News

Visible says yes, user accounts were hijacked, but it denied a breach. As of today, users are still posting tales of forcibly changed passwords and getting stuck with bills for pricey new iPhones. On Wednesday, Verizon’s Visible – an all-digital, uber-cheap wireless carrier – confirmed what customers have been complaining about on Reddit and Twitter all week: …

Verizon’s Visible Wireless Carrier Confirms Credential-Stuffing Attack Read More »

The bug is under attack. Within hours of the patch release, a researcher published POC code, calling it a “great” flaw that can be used for jailbreaks and local privilege escalation. Apple on Monday rushed out a security update for iOS 15.0.2 and iPadOS 15.0.2 to fix a remote code-execution (RCE) zero-day vulnerability that’s being actively exploited. …

Apple Releases Urgent iOS Updates to Patch New Zero-Day Bug Read More »

Microsoft on Tuesday rolled out security patches to contain a total of 71 vulnerabilities in Microsoft Windows and other software, including a fix for an actively exploited privilege escalation vulnerability that could be exploited in conjunction with remote code execution bugs to take control over vulnerable systems. Two of the addressed security flaws are rated Critical, 68 …

Update Your Windows PCs Immediately to Patch New 0-Day Under Active Attack Read More »

Through a letter sent via email, Google has notified some 14,000 Gmail users that during the past months they could have been the target of a sophisticated spear phishing campaign operated by a hacking group identified as APT28. The letter is signed by Shane Huntley, director of the Google Threat Analysis Group. Huntley emphasizes the fact that these alerts do not mean …

OVER 14,000 GMAIL USERS FALL VICTIM TO RUSSIAN GOVERNMENT-SPONSORED PHISHING CAMPAIGN Read More »

An authentication error left the personal data of hundreds of thousands of BrewDog customers and Equity for Punks shareholders exposed for a year and a half.  The gaffe involving an API bearer token was discovered by researchers at security consulting and testing company Pen Test Partners.  “Every mobile app user was given the same hard-coded API Bearer Token, …

Brewer’s Token Gaffe Causes Massive PII Breach Read More »

Intuit has warned QuickBooks customers that they are targeted by an ongoing phishing campaign impersonating the company and trying to lure potential victims with fake renewal charges. The company said it received reports from customers that they were emailed and told that their QuickBooks plans had expired. “This email did not come from Intuit. The sender is not …

Intuit warns QuickBooks customers of ongoing phishing attacks Read More »

The official Facebook page for the USS KIDD (DDG-100) appears to have been hijacked by someone who really just wants to play “Age of Empires”. For the last several days, someone has been having a lot of fun playing the classic 1997 strategy game “Age of Empires.” Normally, that wouldn’t be news (the game is …

Someone hijacked a Navy warship’s Facebook account so they could livestream ‘Age of Empires’ Read More »

The attack affected Syniverse, a major telecom company that annually routes billions of text messages for hundreds of mobile carriers. Major telecommunications provider Syniverse, which routes billions of text messages each year for providers including AT&T, Verizon, and T-Mobile, has revealed it is the victim of a five-year-long security breach that may have exposed millions …

5-Year Breach May Have Exposed Billions of Text Messages Read More »

A researcher combed through the Twitch leak and found what they said was evidence of PayPal chargebacks with names and emails; employees’ emails; and more. Twitch users, if you haven’t changed your password yet, go. Now. Do it. Your email and password may already have been leaked – unhashed, unencrypted, in cleartext. Researchers have been …

Twitch Leak Included Emails, Passwords in Clear Text: Researcher Read More »

Sift released a report which details the evolving methods fraudsters employ to launch account takeover (ATO) attacks against consumers and businesses. The report details a sophisticated fraud ring that sought to overwhelm e-commerce merchants by innovating upon typical credential stuffing campaigns. Specifically, the fraud ring, dubbed Proxy Phantom, used a massive cluster of connected, rotating IP addresses …

