Google To Kill Chrome Sync Feature In Third-party Browsers Google says that it will block third-party Chromium web browsers from using private Google APIs after discovering that they were integrating them although they’re intended to be used only in Chrome. This is because many of the Google APIs included in Read more…
Windows Finger Command Abused By Phishing To Download Malware Attackers are using the normally harmless Windows Finger command to download and install a malicious backdoor on victims’ devices. The ‘Finger’ command is a utility that originated in Linux/Unix operating systems that allows a local user to retrieve a list of Read more…
Hackers Leaked Altered Pfizer Data To Sabotage Trust In Vaccines The European Medicines Agency (EMA) today revealed that some of the stolen Pfizer/BioNTech vaccine candidate data was doctored by threat actors before being leaked online with the end goal of undermining the public’s trust in COVID-19 vaccines. EMA is the Read more…
Scotland Environmental Regulator Hit By ‘Ongoing’ Ransomware Attack The Scottish Environment Protection Agency (SEPA) confirmed on Thursday that some of its contact center, internal systems, processes and internal communications were affected following a ransomware attack that took place on Christmas Eve. “SEPA confirms ongoing ransomware attack likely to be by international serious Read more…
Signal Down After Getting Flooded With New Users Signal users are currently experiencing issues around the world, with users unable to send and receive messages. When attempting to send messages via Signal, users are seeing loading screen and error message “502”. According to DownDetector and user reports, Signal is currently experiencing an outage in Read more…
Microsoft Warns Of Incoming Windows Zerologon Patch Enforcement Microsoft today warned admins that updates addressing the Windows Zerologon vulnerability will transition into the enforcement phase starting next month. Zerologon is a critical 10/10 rated security flaw tracked as CVE-2020-1472 which, when successfully exploited, enables attackers to elevate privileges to domain administrator and take control over the domain. Read more…
Undisclosed Apache Velocity XSS Vulnerability Impacts GOV Sites An undisclosed Cross-Site Scripting (XSS) vulnerability in Apache Velocity Tools can be exploited by unauthenticated attackers to target government sites, including NASAand NOAA. Although 90 days have elapsed since the vulnerability was reported and patched, BleepingComputer is not aware of a formal disclosure made by the Read more…
UN Data Breach Exposes Over 100,000 UN Employees’ Details Sakura Samurai discovered an endpoint that exposed GitHub credentials on a United Nations Environment Program (UNEP) subdomain, which allowed them to access more than 100,000 UN employees’ records. A group of cybersecurity researchers from Sakura Samurai accessed around 100,000 personal records and login Read more…
Verified Twitter Accounts Hacked In $580k ‘Elon Musk’ Crypto Scam Threat actors are hacking verified Twitter accounts in an Elon Musk cryptocurrency giveaway scam that has recently become widely active. There is nothing new about cryptocurrency scams on Twitter, especially ones pretending to be giveaways from Elon Musk. In 2018, Read more…
Facebook Sues Makers Of Malicious Chrome Extensions For Scraping Data Facebook has taken legal action against the makers of malicious Chrome extensions used for scraping user-profiles and other information from Facebook’s website and from users’ systems without authorization. The two defendants developed and distributed the malicious browser extensions through the Read more…
Let us help you out.
Singapore
7 Temasek Boulevard
#12-07, Suntec Tower One
Singapore 038987
Thailand
The Royal Place 1
2, 2/399 Mahatlek Luang 1 Alley, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!
Click one of our contacts below to chat on WhatsApp
