Scammers seek to take advantage of pandemic fears by sending phishing emails that lure recipients to visit malicious websites INKY researchers report that scammers impersonate White House, President Donald Trump, and Vice President Mike Pence on email notifications listed as informational alerts for citizens.[1] Global pandemic and sensitive time in the […]
News
Marriott International suffers a second massive data breach Marriott International Inc., one of the largest hotel chains worldwide, officially disclosed a data breach[1] that may have exposed the credentials of more than 5.2 million registered hotel guests. The company consisting of 30 brands and owning more than 7,000 properties across […]
A new Marriott data breach exposed credentials of 5.2 million ...
CVE-2020-0688 was patched by Microsoft, yet companies are still not updating Microsoft Exchange Security firm Rapid7 has uncovered that more than 350,000 Microsoft Exchange servers remain open to security vulnerability within its servers.[1] Despite that Microsoft shipped a patch in its Patch Tuesday on February 11 and urged admins to apply it without […]
350,000 organizations remain vulnerable to Microsoft Exchange flaw
Misconfigured Docker API ports left exposed without passwords used to spread new crypto-mining malware Security researchers released a report on a new attack campaign that targets Docker servers and delivers Kinsing malware.[1] By connecting to open API of Docker server, attackers can run files, and trigger shell scripts that lead […]
Hackers abuse misconfigured Docker servers to release Kinsing malware
The pre-installed HP Support Assistant software on Windows computers is riddled with vulnerabilities An independent security researcher Bill Demirkapi has uncovered several critical vulnerabilities in HP Support Assistant software.[1] According to his research, upon successful exploitation, malicious actors could perform remote code execution, escalate privileges locally, and delete arbitrary files. […]
HP computer owners beware: HP Support Assistant flaws remain unpatched
Twitter revealed that a bug allowed private files shared via the platform to be stored inside Firefox cache for up to seven days Those who use Mozilla Firefox for accessing Twitter and sharing files via private DMs should be concerned – it turned out that all data shared with others […]
Twitter privacy issues: Firefox cached files sent through DMs
Studying and working from home can lead to hacker attacks since Zoom hack is real due to UNC path injections It is reported that Zoom Windows client is vulnerable to UNC path injections so one click on the link can lead to stolen data or hacked devices.[1] The situation in […]
Zoom hack allows hackers to compromise Windows and steal credentials
Phishing surrounding coronavirus outbreak continues – scam emails deliver a new version of Zeus Sphinx banking trojan While some cybercriminals promise to spare infecting healthcare providers with malware during a difficult time of coronavirus outbreak,[1] others are keen to use it for personal gain. Security researchers at IBM X-Force uncovered […]
Resurface of Zeus Sphinx trojan: threat actors abusing COVID-19 crisis
#StayHome Tech – Private Internet Access VPN Considering how the recent COVID-19 pandemic has been evolving, people all over the world are being encouraged to #StayHome, no matter if they’re sick or not. These campaigns make people more present online and more involved in the world of cybersecurity due to malicious […]
Online safety issues during the quarantine: how to manage your ...
A data dump containing 4,934,863 Georgian voters’ personal information was found being sold on the underground forums On Saturday, security researchers from Under the Breach discovered a listing on underground hacking forums – it contained personal information of Georgian citizens. The data dump reached 1.04 GB in size and was […]