ATO attacks increased 307% between 2019 and 2021 Read More »

1 Oct 2021 Without realizing it, many changes have occurred in the face of this COVID-19 pandemic. Changes are felt at work, starting from working from home, online meetings, to digitally accessing data using the cloud. Many employees and companies are not ready for the sudden changes in facing the challenges of working from home, …

BUDGETING IN CYBERSECURITY Read More »

Experts say the detection delay of 17 months is a colossal security blunder by the retailer.  Dallas-based Neiman Marcus Group is known worldwide as the go-to luxury retailer for the well-heeled. But their reputation for impeccable quality just took a big hit with revelations that the company was breached by an attacker back in May …

3.1M Neiman Marcus Customer Card Details Breached Read More »

Researchers have demonstrated that someone could use a stolen, locked iPhone to pay for thousands of dollars of goods or services, no authentication needed. An attacker who steals a locked iPhone can use a stored Visa card to make contactless payments worth up to thousands of dollars without unlocking the phone, researchers are warning. The …

Apple Pay with Visa Hacked to Make Payments via Locked iPhones Read More »

Access to heart monitors disabled by the attack allegedly kept staff from spotting blood & oxygen deprivation that led to the baby’s death. A U.S. hospital paralyzed by ransomware in 2019 will be defending itself in court in November over the death of a newborn, allegedly caused by the cyberattack. As the Wall Street Journal reported on Thursday, the …

Baby’s Death Alleged to Be Linked to Ransomware Read More »

Just in time for OWASP’s 20th anniversary last week, the Open Web Application Security Project’s Top 10 list of critical security risks has received its first update since 2017. The OWASP Top 10 were first released in 2003 and serve as a foundation for various compliance and security tools. To come up with the 2021 …

OWASP Top 10 risks get update, highlighting insecure design — injection no longer on top Read More »

Giant Group, the umbrella company that has thousands of contractors on its books, has been targeted by a “sophisticated” cyber-attack that floored systems and left workers out in the cold, the biz has now confirmed. The attack happened last Wednesday (September 22) and forced the outfit – known to many as Giant Pay – to …

UK umbrella payroll firm GiantPay confirms it was hit by ‘sophisticated’ cyber-attack Read More »

Microsoft is warning that the Nobelium APT is compromising single-sign-on servers to install a post-exploitation backdoor that steals data and maintains network persistence. The threat actors behind the notorious SolarWinds supply-chain attacks have dispatched new malware to steal data and maintain persistence on victims’ networks, researchers have found. Researchers from the Microsoft Threat Intelligence Center …

SolarWinds Attackers Hit Active Directory Servers with FoggyWeb Backdoor Read More »

Chrome users beware, just days after I warned attacks on Google’s browser are increasing, another critical hack has been confirmed. Google published the news in a new blog post, where it revealed Chrome’s 11th ‘zero day’ exploit of the year has been found (CVE-2021-37973) and it affects Linux, macOS and Windows users. A zero-day classification means hackers …

Google Issues Warning For 2 Billion Chrome Users Read More »

A zero-day exploit—a way to launch a cyberattack via a previously unknown vulnerability—is just about the most valuable thing a hacker can possess. These exploits can carry price tags north of $1 million on the open market. And this year, cybersecurity defenders have caught the highest number ever, according to multiple databases, researchers, and cybersecurity companies who …

2021 has broken the record for zero-day hacking attacks Read More »

A hacker has stolen $12.7m (£9.3m) in bitcoin from crypto transfer platform pNetwork.  pNetwork said in a tweet late on Sunday: “We’re sorry to inform the community that an attacker was able to leverage a bug in our codebase and attack pBTC on BSC, stealing 277 BTC (most of its collateral).” It said that all …

Latest crypto hack sees $12.7m ‘wrapped’ bitcoin stolen from pNetwork Read More »

