-
November 11th: Train shutdown in Denmark +++ VMware Workspace ONE
Train shutdown in Denmark Last Saturday, DSB, one of the largest train companies in Denmark, had to stop all their trains for several hours. The whole train traffic was shut down because of a cyberattack, but it was not the train company which was under attack – it was a provider. Train drivers use an […]
-
November 04th: Fine for failing to protect own data +++ Twitter Phishing +++ OPENSSL Patch 3.0.7
Fine for failing to protect own data The English company Interserve Group has to fear a 4.4 million pounds fine from the Information Commissioner Office (ICO). In May 2020, the mentioned company was victim of a phishing attack of an unknown group. 113.000 financial and personal data from current and former employees were stolen. The […]
-
October 21th: New PhP version of Ducktail +++ New vulnerability Log4Text
New PhP version of Ducktail A new version of the Ducktail malware was found. Originally, Ducktail was first documented in July 2021 and focused on hijacking Facebook and advertising accounts. It tried to lure users with a Facebook business account into downloading a file that supposedly contained Facebook advertising information. After being downloaded and executed, […]
-
October 7th: Blackbyte’s new cyberattack strategy +++ Patch of the week – by Cisco
Blackbyte’s new cyberattack strategy According to researchers from Sophos, Blackbyte is back with a new strategy to disable more than 1000 different drivers which security products rely on. Blackbyte has already abused various software to bypass security features in 2022. Now, a new technic relies on a MSI driver and is therefore called „Bring your […]
-
September 16th: Microsoft Patch fixes 63 vulnerabilities +++ Zero-Day Vulnerability in WordPress Plugin
Microsoft Patch fixes 63 vulnerabilities, including 5 critical Microsoft released a new Patch on Tuesday the 13th which fixes 63 vulnerabilities, 5 of them are classified as critical as they allow remote code execution. The number of bugs in each vulnerability category is listed below: 18 Elevation of Privilege Vulnerabilities 1 Security Feature Bypass Vulnerabilities […]
-
September 2nd: GO#WEBBFUSCATOR +++ Patches of the week
GO#WEBBFUSCATOR Threat analysts form Securonix have spotted a new malware campaign dubbed GO#WEBBFUSCATOR which relies on phishing e-mails, malicious documents and most curiously on an image of the James Webb telescope. The malware is written in Golang, a programing language which is becoming increasingly popularfor cybercrime thanks to its cross-platform and its resistance to reverse […]
-
August 19th: Apple security updates +++ Google Chrome zero-day +++ BugDrop malware
Apple security updates to patch new zero-day vulnerabilites Apple released on Wednesday security updates for iOS, iPadOS, and macOS platforms to remediate two zero-day vulnerabilities previously exploited by threat actors to compromise its devices: CVE-2022-32893 – An out-of-bounds issue in WebKit which could lead to the execution of arbitrary code by processing a specially crafted web […]
-
August 12th: Processors contain vulnerabilities +++ Open Cybersecurity Schema Framework +++ Vulnerabilities and updates of the week
After Spectre and Meltdown, it is now Æpicleak’s and SQUIP’s turn Processors from AMD and Intel contain vulnerabilities that attackers can use to leak data. They were found by researchers of Sapienza University of Rome, the Graz University of Technology, the CISPA Helmholtz Center for Information Security, and Amazon Web Services. The first vulnerability – […]
-
June 3rd: 10 Ways Attackers Gain Access to Networks +++ Zero-Day Vulnerability in Microsoft Office +++ CIOs Concerned that their Software Supply Chain is Vulnerable
10 Ways Attackers Gain Access to Networks CISA, Cybersecurity & Infrastructure Security Agency, revealed the top ten attack vectors most exploited by cybercriminals in order to gain access to organization networks, as well as the techniques they use to gain access. And boy, is it a lot to stomach. Alas, we tried to filter the […]