Web3 IPFS Currently Used For PhishingWe discuss the use of the InterPlanetary File System (IPFS) in phishing attacks.Leer másTrend Micro Research, News, PerspectivesWe discuss the use...
Day: December 23, 2022
Google adds stronger encryption for some Gmail users, in beta
Google adds stronger encryption for some Gmail users, in betaSlowly inching toward E2EE Google has added client-side encryption for some email customers, allowing enterprise and education...
Patch Tuesday update is causing some Windows 10 systems to blue screen
Patch Tuesday update is causing some Windows 10 systems to blue screenMicrosoft issues a workaround for problem while it works on a fix Some users running...
Hacking the JFK Airport Taxi Dispatch System
Hacking the JFK Airport Taxi Dispatch SystemTwo men have been convicted of hacking the taxi dispatch system at the JFK airport. This enabled them to reorder...
McGraw Hill’s S3 buckets exposed 100,000 students’ grades and personal info
McGraw Hill's S3 buckets exposed 100,000 students' grades and personal infoEducator gets an F for security Misconfigured Amazon Web Services S3 buckets belonging to McGraw Hill...
Diving into an Old Exploit Chain and Discovering 3 new SIP-Bypass Vulnerabilities
Diving into an Old Exploit Chain and Discovering 3 new SIP-Bypass VulnerabilitiesMore than two years ago, a researcher, A2nkF demonstrated the exploit chain from root privilege...
Eurozone plans to formalize passenger data, improve security
Eurozone plans to formalize passenger data, improve securityCentral hub will make things smoother and safer but not store details The European Commission last week proposed rules...
Raspberry Robin Malware Targets Telecom, Governments
Raspberry Robin Malware Targets Telecom, GovernmentsWe found samples of the Raspberry Robin malware spreading in telecommunications and government office systems beginning September. The main payload itself...
Simplifying digital sovereignty in a multi-cloud world
Simplifying digital sovereignty in a multi-cloud worldMaintaining tight control of sensitive data is critical to digital business success, but how do you manage that complexity? Sponsored...
My Top Tips To Help Your Family Stay Safe Online This Holiday Period
My Top Tips To Help Your Family Stay Safe Online This Holiday Period ‘It’s the most wonderful time of year’ – we’ve all heard the jingles...
Samsung and Google fix Microsoft Intune Android 13 enrollment issue
Samsung and Google fix Microsoft Intune Android 13 enrollment issueMicrosoft has confirmed today that Samsung and Google have fixed an Intune enrollment issue affecting Galaxy S22...
FIN7 hackers create auto-attack platform to breach Exchange servers
FIN7 hackers create auto-attack platform to breach Exchange serversThe notorious FIN7 hacking group uses an auto-attack system that exploits Microsoft Exchange and SQL injection vulnerabilities to...
Big Apple locals hire Russians to game New York’s taxi system
Big Apple locals hire Russians to game New York's taxi systemScheme allegedly allowed taxi drivers to bypass airport waiting line for $10 fee Two men have...
Microsoft reports macOS Gatekeeper has an ‘Achilles’ heel
Microsoft reports macOS Gatekeeper has an 'Achilles' heelInsert your Trojan joke here Security researchers at Microsoft have discovered a bug in macOS that lets malicious apps...
A Technical Analysis of CVE-2022-22583 and CVE-2022-32800
A Technical Analysis of CVE-2022-22583 and CVE-2022-32800This blog entry discusses the technical details of how we exploited CVE-2022-22583 using a different method. We also tackle the...
Get 40% off Malwarebytes Premium for the holidays
Get 40% off Malwarebytes Premium for the holidaysMalwarebytes is running a holiday deal where you can get 40% off the Malwarebytes Premium antivirus software through the new year....
Conti Team One Splinter Group Resurfaces as Royal Ransomware with Callback Phishing Attacks
Conti Team One Splinter Group Resurfaces as Royal Ransomware with Callback Phishing AttacksFrom September to December, we detected multiple attacks from the Royal ransomware group. In...
Swatting suspects charged with subverting Ring doorbell cams and calling cops
Swatting suspects charged with subverting Ring doorbell cams and calling copsHeavily armed US police turning up on the doorstep is no laughing matter Two men have...
Uber’s latest data breach reveals how to improve third-party security…
Uber’s latest data breach reveals how to improve third-party security…EXECUTIVE SUMMARY: In Uber’s latest data breach, hackers managed to expose employee email addresses, corporate reports and...
Brave launches FrodoPIR, a privacy-focused database query system
Brave launches FrodoPIR, a privacy-focused database query systemBrave Software developers have created a new privacy-centric database query system called FrodoPIR that retrieves data from servers without disclosing...
Detecting Windows AMSI Bypass Techniques
Detecting Windows AMSI Bypass TechniquesWe look into some of the implementations that cybercriminals use to bypass the Windows Antimalware Scan Interface (AMSI) and how security teams...
Parental control apps prove easy to beat by kids and crims
Parental control apps prove easy to beat by kids and crims20m downloads can't be wrong? Or can they? Parental control apps may do more harm than...
A tell-all conversation: The biggest cloud security trends, challenges & solutions
A tell-all conversation: The biggest cloud security trends, challenges & solutionsEXECUTIVE SUMMARY: In this dynamic tell-all conversation, excerpted from The TechArena podcast, VP of Cloud Security...
Vice Society ransomware gang switches to new custom encryptor
Vice Society ransomware gang switches to new custom encryptorThe Vice Society ransomware operation has switched to using a custom ransomware encrypt that implements a strong, hybrid...
Comcast Xfinity accounts hacked in widespread 2FA bypass attacks
Comcast Xfinity accounts hacked in widespread 2FA bypass attacksComcast Xfinity customers report their accounts being hacked in widespread attacks that bypass two-factor authentication. These compromised accounts...
Cisco’s Talos security bods predict new wave of Excel Hell
Cisco’s Talos security bods predict new wave of Excel HellCriminals have noticed that spreadsheet's XLL files add custom functionality - including malware It took a few...
DuckDuckGo now blocks Google sign-in pop-ups on all sites
DuckDuckGo now blocks Google sign-in pop-ups on all sitesDuckDuckGo apps and extensions are now blocking Google Sign-in pop-ups on all its apps and browser extensions, removing...
Payroll processing checklist
Payroll processing checklistSome operations and tasks don’t require painstaking attention to detail. Unfortunately, processing payroll isn’t one of them. With sensitive salary and wage information, bank...
Malicious PyPI package found posing as a SentinelOne SDK
Malicious PyPI package found posing as a SentinelOne SDKSecurity firm tagged with malware misrepresentation Threat researchers have found a rapidly updated malicious Python package on PyPI...
IcedID Botnet Distributors Abuse Google PPC to Distribute Malware
IcedID Botnet Distributors Abuse Google PPC to Distribute MalwareWe analyze the latest changes in IcedID botnet from a campaign that abuses Google pay per click (PPC)...