The security vulnerabilities bring the web behemoth up to 10 browser zero-days found so far this year. Google has addressed two zero-day security bugs that are being actively exploited in the wild. As part of the internet giant’s latest stable channel release (version 93.0.4577.82 for Windows, Mac and Linux), it fixed 11 total vulnerabilities, all …

Pair of Google Chrome Zero-Day Bugs Actively Exploited Read More »

A cyber surveillance company based in Israel developed a tool to break into Apple iPhones with a never-before-seen technique that has been in use since at least February, internet security watchdog group Citizen Lab said on Monday. The discovery is important because of the critical nature of the vulnerability, which requires no user interaction and affects all …

Cyber arms dealer exploits new Apple iPhone software vulnerability that affects most versions, watchdog group says Read More »

All a user needs to do is click on an email attachment, and boom – the code is silently executed without the victim knowing. It affects Big Sur and prior versions of macOS. A zero-day security vulnerability in Apple’s macOS Finder system could allow remote attackers to trick users into running arbitrary commands, according to …

Unpatched Apple Zero-Day in macOS Finder Allows Code Execution Read More »

Record-breaking distributed denial of service attack targets Russia’s version of Google – Yandex. Technical details tied to a record-breaking distributed-denial-of-service (DDoS) attack against Russian internet behemoth Yandex are surfacing as the digital dust settles. A massive botnet, dubbed Mēris, is believed responsible, flooding Yandex with millions of HTTP requests for webpages at the same time. …

Yandex Pummeled by Potent Meris DDoS Botnet Read More »

The incident raises considerations for security for critical data housed in third-party infrastructure, researchers say. Almost 79,400 MyRepublic mobile subscribers have been caught up in a data breach that exposed a range of personal information, the company has confirmed. The Singapore-based ISP and mobile provider said that an “unauthorized data access incident” took place on …

MyRepublic Data Breach Raises Data-Protection Questions Read More »

Threat actors accessed the organization’s proprietary project management software, Umoja, in April, accessing the network and stealing info that can be used in further attacks. A threat actor used stolen credentials from a United Nations employee to breach parts of the UN’s network in April and steal critical data, a spokesman for the intergovernmental organization …

Stolen Credentials Led to Data Theft at United Nations Read More »

They were posted for free by former Babuk gang members who’ve bickered, squabbled and huffed off to start their own darn ransomware businesses, dagnabbit. Credentials pilfered from 87,000 unpatched Fortinet SSL-VPNs have been posted online, the company has confirmed. Or then again, maybe the number is far greater. On Wednesday, BleepingComputer reported that it’s been in touch with …

Thousands of Fortinet VPN Account Credentials Leaked Read More »

Usernames, passwords for database sent in prize redemption emails. McDonald’s UK Monopoly VIP game kicked off at the end of August, and a recent round of emails sent to winners of the game’s various prizes included more than a coupon for free fries. The franchise accidentally inserted passwords for a McDonald’s server that hosted information …

McDonald’s Email Blast Includes Password to Monopoly Game Database Read More »

A chain of exploits could allow a malicious Azure user to infiltrate other customers’ cloud instances within Microsoft’s container-as-a-service offering. A critical security vulnerability allowing attackers to perform cross-account container takeover in Microsoft’s public cloud, dubbed “Azurescape”, has been uncovered by researchers. The issue exists in Azure Container Instances (ACI), which is Microsoft’s container-as-a-service (CaaS) …

‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise Read More »

The Government’s Computer Emergency Response Team (CERT NZ) is monitoring a cyber security attack which appeared to take down a number of major organisation’s websites this morning. Kiwibank, ANZ, NZ Post and MetService. NZ Police all acknowledged that their sites were slow at times. All came back online around midday, but CERT NZ posted a …

Cyber Attack Fears – Kiwibank, ANZ, NZ Post, MetService Back Online After CERT Flags Cyberattacks Read More »

