash (1) (1).webp

annie-spratt-xKJUnFwfz3s-unsplash (1) (1).webp

Safer Internet Day 2025: Uniting for a More Secure Online Future for Children and Adolescents


Security experts have discovered a hacking operation that targets websites using outdated WordPress versions and plugins to modify content and trick users into installing malware. Simon Wijckmans, founder and CEO of online security startup c/side, [told TechCrunch](https://techcrunch.com/2025/01/29/hackers-are-hijacking-wordpress-sites-to-push-windows-and-mac-malware/) the effort is still ongoing. Attackers intend to distribute malware that steals passwords and personal information from Windows and Mac users. C/Side has discovered that some infected websites are among the most popular on the Internet.

Himanshu Anand, a researcher at c/side, [described the operation](https://cside.dev/blog/10-000-wordpress-websites-found-delivering-macos-and-microsoft-malware) as a “spray and pay” strategy aimed at infecting any visitor to these sites rather than specific targets. Infected WordPress sites present users with a fake Chrome update message which, if accepted, results in the download of a malicious file disguised as an update. Wijckmans alerted Automattic, the company behind WordPress.com, and provided them with information about the malicious sites.

Although Automattic representative Megan Fox declined to comment, c/side found more than 10,000 potentially affected websites. The organization detected malicious scripts on numerous domains through web scans and reverse DNS lookups, leading to the discovery of additional affected sites.

This hacking campaign promotes two types of information-stealing malware: Amos, which targets Mac users, and SocGholish, which targets Windows users. According to SentinelOne's [May 2023 report](https://www.sentinelone.com/blog/atomic-stealer-threat-actor-spawns-second-variant-of-macos-malware-sold-on-telegram/?ref=content.cside.dev), Amos is an information stealer intended to collect sensitive information such as usernames, passwords, and digital currency credentials, which could lead to breaches of additional accounts. macOS security specialist Patrick Wardle pointed out that installing Amos requires many steps, indicating that Apple's security defenses are resilient.

Despite the simplicity of the hacking tactic, which relied on deceptive update prompts, the campaign reiterates the importance of using genuine [software updates](https://techcrunch.com/2025/01/29/hackers-are-hijacking-wordpress-sites-to-push-windows-and-mac-malware/) and downloading trusted apps to protect personal devices. This type of malware and credential theft has been associated with major hacks and data breaches, including the major [2024 incident involving Snowflake](https://techcrunch.com/2024/06/05/snowflake-customer-passwords-found-online-infostealing-malware/) and its customers' stolen passwords.

Learn about Code Labs Academy’s[ Cybersecurity Bootcamp](https://codelabsacademy.com/courses/cybersecurity) and start your career in cybersecurity today!


thumbnail_shamin-haky-YF7iYfmF488-unsplash (1) (1).webp

shamin-haky-YF7iYfmF488-unsplash (1) (1).webp

Hacking Alert: Outdated WordPress Sites Targeted for Malware Distribution by Cybercriminals

[According to a recent report](https://www.netskope.com/netskope-threat-labs/cloud-threat-report/cloud-and-threat-report-january-2025) from security firm [Netskope](https://www.netskope.com/), employee clicks on phishing websites almost tripled last year compared to 2023. Cloud storage sites were commonly targeted, at more than 0.8%. of employees clicking on these links, a notable increase from less than 0.3 percent in 2023 the previous year. The dangerous links are often encountered through search engines and employees continue to click on phishing links even after being trained. They are often less vigilant when searching the Internet, but more aware of email attacks..

Employees of several companies receive phishing awareness training. Researchers hypothesize that cognitive fatigue due to the high number of phishing attempts and the creativity of attackers could be the reason why people continue to click on fraudulent sites. Distinguishing fake websites has become more difficult. Researchers believe that most link clicks come from other sources because awareness of email phishing is now well recognized.

Search engine phishing is on the rise. Nearly 20% of clicks on phishing links came from search engines. To ensure that fraudulent websites appear high in search results, cybercriminals have placed advertisements on them or changed search engine optimization. Ten percent of those clicks were to commercial websites. Phishing URLs have also been discovered hidden in advertisements and comments on technology, business and entertainment websites. AI is used by browser manufacturers to protect against phishing websites.

