3CX desktop app used in a supply chain attack
Researchers have found that the 3CX desktop app may be compromised and used in supply chain attacks. Researchers have found that the 3CX desktop app…
Category: MalwareBytes
Bing and other Microsoft applications fall victim to account takeover flaw
We take a look at the “BingBang” flaw which allowed for search engine manipulation in Bing. Researchers from Wiz have discovered a way to allow…
Update now! Apple fixes actively exploited vulnerability and introduces new features
Apple has released security updates and new features for several of its products, including a fix for an actively exploited vulnerability. Apple has released security…
“Log-out king” Instagram scammer gets accounts taken down, then charges to reinstate them
A fraudster going by “OBN Brandon” has been defrauding Instagram influencers and entertainment figures out of hundreds of thousands of dollars by taking down their…
ChatGPT helps both criminals and law enforcement says Europol report
Subject matter experts at Europol were asked to explore how criminals can abuse LLMs such as ChatGPT, as well as how they may assist investigators…
Fake DDoS services set up to trap cybercriminals
The British National Crime Agency has been setting up fake DDoS services to teach people a lesson in what not to do online. The “online…
Food giant Dole reveals more about ransomware attack
While Dole hasn’t said a lot about the February ransomware incident, it has revealed threat actors accessed employee data. Fruit and vegetable producer Dole has confirmed attackers behind its February…
Bogus Chat GPT extension takes over Facebook accounts
We look at a bogus Chat GPT Chrome extension which was after Facebook cookies. If you’re particularly intrigued by the current wave of interest in AI, take…
Ransomware gunning for transport sector’s OT systems next
ENISA released a report tackling the threat landscape of the transportation industry. And it has foreseen the targeting of OT systems in the future. ENISA…
GitHub changes its compromised SSH key
Developer platform GitHub has changed its RSA SSH key after it was accidentally exposed on a public repository. Late last week, GitHub tweeted that it had…
Solving the password’s hardest problem with passkeys, featuring Anna Pobletts
This week on Lock and Code, we speak with Anna Pobletts about the “death” of passwords, and how passkeys can become the non-compromising fix to…
Zero-day spells disaster for Bitcoin ATM
We look at a $1.5m heist of cryptocurrency via compromised Bitcoin ATMs. Bitcoin ATMs have experienced a severe bout of cash drain after a zero-day…