The first half of 2021 saw 1.5 billion attacks on smart devices, with attackers looking to steal data, mine cryptocurrency or build botnets. The first six months of 2021 have seen a more than 100-percent growth in cyberattacks against internet-of-things (IoT) devices, researchers have found. According to a Kaspersky analysis of its telemetry from honeypots …

IoT Attacks Skyrocket, Doubling in 6 Months Read More »

Thousands of New Zealanders’ Friday afternoon workflow was interrupted today when their internet connection cut out due to a cyber attack on a main internet provider. Internet infrastructure provider Vocus – which operates Orcon, Slingshot, Flip, and Stuff Fibre internet connections – was hit with a DDoS attack which took its internet down for about …

Kiwis lockdown Friday workday disrupted by cyber attack Read More »

Cybercriminal enterprise is mass testing millions of usernames and passwords per day in a hunt for loyalty card data. Threat actors are compromising up to 100,000 inboxes daily in a campaign that targets gift card and customer-loyalty program data in hopes of reselling it or cashing in on freebies, a security researcher has found. The …

Brute-Force Attacks Target Inboxes for Gift Card Data Read More »

The financially motivated group looked to steal payment-card data from a California-based point-of-sale service provider. The FIN7 financial cybercrime gang is back, delivering JavaScript backdoors using Word documents themed around the next version of Windows. That’s according to researchers at Anomali, who observed a recent campaign from the group that leveraged six different docs, all …

FIN7 Capitalizes on Windows 11 Release in Latest Gambit Read More »

Several cases of alleged leaks of the government’s health data have occurred in Indonesia. The most recent one is the alleged data leak in Indonesia’s Health Alert Card or eHAC application managed by the Ministry of Health before it was merged into the PeduliLindung application. A number of information technology experts have reminded the government …

Series of Data Leaks Cases of Government’s Health Data Read More »

The Ministry of Health of Indonesia (Kemenkes) has finally raised its voice regarding the data leakage of the users of eHAC application. As a result, it is estimated that the data belonging to 1.3 million users are vulnerable to being accessed by anyone. Head of the Ministry of Health’s Data and Information Center, dr. Anas …

Indonesia’s Ministry of Health Calls Data Leak in Old Version of eHAC, Saves Important User Information Read More »

HPE joins Apple in warning customers of a high-severity Sudo vulnerability. Hewlett Packard Enterprise (HPE) is warning a vulnerability in Sudo, an open-source program used within its Aruba AirWave management platform, could allow any unprivileged and unauthenticated local user to gain root privileges on a vulnerable host. Rated high in severity, HPE warns the Sudo flaw …

HPE Warns Sudo Bug Gives Attackers Root Privileges to Aruba Platform Read More »

The airline announced the breach on Thursday, and the ransomware gang started a countdown clock the next day. The LockBit ransomware gang has apparently struck again, having purportedly stolen 103GB worth of files from Bangkok Airways and promising to release them tomorrow, on Tuesday. A Dark Web intelligence firm calling itself DarkTracer (apparently a separate …

LockBit Gang to Publish 103GB of Bangkok Air Customer Data Read More »

The bug (CVE-2021-33766) is an information-disclosure issue that could reveal victims’ personal information, sensitive company data and more. A serious security vulnerability in Microsoft Exchange Server that researchers have dubbed ProxyToken could allow an unauthenticated attacker to access and steal emails from a target’s mailbox. Microsoft Exchange uses two websites; one, the front end, is …

Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping Read More »

26 Agustus 2021 In a post on the RaidForums website on Tuesday, an unnamed user said they were selling a collection of 460,000 documents compiled from the user data of over two million BRI Life clients for $7,000. The post was accompanied by a 30 minute video of the documents, which included bank account details, …

Protergo Holds Webinar, Discussing Data Leakage in Indonesia Read More »

