EvilProxy Phishing Toolkit Spotted on Dark Web ForumsThe tool highlights the growth in attacks against online services and MFA authorization mechanismsLeer másThe tool highlights the growth...
Month: September 2022
SharkBot Malware Resurfaces on Google Play to Steal Users’ Credentials
SharkBot Malware Resurfaces on Google Play to Steal Users' CredentialsIt reportedly targets the banking credentials of Android users via apps with 60,000 installationsLeer másIt reportedly targets...
Keybank’s Customer Information Stolen By Hackers Via Third-party Provider
Keybank's Customer Information Stolen By Hackers Via Third-party ProviderOverby-Seawell, a firm providing multiple clients with insurance services is alleged to have been the source of the...
London’s Biggest Bus Operator Hit by Cyber “Incident”
London's Biggest Bus Operator Hit by Cyber "Incident"Go-Ahead is working through its incident response plansLeer másGo-Ahead is working through its incident response plans
TikTok denies data breach following leak of user data
TikTok denies data breach following leak of user dataThreat actors published a sample of data allegedly stolen from TikTok, but the company denies it was breached....
Windows Defender identified Chromium, Electron apps as Hive Ransomware
Windows Defender identified Chromium, Electron apps as Hive RansomwareMicrosoft released a Windows Defender update to fix a problem that caused Defender antivirus to identify Chromium, Electron,...
QNAP warns new Deadbolt ransomware attacks exploiting zero-day
QNAP warns new Deadbolt ransomware attacks exploiting zero-dayQNAP warns customers of ongoing DeadBolt ransomware attacks that are exploiting a zero-day vulnerability in Photo Station. QNAP warns...
China accuses the US of cyberattacks
China accuses the US of cyberattacksChina accuses the United States of conducting tens of thousands of cyberattacks on its country, including cyberespionage campaigns. The Government of...
Interpol dismantled sextortion ring in Asia
Interpol dismantled sextortion ring in AsiaInterpol arrested 12 individuals which are suspected to be core members of a transnational sextortion ring. Interpol announced the arrest of...
Is TikTok Safe?
Is TikTok Safe?TikTok (also known as Douyin in China) is a short-form video hosting service owned by the Chinese corporation ByteDance. It features a wide range...
A New and Upgraded Version of SharkBot Malware Has Been Detected
A New and Upgraded Version of SharkBot Malware Has Been DetectedSharkBot malware is back in Google Play Store where two SharkbotDopper apps were identified. The two...
Golang Attack Campaign Tracked as GO#WEBBFUSCATOR Applies James Webb Space Telescope Images as Lures to Infect Systems
Golang Attack Campaign Tracked as GO#WEBBFUSCATOR Applies James Webb Space Telescope Images as Lures to Infect Systems The modern cyber threat landscape illustrates a growing trend...
Raspberry Robin Malware Detection: New Connections Revealed
Raspberry Robin Malware Detection: New Connections Revealed In late July, Microsoft researchers released new evidence linking Raspberry Robin Windows worm to the activity of the russia-backed...
Our Quest: Advancing Product Labels to Help Consumers Consider Cybersecurity
Our Quest: Advancing Product Labels to Help Consumers Consider CybersecurityFor many decades, consumers have relied on labels to help them make decisions about which products to...
Summertime Blues: TA558 Ramps Up Attacks on Hospitality, Travel Sectors
Summertime Blues: TA558 Ramps Up Attacks on Hospitality, Travel SectorsContenido de la entradaLeer másProofpoint News Feed
TikTok denies security breach after hackers leak user data, source code
TikTok denies security breach after hackers leak user data, source codeTikTok denies recent claims it was breached, and source code and user data were stolen, telling...
QNAP patches zero-day used in new Deadbolt ransomware attacks
QNAP patches zero-day used in new Deadbolt ransomware attacksQNAP is warning customers of ongoing DeadBolt ransomware attacks that started on Saturday by exploiting a zero-day vulnerability...
Interpol dismantles sextortion ring, warns of increased attacks
Interpol dismantles sextortion ring, warns of increased attacksA transnational sextortion ring was uncovered and dismantled following a joint investigation between Interpol's cybercrime division and police in Singapore and...
Next Up: Integrating Information and Communication Technology Risk Programs with Enterprise Risk Management
Next Up: Integrating Information and Communication Technology Risk Programs with Enterprise Risk ManagementGiven the increasing reliance of organizations on technologies over the past 50 years, a...
Standards: The CPSO’s Best Friend
Standards: The CPSO’s Best FriendWorkshop Shines Light on Role of Standards in Cybersecurity for IoT What do Chief Product Security Officers (CPSOs) want to make their...
New EvilProxy service lets all hackers use advanced phishing tactics
New EvilProxy service lets all hackers use advanced phishing tacticsA reverse-proxy Phishing-as-a-Service (PaaS) platform called EvilProxy has emerged, promising to steal authentication tokens to bypass multi-factor...
NIST’s Expanding International Engagement on Cybersecurity
NIST’s Expanding International Engagement on CybersecurityIn providing a foundation for cybersecurity advancements over the years, NIST has taken the global context into account when determining priorities...
Best IT asset management software of 2022
Best IT asset management software of 2022An asset management software is a necessary part of every IT department. Find out which one is best for your...
K00994461: GSON vulnerability CVE-2022-25647
K00994461: GSON vulnerability CVE-2022-25647GSON vulnerability CVE-2022-25647 Security Advisory Security Advisory Description The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the ......
K24207649: GNU C Library (glibc) vulnerability CVE-2021-3999
K24207649: GNU C Library (glibc) vulnerability CVE-2021-3999GNU C Library (glibc) vulnerability CVE-2021-3999 Security Advisory Security Advisory Description A flaw was found in glibc. An off-by-one buffer...
K37256400: Linux kernel vulnerability CVE-2021-4028
K37256400: Linux kernel vulnerability CVE-2021-4028Linux kernel vulnerability CVE-2021-4028 Security Advisory Security Advisory Description A flaw in the Linux kernels implementation of RDMA communications manager listener code...
K50839343: NGINX ModSecurity WAF vulnerability CVE-2021-42717
K50839343: NGINX ModSecurity WAF vulnerability CVE-2021-42717NGINX ModSecurity WAF vulnerability CVE-2021-42717 Security Advisory Security Advisory Description ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON...
K12132951: Linux kernel vulnerability CVE-2022-0812
K12132951: Linux kernel vulnerability CVE-2022-0812Linux kernel vulnerability CVE-2022-0812 Security Advisory Security Advisory Description An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c...
K71080411: Linux kernel vulnerability CVE-2021-4155
K71080411: Linux kernel vulnerability CVE-2021-4155Linux kernel vulnerability CVE-2021-4155 Security Advisory Security Advisory Description A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the...
K16430721: IP forwarding vulnerability CVE-1999-0511
K16430721: IP forwarding vulnerability CVE-1999-0511IP forwarding vulnerability CVE-1999-0511 Security Advisory Security Advisory Description IP forwarding is enabled on a machine which is not a router or...




















