Latest MacOS Big Sur Also Has SUDO Root Privilege Escalation Flaw A recently discovered heap-based buffer overflow vulnerability in Linux SUDO also impacts the latest version of Apple macOS Big Sur, with no patch available yet. Last week, BleepingComputer had reported on CVE-2021-3156 aka Baron Samedit, a flaw in SUDO which lets local users gain Read more…
Female Escort Review Site Data Breach Affects 470,000 Members An online community promoting female escorts and reviews of their services has suffered a data breach after a hacker downloaded the site’s database. EscortReviews.com is an adult online vBulletin forum community that allows US and Mexico-based escorts to promote their services, Read more…
US Federal Payroll Agency Hacked Using SolarWinds Software Flaw The FBI has discovered that the National Finance Center (NFC), a U.S. Department of Agriculture (USDA) federal payroll agency, was compromised by exploiting a SolarWinds Orion software flaw, according to a Reuters report. NFC provides human resources and payroll services to roughly Read more…
Babyk Ransomware Won’t Hit Charities, Unless They Support LGBT, BLM The Babyk ransomware operation has launched a new data leak site used to publish victim’s stolen data as part of a double extortion strategy. Included is a list of targets they wont attack with some exclusions that definitely stand out. Read more…
Microsoft Defender Now Detects MacOS System, App Vulnerabilities Microsoft announced that Defender for Endpoint will now also help admins discover OS and software vulnerabilities affecting macOS devices on their organization’s network. With the enterprise endpoint security platform’s threat and vulnerability management feature now generally available for macOS, security admins can Read more…
The SolarWinds Breach Overview “One of the most high-profile cyberespionage campaigns in recent years.” “Among the most ambitious cyber operations ever disclosed.” “A moment of reckoning.” These are some of the descriptors applied to the SolarWinds breach, which the global cybersecurity community has been intently monitoring since it was first Read more…
Trickbot Malware Now Maps Victims’ Networks Using Masscan The Trickbot malware has been upgraded with a network reconnaissance module designed to survey local networks after infecting a victim’s computer. This new module, dubbed masrv, uses the open-source masscan tool, a mass port scanner with its own TCP/IP stack and capable of scanning large Read more…
Malicious Script Steals Credit Card Info Stolen By Other Hackers A threat actor has infected an e-commerce store with a custom credit card skimmer designed to siphon data stolen by a previously deployed Magento card stealer. Credit card skimmers (aka payment card skimmers or Magecart scripts) are JavaScript scripts that Read more…
Apple Pulls iCloud 12 For Windows 10 With Keychain Sync Feature Apple has pulled iCloud 12 for Windows 10 from the Microsoft Store for what is believed to be issues with their new Chrome iCloud Keychain password synchronization feature. On January 26th, Apple released iCloud 12 with a new ‘Passwords’ feature, Read more…
New Linux Malware Steals SSH Credentials From Supercomputers A new backdoor has been targeting supercomputers across the world, often stealing the credentials for secure network connections by using a trojanized version of the OpenSSH software. The malware is not widespread and appears to target mostly high-performance computers (HPC) and servers Read more…
Let us help you out.
Singapore
7 Temasek Boulevard
#12-07, Suntec Tower One
Singapore 038987
Thailand
The Royal Place 1
2, 2/399 Mahatlek Luang 1 Alley, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!
Click one of our contacts below to chat on WhatsApp