The worst of 13 bugs fixed by the August updates could lead to complete system compromise for users in sensitive sectors running products in Appliance mode. Application delivery and networking firm F5 released a baker’s dozen of 13 fixes for high-severity bugs, including one that could lead to complete system takeover and hence is boosted …

F5 Bug Could Lead to Complete System Takeover Read More »

“It’s really a gut punch, that’s for sure,” Select Board member William Kennedy said Monday The town of Peterborough, New Hampshire, said Monday that it has lost $2.3 million in taxpayer dollars as the result of a cyberattack. “It pains us to inform the residents and taxpayers of Peterborough that, like so many other towns …

New Hampshire Town Loses $2.3M in Taxpayer Money to Cyberattack Read More »

The U.S. Cybersecurity and Infrastructure Security Agency is warning of active exploitation attempts that leverage the latest line of “ProxyShell” Microsoft Exchange vulnerabilities that were patched earlier this May, including deploying LockFile ransomware on compromised systems. Tracked as CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207, the vulnerabilities enable adversaries to bypass ACL controls, elevate privileges on the Exchange …

WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws Read More »

Google Chrome has over two billion users worldwide and dominates the web browser market. But this also makes it the prime target of hackers and now Google has issued its fourth urgent upgrade warning in two months.  In an official blog post, Google has revealed seven ‘High’ rated security threats have been discovered in Chrome with the …

Google Issues Warning For 2 Billion Chrome Users Read More »

The U.S. State Department was hit by a cyberattack and notifications of a potentially serious breach were made by the Department of Defense Cyber Command, a Fox News reporter said on Saturday. A knowledgeable source told Reuters the State Department has not experienced significant disruptions and has not had its operations impeded in any way. Fox …

U.S. State Department reportedly hit by a cyberattack in recent weeks Read More »

Researchers uncovered a new browser-based attackers from the infamous North Korean APT Hackers groups targeting the victims with the different browser exploits names as “BLUELIGHT“. InkySquid, a threat group based on North Korea and the groups broadly known as monikers ScarCruft and APT37 have recently attacked the South Korean website (www.dailynk[.]com) that is focused on …

North Korean APT Hackers Attack Victims Using MS IE & Edge Browser Exploits Read More »

ShadowPad, an infamous Windows backdoor that allows attackers to download further malicious modules or steal data, has been put to use by five different Chinese threat clusters since 2017. “The adoption of ShadowPad significantly reduces the costs of development and maintenance for threat actors,” SentinelOne researchers Yi-Jhen Hsieh and Joey Chen said in a detailed overview of …

ShadowPad Malware is Becoming a Favorite Choice of Chinese Espionage Groups Read More »

A remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek’s Kalay network, used in 83m devices. Security researchers have discovered a critical flaw that affects tens of millions of internet-of-things (IoT) devices – one that exposes live video and audio streams to …

Bug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop Read More »

T-Mobile has confirmed “unauthorized access” to its systems, days after a portion of customer data was listed for sale on a known cybercriminal forum. The U.S. cell giant, which last year completed a $26 billion merger with Sprint, confirmed an intrusion but that it has “not yet determined that there is any personal customer data involved.” …

T-Mobile confirms it was hacked after customer data posted online Read More »

Threatpost interviews Wiz CTO about a vulnerability recently patched by Amazon Route53’s DNS service and Google Cloud DNS. LAS VEGAS – Amazon and Google patched a domain name service (DNS) bug that allowed attackers to snoop on the confidential networking settings of companies – revealing computer and employee names along with office locations and exposed …

Black Hat: Novel DNS Hack Spills Confidential Corp Data Read More »

Threat actors are targeting everyone from job hunters to Bitcoin traders to college students wanting a break on their student loans, by exploiting the popular technology’s trust relationship with users. With the use of QR codes rising, so, too, are the numbers of scams that aim to take advantage of them. Researchers warned that threat actors …

QR Code Scammers Get Creative with Bitcoin ATMs Read More »

