The Week In Ransomware – January 15th 2021 – Locking You Up It has been another quiet week for ransomware, though we did have some interesting stories come out this week. By far, the most interesting is the news about ChastityLocker – ransomware that exploits vulnerabilities in men’s chastity belts (not joking) Read more…
Google To Kill Chrome Sync Feature In Third-party Browsers Google says that it will block third-party Chromium web browsers from using private Google APIs after discovering that they were integrating them although they’re intended to be used only in Chrome. This is because many of the Google APIs included in Read more…
Windows Finger Command Abused By Phishing To Download Malware Attackers are using the normally harmless Windows Finger command to download and install a malicious backdoor on victims’ devices. The ‘Finger’ command is a utility that originated in Linux/Unix operating systems that allows a local user to retrieve a list of Read more…
Hackers Leaked Altered Pfizer Data To Sabotage Trust In Vaccines The European Medicines Agency (EMA) today revealed that some of the stolen Pfizer/BioNTech vaccine candidate data was doctored by threat actors before being leaked online with the end goal of undermining the public’s trust in COVID-19 vaccines. EMA is the Read more…
Scotland Environmental Regulator Hit By ‘Ongoing’ Ransomware Attack The Scottish Environment Protection Agency (SEPA) confirmed on Thursday that some of its contact center, internal systems, processes and internal communications were affected following a ransomware attack that took place on Christmas Eve. “SEPA confirms ongoing ransomware attack likely to be by international serious Read more…
Signal Down After Getting Flooded With New Users Signal users are currently experiencing issues around the world, with users unable to send and receive messages. When attempting to send messages via Signal, users are seeing loading screen and error message “502”. According to DownDetector and user reports, Signal is currently experiencing an outage in Read more…
Microsoft Warns Of Incoming Windows Zerologon Patch Enforcement Microsoft today warned admins that updates addressing the Windows Zerologon vulnerability will transition into the enforcement phase starting next month. Zerologon is a critical 10/10 rated security flaw tracked as CVE-2020-1472 which, when successfully exploited, enables attackers to elevate privileges to domain administrator and take control over the domain. Read more…
Undisclosed Apache Velocity XSS Vulnerability Impacts GOV Sites An undisclosed Cross-Site Scripting (XSS) vulnerability in Apache Velocity Tools can be exploited by unauthenticated attackers to target government sites, including NASAand NOAA. Although 90 days have elapsed since the vulnerability was reported and patched, BleepingComputer is not aware of a formal disclosure made by the Read more…
Let us help you out.
Singapore
7 Temasek Boulevard
#12-07, Suntec Tower One
Singapore 038987
Thailand
The Royal Place 1
2, 2/399 Mahatlek Luang 1 Alley, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!
Click one of our contacts below to chat on WhatsApp
