+84949482065
A report from the US Senate Committee on Homeland Security and Governmental Affairs “reveals a sustained effort by China, over more than a decade, to gain influence over the Federal…
On July 28, admins in North America were reporting that they could not access the Microsoft 365 admin center. After looking into the situation, Microsoft determined that the incident affected…
Europol says that authorities in the European Union (EU) have helped 1.5 million people and organizations regain data that had been encrypted with ransomware. The announcement was made on July…
Authorities in the European Union (EU) say they have seen cases in which multi-factor authentication stopped ransomware groups from proceeding with their attacks. Marijn Schuurbiers, head of operations at Europol's…
For a 12-hour stretch on July 26 and 27, Russia’s Rostelecom was announcing routes for portions of Apple’s network. It is not known if this was due to a border…
A vulnerability in mental health app Feelyou exposed the email addresses of almost 78,000 users from 177 countries. The platform claimed that no other data has been impacted. More information…
The Minister for Foreign Affairs of Belgium claimed that several China-linked APT groups—APT27, APT30, and APT3—targeted the nation’s defense and interior ministries. Ref https://securityaffairs.co/wordpress/133425/apt/belgium-claims-china-hit-its-ministries.html
U.S. Cyber Command on Wednesday disclosed dozens of forms of malware that have been used against computer networks in Ukraine, including 20 never-before-seen samples of malicious code. More information https://therecord.media/cyber-command-shares-bevy-of-new-malware-used-against-ukraine/
A PowerShell script was found targeting cryptocurrency browser extensions or apps, including Edge, Chrome, and Brave. The hackers could replace a wallet address with their own to steal funds. Ref https://isc.sans.edu/diary/Malicious+PowerShell+Targeting+Cryptocurrency+Browser+Extensions/28772
AWS fixed multiple flaws in the authentication process that could let unauthenticated users bypass the protection for privilege escalation. Identified as CVE-2022-2385, the bug is an error in parameter validation.…