The decryptor is of little use to other companies hit in the spate of attacks unleashed before the notorious ransomware group went dark, researchers said. Someone has leaked the master decryption key that Kaseya used to unlock the files encrypted by a REvil ransomware attack on the company that affected customers across 22 countries last month. However, …

Kaseya’s ‘Master Key’ to REvil Attack Leaked Online Read More »

Researchers have found an entirely new attack vector for eavesdropping on Zoom and other virtual meetings. Virtual meetings are vulnerable to a new, exotic attack called Glowworm, which measures an audio output device’s LED power light changes and converts them to audio reproductions — allowing cyberattackers to listen to sensitive conversations. As an increasing amount …

‘Glowworm’ Attack Turns Power Light Flickers into Audio Read More »

A cyber attack that derailed websites of Iran’s transport ministry and its national railway system earlier this month, causing widespread disruptions in train services, was the result of a never-before-seen reusable wiper malware called “Meteor.” The campaign — dubbed “MeteorExpress” — has not been linked to any previously identified threat group or to additional attacks, …

A New Wiper Malware Was Behind Recent Cyberattack On Iranian Train System Read More »

A previously undocumented Android-based remote access trojan (RAT) has been found to use screen recording features to steal sensitive information on the device, including banking credentials, and open the door for on-device fraud. Dubbed “Vultur” due to its use of Virtual Network Computing (VNC)’s remote screen-sharing technology to gain full visibility on targeted users, the …

New Android Malware Uses VNC to Spy and Steal Passwords from Victims Read More »

Employee email takeover exposed personal, medical data of students, employees and patients. Authorities at the University of California San Diego Health reported a phishing attack lead to a major breach of its network, which allowed an adversary to gain access to sensitive patient, student and employee data. A Wednesday notice from UCSD Health explains the attack occurred …

UC San Diego Health Breach Tied to Phishing Attack Read More »

Majority of top vulnerabilities targeted last year were disclosed in the past two years, agencies from the United States, United Kingdom, and Australia have said, with Microsoft Office CVE dating from 2017. At the end of almost seven months in 2021, one of the 30 most exploited vulnerabilities dates from 2017, according to the US …

Get patching: US, UK, and Australia issue joint advisory on top 30 exploited vulnerabilities Read More »

BRI Life, the insurance arm of Indonesia’s Bank Rakyat Indonesia (BRI) (BBRI.JK), said on Tuesday it was investigating claims that the personal details of over two million of its customers had been advertised for sale by unidentified hackers. Hudson Rock, a cybercrime monitoring firm, told Reuters that it had found evidence which showed that multiple computers …

Indonesia’s BRI Life probes reported data leak of 2 million users Read More »

Apple has just issued iOS 14.7.1—an urgent update that comes with an “important” security fix for an issue that is already being used by adversaries to attack iPhones. For this reason, the iPhone maker says the iOS 14.7.1 update is urgent, and it is “recommended for all users.” The issue patched in iOS 14.7.1 is a vulnerability …

iOS 14.7.1: Apple Issues Urgent iPhone Update With Important Security Fixes Read More »

An infamous cross-platform crypto-mining malware has continued to refine and improve upon its techniques to strike both Windows and Linux operating systems by setting its sights on older vulnerabilities, while simultaneously latching on to a variety of spreading mechanisms to maximize the effectiveness of its campaigns. “LemonDuck, an actively updated and robust malware that’s primarily …

Microsoft Warns of LemonDuck Malware Targeting Windows and Linux Systems Read More »

Microsoft has released mitigations for the new PetitPotam NTLM relay attack that allows taking over a domain controller or other Windows servers. PetitPotam is a new method that can be used to conduct an NTLM relay attack discovered by French security researcher Gilles Lionel (Topotam). This method was disclosed this week along with a proof-of-concept …

Microsoft shares mitigations for new PetitPotam NTLM relay attack Read More »

