February 3, 2020 30,000 Patients Affected After Malware Corrupts Medical Records On November 21, 2019, Fondren Orthopedic Group, an association of private orthopedic surgery practitioners located in Houston and the surrounding areas, were hit by a ... Read more
February 3, 2020 Evil Corp Resumes Operations Using New Phishing Tactic to Deliver RAT A hacking group known as Evil Corp, aka TA505, has resumed its malicious activities and has adopted a new phishing tactic for delivering malware. The ... Read more
February 3, 2020 Novel Coronavirus Outbreak Prompts HHS Covered Entity HIPAA Data Sharing Warning In response to the 2019 Novel Coronavirus outbreak, the Department of Health and Human Services has released a bulletin to make HIPAA-covered entities aware of ... Read more
January 31, 2020 Beware of Coronavirus Themed Phishing Attacks The novel coronavirus that originated in the province of Wuhan in China has now spread to other countries, with Japan and Thailand the worst affected ... Read more
January 27, 2020 Urgent Patching Required for Windows Server Flaws Now PoC Exploits Published On January 2020 Patch Tuesday (01.14.2020) Microsoft released patches to address two vulnerabilities in Remote Desktop Gateway (RD Gateway) that affected Windows Server 2012, 2016, ... Read more
January 24, 2020 CISA Warns of Increase in Emotet Malware Activity The U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning over an increase in Emotet malware activity. The Emotet botnet sprung ... Read more
January 24, 2020 Cisco Patches Critical Vulnerability in Cisco Firepower Management Center Cisco has issued hotfix patches for a critical vulnerability in its network security tool, Cisco Firepower Management Center (FMC). The flaw, tracked as CVE-2019-16028, is ... Read more
January 22, 2020 The Emotet Botnet is Back in Action Sending Spam with New Lures to Fool the Unwary There was a welcome Christmas break from the Emotet botnet, but life has returned to normal and it is well and truly back in action. ... Read more
January 21, 2020 Critical Zero-Day Internet Explorer Vulnerability Exploited in the Wild Microsoft has announced it is developing a patch for a zero-day Internet Explorer vulnerability that is currently being exploited in the wild. In the meantime, ... Read more
January 16, 2020 DHS: Citrix Vulnerability Being Exploited Still The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has released an alert in relation to a recently discovered flaw in the Citrix ... Read more
January 10, 2020 Mozilla Patches Actively Exploited Zero Day Firefox Vulnerability Mozilla has patched a critical zero-day vulnerability in the Firefox browser which is being actively exploited in the wild. The flaw – tracked as CVE-2019-17026 ... Read more
January 7, 2020 Landry’s Restaurant Chain Discovers POS Malware Infection The popular U.S. restaurant chain Landry’s has discovered malware on the point of sale (POS) system used by 63 of the chain’s brands including Aquarium, ... Read more
January 2, 2020 Microsoft Takes Down 50 Phishing Domains Used by North Korea-Backed Threat Group Microsoft has sought help from the courts to take down domains used by the North Korea-backed hacking group, Thallium (APT37). After securing the court order ... Read more
December 26, 2019 Three Members of Goznym Banking Trojan Gang Sentenced Three individuals who were part of the criminal organization responsible for the Goznym malware attacks in Europe and North America between 2015 and 2016 have ... Read more
December 24, 2019 Campaign Identified Delivering Package of 6 Malware Variants A malware distribution campaign has been detected by researchers at Deep Instinct which is delivering a package of 6 malware variants in one hit. The ... Read more
December 6, 2019 New Highly Destructive Wiper Malware Variant Detected A new wiper malware has been detected by security researchers at IBM X-Force which is being used in attacks on energy companies and industrial firms ... Read more
December 4, 2019 StrandHogg Android Vulnerability Allows Malicious Apps to Pose as Legitimate Ones An Android vulnerability has been discovered that allows malicious apps to disguise themselves as legitimate apps and gain full permissions. The vulnerability is being actively ... Read more
November 27, 2019 Microsoft Reports on New Dexphot Malware That Has Infected 80,000 Devices This week, Microsoft has reported on a ‘new’ malware threat named Dexphot. It is not exactly new, as Microsoft first detected the threat in October ... Read more
November 21, 2019 Horrific Android Camera Vulnerability Left Millions of Users Vulnerable to Spying A vulnerability has been identified in the Google Camera and Samsung Camera apps that is easy to exploit and would allow an attacker to take ... Read more
November 19, 2019 New Phishing Campaign Detected Targeting Office 365 Administrators PhishLabs has identified an ongoing phishing campaign targeting Office 365 administrators. The aim of the campaign is to obtain Office 365 admin credentials. Phishers face ... Read more
November 14, 2019 Fortinet Threat Landscape Report Confirms Increase in Malware-as-a-Service Edge Surface Attacks The recently released Fortinet Threat Landscape Report for Q3, 2019 shows hackers are targeting edge services and malware-as-a-service continues to grow in popularity. While there ... Read more
November 13, 2019 November Patch Tuesday: Microsoft Patches 74 Flaws Including Actively Exploited RCE November Patch Tuesday has seen Microsoft patch 74 vulnerabilities across all its products, including 13 critical flaws and one remote code execution vulnerability that is ... Read more
November 11, 2019 Highly Convincing Phishing Scam Uses Fake WebEx Client to Deliver RAT A new phishing scam has been detected that uses a WebEx meeting request as a lure to get business users to download a remote access ... Read more
November 1, 2019 Update Google Chrome: Zero-Day Vulnerability Being Actively Exploited in the Wild A recently discovered vulnerability in Google Chrome is being actively exploited by hackers. The vulnerability was discovered by Kaspersky Lab security researchers Anton Ivanov and ... Read more
October 31, 2019 Office 365 Users Targeted with Phishing Emails Containing Incomplete Voicemail Messages A phishing campaign has been identified targeting Office 365 users that includes an incomplete voicemail message as a lure to get them to visit a ... Read more
October 29, 2019 Phishing Campaign Identified Targeting NGOs and United Nations A sophisticated spear phishing campaign has been identified by security researchers at Lookout Inc. that is targeting the United Nations and nongovernment organizations (NGOs). The ... Read more
October 25, 2019 SonicWall Q3 Threat Report Shows Increase in IoT Malware, Web App Attacks, and Encrypted Threats There has been a year-over-year decline in malware and ransomware attacks according to a new report from SonicWall, but Quarter 3, 2019 has seen a ... Read more
October 18, 2019 Phorpiex Botnet Sending 30,000 Sextortion Emails an Hour Sextortion may be nothing new, but it has certainly proven popular with cybercriminals in recent months. Sextortion emails threaten to expose sordid details of the ... Read more
October 15, 2019 Many Popular Smartphones Vulnerable to Actively Exploited Zero-Day Android Flaw A zero-day flaw in the Android operating system used by some of the most popular mobile phones on the market is being exploited in real-world ... Read more
October 11, 2019 Reductor Malware Allows Hijacking of HTTPS Traffic Security researchers at Kaspersky Lab have identified a new form of malware named Reductor that manipulates the random number generator of web browsers allowing decryption ... Read more