ONNX phishing service targets Microsoft 365 accounts at financial firms
A new phishing-as-a-service (PhaaS) platform called ONNX Store is targeting Microsoft 365 accounts for employees at financial firms using QR codes in PDF attachments. The…
Month: June 2024
Chinese-Linked Velvet Ant Compromised F5 BIG-IP Appliances
Researchers that were called to investigate a cyberattack on a large organization in late 2023 have traced the activity to a sophisticated Chinese-linked threat actor…
VMware fixes critical vCenter RCE vulnerability, patch now
VMware has issued a security advisory addressing critical vulnerabilities in vCenter Server, including remote code execution and local privilege escalation flaws. VMware vCenter Server is a…
Intelbroker Advertises Massive AMD Data Breach On Dark Web
The notorious threat actor known as Intelbroker claims to have orchestrated a massive data breach of AMD, a top player in the semiconductor industry. The unconfirmed…
Scathing report on Medibank cyberattack highlights unenforced MFA
A scathing report by Australia’s Information Commissioner details how misconfigurations and missed alerts allowed a hacker to breach Medibank and steal data from over 9 million…
Explained: Android overlays and how they are used to trick people
Sometimes you’ll see the term “overlays” used in articles about malware and you might wonder what they are. In this post we will try to…
EU Chat Control Proposal To Prevent Child Sexual Abuse Slammed By Experts
Experts slammed the latest European Union proposals for chat control to prevent child sexual abuse calling it a front face for mass surveillance and an…
VMware fixed RCE and privilege escalation bugs in vCenter Server
VMware fixed RCE and privilege escalation bugs in vCenter Server Pierluigi Paganini June 18, 2024 VMware addressed vCenter Server vulnerabilities that can allow remote code…
BlackSuit Ransomware Leaks Kansas City Police Data in Failed Ransom Plot
The Kansas City, Kansas Police Department (KCKPD) is facing a major security breach after the notorious BlackSuit ransomware group leaked what they allege is stolen…
Signal Foundation Warns Against EU’s Plan to Scan Private Messages for CSAM
Jun 18, 2024NewsroomPrivacy / Encryption A controversial proposal put forth by the European Union to scan users’ private messages for detection child sexual abuse material…
Internet Computer Protocol Launches Walletless Verified Credentials for Public Trust
Internet Computer Protocol (ICP), a decentralized blockchain network that extends the functionality of Web3 by overcoming the limitations of traditional blockchains and smart contracts, has…
Benelux specialised venture capital fund finds global deep tech investments
An independent fund, imec.xpand, is benefiting from a partnership with Belgian research giant imec to find the right investments and more. The first imec.xpand fund…