Some movement of cargo impacted.A cyber attack has disrupted container operations at the South African port of Cape Town, an email seen by Reuters on Thursday said. Durban, the busiest shipping terminal in sub-Saharan Africa, was also affected, three sources with direct knowledge of the matter told Reuters. Cape Town Harbour Carriers Association said in …

Cyber attack disrupts major South African port operations Read More »

The MITRE Common Weakness Enumeration (CWE) team’s latest list of most dangerous software flaws includes several that shot up in significance since 2020. Memory corruption errors remain one of the most common and dangerous weaknesses in modern software. The MITRE-operated Homeland Security Systems Engineering and Development Institute put the issue on top of its latest …

Memory Corruption Issues Lead 2021 CWE Top 25 Read More »

Digital Shadows’ Q2 ransomware report highlighted that the number of victims posted to data leak sites increased by 47% compared to Q1. More than 700 organizations were attacked with ransomware and had their data posted to data leak sites in Q2 of 2021, according to a new research report from cybersecurity firm Digital Shadows.  Out of the …

740 Ransomware Victims Named on Data Leak Sites in Q2 2021 Read More »

Cheap, easy and prolific, the new version of the old FormBook form-stealer and keylogger has added Mac users to its hit list, and it’s selling like hotcakes. There’s a new version of the old FormBook form-stealer and keylogger that’s added Mac users to its hit list, and it’s selling like hotcakes on underground markets for as low …

MacOS Being Picked Apart by $49 XLoader Data Stealer Read More »

Phishing scams are one of the most often done owing to their simplicity and sadly, reliability as well. In the latest, researchers from ArmorBlox have discovered a new LinkedIn phishing campaign that targeted approximately 700 users through Google Workspace by hosting the phishing page on Google Forms. The phishing email itself prompted users to verify their LinkedIn accounts with …

In the latest LinkedIn phishing scam, the sender’s email address appears to be from Paul University which is based in Nigeria. Read More »

First comes spear-phishing, next download of malicious DLLs that spread to removable USBs, dropping Cobalt Strike Beacon, and then, sometimes, a fake Zoom app. Researchers have spotted a weird one: A newly identified threat actor linked to China that’s first mass-attacking, but then cherry-picking, just a few targets to hit with malware and data exfiltration. …

Fake Zoom App Dropped by New APT ‘LuminousMoth’ Read More »

Despite Microsoft’s efforts, the remote code execution bug known as “PrintNightmare” remains exposed and vulnerable to exploitation on some systems. The software giant issued its monthly Patch Tuesday security release to address a total of 117 CVE-listed security vulnerabilities. Of those 117 bugs, three were zero-day vulnerabilities that were under exploitation in the wild. These include CVE-2021-34448, …

Microsoft’s ‘PrintNightmare’ lingers, requires new patches Read More »

In this modernized, technological era, there are still countless companies in Indonesia from different sectors and industries, who have not prioritized cybersecurity, nor were they aware of the many cyberattack occurrence within the country. Seeing this phenomenon, in this webinar event, Protergo collaborated with DCI to explain their joined effort in improving the security of …

Protergo Webinar Collaboration with Data Center Indonesia DCI Read More »

Kaseya has warned customers that an ongoing phishing campaign attempts to breach their networks by spamming emails bundling malicious attachments and embedded links posing as legitimate VSA security updates. “Spammers are using the news about the Kaseya Incident to send out fake email notifications that appear to be Kaseya updates. These are phishing emails that …

Kaseya warns of phishing campaign pushing fake security updates Read More »

24 March 2021 In an effort to suppress the transmission of COVID-19, many companies are implementing work from home. To make it easier for workers, many systems are already operating digitally and can be operated remotely.  However, without realizing it, cyber-attacks and cases of data leaks are becoming more and more common. Seeing this, Protergo …

HOW TO PROTECT OURSELVES FROM FUTURE THREATS Read More »