More than 25% of clicks on phishing links led users to fake login pages for cloud services, making them a prime target for attackers looking to gain access to confidential company information and possibly more victims. With over 42% of phishing clicks, Microsoft was the most targeted cloud application. Adobe Cloud comes in second with 18% and DocuSign third with 15%.

Shadow IT Danger: Employee use of personal cloud applications puts company data at even greater risk. More than 25% of workers submit data to these apps and 88% of workers use them at least once a month. Sometimes, due to automatic smartphone backups, professional content unintentionally ends up in personal cloud accounts. Because they frequently contain links to video chats or meeting notes, work messages sent from private email addresses and personal calendar appointments are also dangerous. Recently, a phishing scam targeted Google Calendar.

Employees have used generative AI applications in 94% of companies. Nearly 75% of companies restrict at least one of these applications to prevent data from leaking to AI providers. The apps QuillBot, Beautiful.ai, and AiChatting were blocked most often. To control data flows, 45% of companies use data loss prevention techniques. About a third use coaching tools to alert users when an AI tool within the organization is inappropriate for sensitive data.

Using anonymized usage data for its products, Netskope examined the risks observed among its customers between November 2023 and 2024 for the study; however, the analysis did not take into consideration the impact of these attacks.

Lead the fight against cyber threats with[ Code Labs Academy’s Cybersecurity Bootcamp](https://codelabsacademy.com/en/courses/cybersecurity).


thumbnail_alex-kotliarskyi-QBpZGqEMsKg-unsplash-_1_ (1) (1).webp

alex-kotliarskyi-QBpZGqEMsKg-unsplash-_1_ (1) (1).webp

Rising Phishing Threats in 2025: Why Employee Vigilance is Critical in Digital Security


###### December 11, 2024

Microsoft responded to an actively exploited vulnerability by releasing key security upgrades for its products, including Windows, Office, SharePoint and Hyper-V. As ongoing attacks have been reported, administrators of current versions of Windows Desktop and Windows Server are advised to ensure that Windows Update is enabled and the most recent security patches are installed. 

Many versions of Windows 10 and Windows 11, as well as many versions of Windows Server, including 2008 and 2022, are affected by the [currently exploited vulnerability](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138) (CVE-2024-49138, classified as “high” risk). Successful attackers are granted enhanced user permissions, including system-level privileges, which can cause serious damage. These attacks frequently use a combination of vulnerabilities to execute malicious code. Microsoft has not revealed information on the scale of these attacks or how they are carried out.

Current versions of Windows and Windows Server include a significant vulnerability ([CVE-2024-49112](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49112)) that affects the Lightweight Directory Access Protocol (LDAP). There are no details yet on how these attacks take place or how administrators might recognize affected systems. Microsoft advises administrators to disconnect domain controllers from the Internet if they fail to deploy this security update in a timely manner.

Additional “high” threat level vulnerabilities have been discovered in a number of malware-prone Windows components, such as Remote Desktop Services and Hyper-V. Office is also susceptible to virus attacks and hackers can obtain and use data without authorization.

Microsoft also fixed a security flaw that was already under active attack during this November Patch Day.

_Ready to protect the digital world? Join Code Labs Academy's_[ _Cybersecurity Bootcamp_](https://codelabsacademy.com/courses/cybersecurity) _and gain the hands-on skills you need to defend against cyber threats._


thumbnail_tadas-sar-T01GZhBSyMQ-unsplash-_2_ (1) (1).webp

tadas-sar-T01GZhBSyMQ-unsplash-_2_ (1) (1).webp

Microsoft Releases Critical Security Updates for Windows and Office Amid Active Exploits

###### November 12, 2024

[Amazon](https://www.amazon.com/) admitted that a security breach at a third-party vendor led to a data leak affecting employee information. Only employee business contact information, including email addresses, phone numbers, and building locations, was compromised; neither Amazon nor AWS systems were directly impacted.

Amazon reportedly does not have access to sensitive data, such as financial information or Social Security numbers, but refuses to say how many employees were affected. [According to Amazon](https://techcrunch.com/2024/11/11/amazon-confirms-employee-data-stolen-after-hacker-claims-moveit-breach/), the supplier has since fixed the security flaw that caused the hack.

