CISA adds CVE-2022-1388 flaw in F5 BIG-IP to its Known Exploited Vulnerabilities Catalog
US Critical Infrastructure Security Agency (CISA) adds critical CVE-2022-1388 flaw in F5 BIG-IP products to its Known Exploited Vulnerabilities Catalog....
News
Adding Guardrails To A Cloud Account After The Fact
This article outlines a priority checklist of which guardrails need to be applied to an existing cloud account. Answering questions...
US-CERT Bulletin (SB22-129):Vulnerability Summary for the Week of May 2, 2022
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...
Update now! Microsoft releases patches, including one for actively exploited zero-day
Microsoft has released patches for 74 security problems, including fixes for seven “critical” vulnerabilities, and an actively exploited zero-day vulnerability that...
Canon printer owners: Be careful of bogus driver download sites
Think of all the really common, very mundane things you search for of a tech nature. Drivers. Scanners. Printers. A...
Microsoft Patch Tuesday updates for May 2022 fixes 3 zero-days, 1 under active attack
Microsoft Patch Tuesday security updates for May 2022 address three zero-day vulnerabilities, one of them actively exploited. Microsoft Patch Tuesday...
EU condemns Russian cyber operations against Ukraine
The European Union condemns the cyberattacks conducted by Russia against Ukraine, which targeted the satellite KA-SAT network. The European Union...
Security Above and Beyond CNAPPs
How Trend Micro’s unified cybersecurity platform is transforming cloud security If you like the site, please consider joining the telegram...
Examining the Black Basta Ransomware’s Infection Routine
We analyze the Black Basta ransomware and examine the malicious actor’s familiar infection tactics. If you like the site, please...
APT34 targets Jordan Government using new Saitama backdoor
On April 26th, we identified a suspicious email that targeted a government official from Jordan’s foreign ministry. The email contained...
Microsoft fixed RCE flaw in a driver used by Azure Synapse and Data Factory
Microsoft disclosed a now-fixed vulnerability in Azure Synapse and Azure Data Factory that could have allowed remote code execution. Microsoft...
Client side scanning may cost more than it delivers
On May 11, 2022, the EU will publicize a proposal for a law on mandatory chat control. The European Commission...
“Chemical attack” email warnings deliver Jester Stealer malware
Jester Stealer, a malicious file capable of large amounts of data theft, is on the prowl again. The Ukrainian Computer...
Hacktivists hacked Russian TV schedules during Victory Day and displayed anti-war messages
Hacktivists yesterday defaced the Russian TV with pro-Ukraine messages and took down the RuTube video streaming site. Hacktivists and white...
Threat actors are actively exploiting CVE-2022-1388 RCE in F5 BIG-IP
Threat actors are exploiting critical F5 BIG-IP flaw CVE-2022-1388 to deliver malicious code, cybersecurity researchers warn. Threat actors started massively exploiting...
Exclusive: Welcome “Frappo” – Resecurity identified a new Phishing-as-a-Service
The Resecurity HUNTER unit identified a new underground service called ‘Frappo’, which is available on the Dark Web. “Frappo” acts...
DCRat, only $5 for a fully working remote access trojan
Researchers warn of a remote access trojan called DCRat (aka DarkCrystal RAT) that is available for sale on Russian cybercrime...
Costa Rica continues defence against sustained Conti ransomware attacks
It’s not been plain sailing recently for Conti ransomware, the Ransomware as a Service (RaaS) group with several major attacks...
Update now! F5 BIG-IP vulnerability being actively exploited
The Australian Cyber Security Centre (ACSC) has announced it is aware of the existence of Proof of Concept (PoC) code...
Recovering from romance scams with Cindy Liebes: Lock and Code S03E10
Earlier this year, many members of the public were introduced to the facets of a long-ignored crime in cyberspace: The...
How to remove Google from your life
Swearing off a company used to be easier. Rude customer service, an unfortunate bout of food poisoning, even standing up...
CERT-UA warns of malspam attacks distributing the Jester info stealer
The Computer Emergency Response Team of Ukraine (CERT-UA) warns of attacks spreading info-stealing malware Jester Stealer. The Computer Emergency Response...
A special browser designed for online banking. Good idea, or not so much?
The German Sparkasse bank has launched a browser that is especially designed to do your online banking. The browser called...
$600 a week to wrap your car? It’s a scam
A friend of mine recently received a text message which they described as “intriguing, but nonsensical”. They were convinced it...
