Category Security

May 18, 2023Ravi LakshmananNetwork security/vulnerability Cisco has released updates that address nine security flaws present in Small Business Series switches. These flaws can be exploited by an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service…

Personal information is used for songs, and banks require social media sites to pay out if users get scammed. All this and much more is covered in the latest edition of the Smashing Security podcast by computer security veterans Graham…

The majority (28%) of oil and gas CISOs are either unaware of or not actively monitoring potential cyberthreats from the dark web. This claim comes from the latest Searchlight Cyber ​​Threat Intelligence Report, which also found that more than a…

A threat actor known as BatLoader has been observed running malicious campaigns using Google Search Ads to deliver fake ChatGPT and Midjourney web pages. A security researcher at eSentire’s Threat Response Unit (TRU) described the campaign in an advisory published…

May 17, 2023Ravi LakshmananSIM exchange/server security Financially motivated cyber attackers have been observed exploiting the Microsoft Azure Serial Console on virtual machines (VMs) to install third-party remote management tools within compromised environments. Mandiant, a Google company, believes this activity is…

A new blog post from Google explains our new policy for dealing with inactive accounts. This is important for people who don’t log in regularly. Google claims many overlooked accounts don’t have two-factor authentication enabled or use old or reused…

Security researchers at Proofpoint have discovered several new ways to effectively exploit Microsoft Teams via social engineering. “[We] A report released today by the company recently analyzed over 450 million malicious sessions targeting Microsoft 365 cloud tenants, detected throughout the…

May 17, 2023Ravi LakshmananCyber ​​Threat / Mobile Security hacker group called oil alpha Suspected links to Yemen’s Houthi movement have been linked to cyber espionage targeting development, humanitarian aid, the media, and non-governmental organizations in the Arabian Peninsula. “OilAlpha leveraged…

Last week, I received an unsolicited email from a person named Emma. She said she works for a “language learning app” and they were big fans of the “Smashing Security” podcast (yes…) and would love to have a member of…

Acronis is expanding its Cyber ​​Protect Cloud offering with new endpoint detection and response (EDR) solutions and looking at how generative AI fits into the platform in the future. Released May 17, 2023, this new tool is specifically designed for…