The confirmation comes after a hacker, going by the pseudonym "Nam3L3ss", claimed to have published data from Amazon and 24 other major companies on the known forum BreachForums. The alleged massive exploitation of [MOVEit Transfer in 2023](https://www.emsisoft.com/en/blog/44123/unpacking-the-moveit-breach-statistics-and-analysis/) (a major flaw using a zero-day vulnerability in Progress Software's file transfer solution) reportedly resulted in the acquisition of more than 2.8 million rows of data.

The Clop ransomware group was responsible for the MOVEit hack, which affected more than 1,000 companies, including U.S. government contractor Maximus, the Colorado Department of Health Care Policy and Financing, and the Oregon Department of Transportation. 

With cyber threats constantly growing and becoming more sophisticated, incidents like this highlight the critical importance of cybersecurity for businesses of all types. Data breaches are becoming more frequent and serious, highlighting the critical need for qualified cybersecurity specialists who can detect weaknesses and protect private data.

If you have a strong interest in cybersecurity or want to get started in this growing industry, [Code Labs Academy](https://codelabsacademy.com/) offers a comprehensive [cybersecurity bootcamp](https://codelabsacademy.com/courses/cybersecurity) that will give you the skills and information you need. Learn how to defend your organization's data, fend off cyberattacks, and maintain your edge in a high-demand field.


thumbnail_christian-wiediger-rymh7EZPqRs-unsplash-_1_ (1) (1).webp

christian-wiediger-rymh7EZPqRs-unsplash-_1_ (1) (1).webp

Amazon Confirms Employee Data Compromised in MOVEit Breach Following Hacker’s Claims

###### November 4, 2024

Despite recent accomplishments by law enforcement, such as the takedown of organizations like LockBit and the seizure of Radar, the ransomware landscape is still strong and shows no signs of slowing down. [Allan Liska](https://www.linkedin.com/in/allan2/), a ransomware specialist and threat intelligence analyst at cybersecurity firm Recorded Future, predicts that 2024 will be a banner year as hackers continue to reap significant profits from data theft activities. According to Liska, [who spoke with TechCrunch in London](https://techcrunch.com/2024/10/31/2024-looks-set-to-be-another-record-breaking-year-for-ransomware-and-its-likely-going-to-get-worse/), the year is still expected to break previous records in terms of the frequency of attacks and ransom payments to victims, although the increase in ransomware occurrences may slow.

For the first time, multiple eight-figure ransoms were paid in 2024, including a remarkable $22 million paid by Change Healthcare following Russian cybercriminal gang ALPHV's theft of millions of Americans' private medical information. Due to disagreements between ALPHV and its subsidiary responsible for the breach, this episode highlighted the internal conflicts between the ransomware groups.

The arrival of younger, more experienced hackers, like those at Lapsus$ and Scattered Spider, who have carried out major hacks, notably on MGM Hotels and perhaps Transport for London, is another worrying trend highlighted by Liska. These young hackers, who often speak good English and are adept at targeting large companies, are part of a growing number of data-theft-only attacks, which have increased by more than 30% this year. Liska says many new threat actors are choosing to forgo encryption-based strategies in favor of collecting large amounts of data, which simplifies their operations while still producing powerful results.

This change has far-reaching consequences. Liska warns of the possibility of more overt methods of theft, such as attacking cryptocurrency exchanges, due to the increase in extortion attacks carried out solely by teenage hackers. Additionally, it expresses concern over growing strategies used by attackers to exploit victims who are unwilling to pay using their personal information, which could turn cyber threats into real ones.

According to Liska, the outcome of the US elections could have a significant impact on how ransomware develops in the future. Looking at possible solutions, Liska admitted that banning ransom payments would be the most effective way to disrupt the ransomware economy, although it is not a perfect solution. Even though numerous police measures have been taken against ransomware operators this year, attacks are still encouraged by the promise of eight-figure payouts.

Safeguard tomorrow with Code Labs Academy’s expert-led[ Cybersecurity Bootcamp](https://codelabsacademy.com/courses/cybersecurity).


Cyber Security

Safer Internet Day 2025: Uniting for a More Secure Online Future for Children and Adolescents