☝️ TOP STORY

Microsoft Password Spray Attack Targets Accounts Without 2FA

☝️ MORE TOP STORY

Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-F

🤷‍♀️ What now?: 2 things: Turn on MFA and if you have a password for the account, make sure it’s a really long password.

Meanwhile … Microsoft makes all new accounts passwordless by default

📰 Headline Highlights

• Nearly 500,000 impacted by 2023 cyberattack on Long Beach, California

• Largest telecom in Africa warns of cyber incident exposing customer data

• YALE NEW HAVEN HEALTH (YNHHS) DATA BREACH IMPACTED 5.5 MILLION PATIENTS

• FBI Seeking Tips about PRC-Targeting of US Telecommunications

• Cloudflare mitigates record number of DDoS attacks in 2025

• Uyghur Language Software Hijacked to Deliver Malware

• Polish police dismantle cybercrime gang accused of impersonation scams, arrest nine suspects

• Apple notifies new victims of spyware attacks across the world

• WordPress plugin disguised as a security tool injects backdoor

• FBI shares massive list of 42,000 LabHost phishing domains

• 4 Million Affected by VeriSource Data Breach

• Canadian Electric Utility Hit by Cyberattack

• Harrods latest retailer to be hit by cyber attack

In other news, Pinterest is finally doing something about its AI infestation

GOOD READ: The Age of Realtime Deepfake Fraud Is Here

May 1st marks World Password Day, a significant occasion that transcends the traditional focus on passwords. Today, we are encouraged to explore alternative authentication methods beyond passwords. Are you aware of any accounts that offer alternative authentication options?

It’s also a great time to turn on your MFA, if you haven’t already.

Inside Hexagon

While we expanding into other areas of security, we need your help in spreading the word about what we do here at Hexagon Center. Tell people about HX Weekly and help us get subscribers.

In about a month, we will be celebrating our 2nd year! Let’s celebrate Hexagon Center together by having a more secure world.

HOUSEKEEPING

Glossary/Legend:

• Password spray attack - a type of cyberattack where an attacker tries a small number of commonly used passwords against a large number of accounts to find a match. This approach differs from a brute-force attack, which tries many different passwords against a single account.

• MFA (or 2FA) - Security measure that requires users to provide multiple forms of identification to access an account, application, or VPN. It's also known as two-step verification or two-factor authentication (2FA). MFA adds extra layers of security to make it harder for unauthorized users to access sensitive data, even if they have a user's password

• Phishing - a cybercrime that involves tricking people into giving away sensitive information.

• Cyberattack - A malicious attempt to gain unauthorized access to a computer system, network, or device. The goal of a cyberattack is to disrupt or damage the target, or to steal data, intellectual property, or money.

• Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.

• Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.

Spread cybersecurity culture

Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:

hexagoncenter.org

View archives at hxweekly.beehiiv.com

You may reply to this newsletter or email us at
[email protected]

Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.

_{Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.}

_DISCLAIMER

_{Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.}

Content of this newsletter is not an official representation of Hexagon Center.

_{SEE MORE DISCLAIMER HERE}