A bug in the Twitter social network allowed an attacker to post tweets as a different user without having access to the victim’s account. Discovered by a security researcher going by the name of kedrisec, the issue was reported to Twitter on February 26 and was resolved two days later. The vulnerability was assessed High …
Google Chrome Bug Can Lead To Windows Credential Theft Date Published: May 18, 2017 • Google Chrome • Credential Theft • Alert • Vulnerability • Windows An issue with the manner in which Google Chrome and Windows handle specific file types can lead to credential theft even on up-to-date systems, a DefenseCode researcher has discovered. …
You may be already aware that on May 12, 2017 many of Microsoft’s customers around the world and the critical systems they depend on were victims of malicious “WannaCrypt” software. Seeing businesses and individuals affected by cyber attacks, such as the ones reported today, was painful. Microsoft worked throughout the weekend to ensure they understood …
Ransomware Attack Affecting Windows Systems Date Published: May 12, 2017 • Ransomware • Alert • Vulnerability • Windows This is an alert of a ransomware attack that affects Windows systems, blocking the access to the files (on hard disks drives and on network connected computers). The main issues of this campaign is caused by exploiting …
The Ministry of Finance (MoF) is warning the general public of a phishing scam on social media which asks them to email personal financial information to the following address: ministryoffinancefortrinidad@gmail.com This email is FRAUDULENT. Fraudsters are purporting to offer grants and loans through the MoF, the International Monetary Fun (IMF) and similar bodies Should anyone …
Ransomware attacks are not only becoming more common, they’re becoming more creative. This advanced malware that once targeted users directly is now being deployed via remote exploits of unsecured web servers running WordPress and, now, JBoss. According to Cisco’s Talos threat intelligence organization, a new type of ransomware called SamSam is targeting enterprises running vulnerable …
Mozilla Foundation has release Firefox 37.0.1 to address two vulnerabilities; one of these vulnerabilities could allow an attacker to conduct man-in-the-middle attacks. Users and administrators are encouraged to review the Security advisories released from Mozilla Foundation and apply the necessary updates. For more information please visit Firefox
Network Time Protocol (NTP) Project has released security updates to address multiple vulnerabilities in Network Time Protocol daemon (ntpd). This update addresses vulnerabilities that may allow an attacker to conduct a man-in-the-middle attack or cause a denial of service condition. Users and administrators are encouraged to review the NTP security notice and take necessary actions. …
Apple has released a security updates for OS X, iOS, Safari and Apple TV to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an attacker to take control of an affected system. The following updates are available: (a) OS X Yosemite v10.10.3 and Security Update 2015-004 for OS X Mountain Lion v10.8.5, …