Zimbra Zero-day Vulnerability Actively Exploited to Steal Emails A cross-site scripting (XSS) Zimbra security vulnerability is actively exploited in attacks targeting European media and government organizations. Zimbra is an email and collaboration platform that also includes instant messaging, contacts, video conferencing, file sharing, and cloud storage capabilities. According to Zimbra, Read more…
Windows Terminal Now can Automatically Launch Profiles as Administrator Microsoft released today a new Windows Terminal version that comes with a long-awaited feature making it possible to launch profiles that will automatically run as Administrator. To launch auto-elevated profiles, you have two options: configure the app to open a specific profile in Read more…
Intuit Warns of Phishing Emails Threatening to Delete Accounts Accounting and tax software provider Intuit has notified customers of an ongoing phishing campaign impersonating the company and trying to lure victims with fake warnings that their accounts have been suspended. Intuit’s alert follows reports received from customers who were emailed and Read more…
Cisco Fixes Critical Bugs in SMB Routers, Exploits Available Cisco has released patches for multiple vulnerabilities in the Small Business RV Series router platform that could allow remote attackers to gain complete control over the device, in many cases, without authentication. In total, there are fifteen vulnerabilities fixed by these Read more…
Target Open Sources Scanner for Digital Credit Card Skimmers Target, one of the largest American department store chains and e-commerce retailers, has open sourced ‘Merry Maker’ – its years-old proprietary scanner for payment card skimming. A skimmer is malicious code injected into shopping sites to steal customers’ credit card data Read more…
Microsoft Blocked Billions of Brute-force and Phishing Attacks Last Year Office 365 and Azure Active Directory (Azure AD) customers were the targets of billions of phishing emails and brute force attacks successfully blocked last year by Microsoft. “From January 2021 through December 2021, we’ve blocked more than 25.6 billion Azure Read more…
State Hackers’ New Malware Helped them Stay Undetected for 250 Days A state-backed Chinese APT actor tracked as ‘Antlion’ has been using a new custom backdoor called ‘xPack’ against financial organizations and manufacturing companies. The malware has been used in a campaign against targets in Taiwan that researchers believe spanned Read more…
MFA Adoption Pushes Phishing Actors to Reverse-proxy Solutions The rising adoption of multi-factor authentication (MFA) for online accounts pushes phishing actors to use more sophisticated solutions to continue their malicious operations, most notably reverse-proxy tools. The COVID-19 pandemic has changed the way people work forever, proving that it’s possible and Read more…
Wormhole Cryptocurrency Platform Hacked to Steal $326 million Hackers have exploited a vulnerability in the Wormhole cross-chain crypto platform to steal $326 million in cryptocurrency. Wormhole is a platform that allows users to transfer cryptocurrency across different blockchains. It does this by locking the original token in a smart contract and Read more…
ESET Antivirus Bug Let Attackers Gain Windows SYSTEM Privileges Slovak internet security firm ESET released security fixes to address a high severity local privilege escalation vulnerability affecting multiple products on systems running Windows 10 and later or Windows Server 2016 and above. The flaw (CVE-2021-37852) was reported by Michael DePlante Read more…
Let us help you out.
Singapore
7 Temasek Boulevard
#12-07, Suntec Tower One
Singapore 038987
Thailand
The Royal Place 1
2, 2/399 Mahatlek Luang 1 Alley, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!
Click one of our contacts below to chat on WhatsApp
