Linux System Service Bug Gives You Root on Every Major Distro A vulnerability in Polkit’s pkexec component that is present in the default configuration of all major Linux distributions can be exploited to gain full root privileges on the system, researchers warn today. Identified as CVE-2021-4034 and named PwnKit, the Read more…
TrickBot Now Crashes Researchers’ Browsers to Block Malware Analysis The notorious TrickBot malware has received new features that make it more challenging to research, analyze, and detect in the latest variants, including crashing browser tabs when it detects beautified scripts. TrickBot has dominated the malware threat landscape since 2016, constantly Read more…
UK Govt Releasing Nmap Scripts to Find Unpatched Vulnerabilities The United Kingdom’s National Cyber Security Centre (NCSC), the government agency that leads UK’s cyber security mission, is releasing NMAP Scripting Engine scripts to help defenders scan for and remediate vulnerable systems on their networks. This is a joint effort between Read more…
New DazzleSpy Malware Targets MacOS users in Watering Hole Attack A new watering hole attack has been discovered targeting macOS users and visitors of a pro-democracy radio station website in Hong Kong and infecting them with the DazzleSpy malware. As detailed by researchers at ESET who have been investigating the Read more…
Linux Kernel Bug can let Hackers Escape Kubernetes Containers A vulnerability affecting Linux kernel and tracked as CVE-2022-0185 can be used to escape containers in Kubernetes, giving access to resources on the host system. Security researchers warn that exploiting this security issue is easier and more promising than initially estimated, Read more…
Google Drive Now Warns you of Suspicious Phishing, Malware Docs Google is rolling out new warning banners in Google Drive to alert users of potentially suspicious files that threat actors could use for malware delivery and in phishing attacks. This extra defense against abusive behavior and content was first announced in Read more…
Segway Store Hacked to Steal Customers’ Credit Cards Segway’s online store was compromised to include a malicious Magecart script that potentially allowed threat actors to steal credit cards and customer information during checkout. Segway is the maker of the iconic two-wheeled self-balancing personal transporters and a range of other types of human Read more…
Missing Microsoft Intune Certs Break Email, VPN on Samsung Devices Microsoft says Samsung devices enrolled in Microsoft Intune using a work profile will experience email and VPN connectivity issues due to missing certificates after upgrading to Android 12. Microsoft Intune is a cloud-based service designed to help admins manage Windows, macOS, Read more…
Russia Arrests Leader of “Infraud Organization” Hacker Group The Russian Federal Security Service (FSB) and law enforcement have arrested Andrey Sergeevich Novak, the alleged leader of the Infraud Organization, a hacker group that caused losses of more than $560 million in seven years of activity. The arrest was possible due Read more…
Google Drive Flags Nearly Empty Files for ‘Copyright Infringement’ Users were left startled as Google Drive’s automated detection systems flagged a nearly empty file for copyright infringement. The file, according to one Drive user, contained nothing other than just the digit “1” within. Is digit ‘1’ copyrighted? This week, Assistant Professor at Michigan Read more…
Let us help you out.
Singapore
7 Temasek Boulevard
#12-07, Suntec Tower One
Singapore 038987
Thailand
The Royal Place 1
2, 2/399 Mahatlek Luang 1 Alley, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!
Click one of our contacts below to chat on WhatsApp
