+84949482065
Researchers from Cisco Talos have discovered a malware campaign that leverages public cloud infrastructure, like Amazon web services (AWS) and Azure Cloud Services, to spread three different remote access trojans…
SonicWall has confirmed today that some of its Email Security and firewall products have been hit by the Y2K22 bug, causing message log updates and junk box failures starting with…
Looks like another antivirus provider is abusing access to users devices by deploying crypto mining software to their client. More https://krebsonsecurity.com/2022/01/500m-avira-antivirus-users-introduced-to-cryptomining/
As of January 4, 2022, legacy services for #BlackBerry 7.1 OS and earlier, BlackBerry 10 software, BlackBerry PlayBook OS 2.1 and earlier are discontinued. BlackBerry devices running these legacy services…
According to a Washington Post report, China is mining Western social media for data about “well known Western media journalists [and] … key personnel from political, business and media circles.”…
Microsoft has released temporary fixes for a bug in Exchange Server that trapped email in transport queues. The issue, jokingly dubbed #Y2K22, is due to a date check failure in…
SIM swapping (also known as SIM hijacking) makes it possible for attackers to take control of a target's mobile phone number by tricking or bribing the carrier's employees to reassign…
Social media is a great way to stay in touch with family, friends and keep up to date on the latest news. However, it’s important to know how to manage…
Security vulnerabilities in Microsoft Teams could allow an attacker to spoof link previews, leak IP addresses, and even access internal services. Here https://portswigger.net/daily-swig/multiple-vulnerabilities-in-microsoft-teams-could-spoof-urls-leak-ip-addresses
The primary cause of Log4Shell, formally known as CVE-2021-44228, is what NIST calls improper input validation. More information https://isc.sans.edu/diary/Example+of+how+attackers+are+trying+to+push+crypto+miners+via+Log4Shell/28172
