Accessibility links

CISA Advises Customers of Progress Software to MOVEit

Corporate Security

CISA Advises Customers of Progress Software to MOVEit

Progress Software's MOVEit Transfer, a managed file transfer application, has been extensively exploited due to a critical vulnerability, according to Huntress and Rapid7. The vulnerability, identified as CVE-2023-34362, is a severe SQL injection flaw that can result in escalated privileges and unauthorized access to systems. According to reports, approximately 2,500 instances of MOVEit Transfer were exposed to the public internet as of May 31, 2023, with a majority of them located in the United States. READ FULL STORY

General News

Microsoft Security Feature Exploited With Zero Clicks
By: Jim Stickley and Tina Davis
June 3, 2023

A recent report by cybersecurity researchers has disclosed a security flaw in the Windows MSHTML platform that can be exploited to circumvent integrity protections on targeted machines. This vulnerability noted as CVE-2023-29324, has been classified as a "security feature bypass" and was addressed by Microsoft as part of its Patch Tuesday updates for May 2023. The bug was initially discovered and reported by an Akamai security researcher, who revealed that all Windows versions are affected. READ FULL STORY

FBI Ranks “Most Hacked” States In The US. Does Your State Rate?

General News

FBI Ranks “Most Hacked” States In The US. Does Your State Rate?

First of all, no need to panic. No one expects you to pack your bags and move to a state with a lower cybercrime ranking. Every year, the FBI’s Internet Crime Complaint Center (IC3) releases its national cybercrime rankings by state. The data comes from only those cybercrimes reported to the IC3. With their “2022 Internet Crime Report” release, buckle up, read on, and find out if (and where) your state rates. In a contest no one wants to win, there is still a clear leader. READ FULL STORY
Cisco Warns Of Vulnerabilities With Small Business Switches

Corporate Security

Cisco Warns Of Vulnerabilities With Small Business Switches

Cisco has recently issued a security advisory to advise users to tackle several vulnerabilities that impact the web-based user interface of specific Cisco Small Business Series Switches. Exploiting these vulnerabilities could potentially enable a remote attacker to initiate a denial-of-service scenario or execute arbitrary code with root privileges on the affected device. CISA is advising users and administrators to check out the advisory on Cisco’s official webpage and take action. READ FULL STORY
Fleckpe Subscribes You Through Wallpaper And Editing

Mobile Security

Fleckpe Subscribes You Through Wallpaper And Editing

Hold onto your hats and glasses, folks! We've got ourselves a doozy of a story. The Google Play Store, a seemingly innocent playground for our beloved apps, was recently invaded by not one, not two, but eleven troublemakers! These mischievous applications, armed with the sneaky Trojan name Fleckpe, posed as innocent programs while harboring devious intentions. Some are wallpaper apps for mobile devices and others are editing apps. None are safe to download. READ FULL STORY

Scams & Phishing

Cybercrime Phishing Typhoon Makes Landfall In Guam
By: Jim Stickley and Tina Davis
May 30, 2023

The Agency (Cybersecurity and Infrastructure Security Agency) wants to remind you to keep an eye out for sneaky cyber attackers who prey on vulnerable disaster victims. This is in response to the typhoon that hit Guam recently. It's important to stay vigilant after a natural disaster like an earthquake, hurricane, or wildfire. And with the wild winter experienced in the U.S. this past season and in other locations around the globe, more disasters are likely to happen in the coming months, which means the scams will just shift around. READ FULL STORY

Will Credit Monitoring Keep Me Safe?

Your Security

Will Credit Monitoring Keep Me Safe?

Have you been offered credit monitoring because of a data breach? Will credit monitoring alone safeguard you against identity theft? In a nutshell, the answer is a resounding "no." Credit monitoring and identity theft protection services both have their pros and cons. But if you are offered these services as a result of a data breach or other cyber incident, it’s important to know what they are and do…and what they are not and don’t and whether a credit freeze is really what you need. READ FULL STORY
Flaws In Netgear RAX30 Routers May Allow Someone Into Your Network

Your Security

Flaws In Netgear RAX30 Routers May Allow Someone Into Your Network

According to a report by a Claroty security researcher, up to five security vulnerabilities have been uncovered in Netgear RAX30 routers that can be chained together in a specific order to bypass authentication and perform remote code execution. This means, they can control the device from wherever they happen to be. Exploits of these particular vulnerabilities have the potential to do a lot of things that we’d prefer they not do, such as allow attackers to monitor users' internet activity, take over internet connections, and reroute traffic to malicious websites. READ FULL STORY
GoDaddy’s Three-Year-Long Breach – 1+ Million WordPress Users Affected

Corporate Security

GoDaddy’s Three-Year-Long Breach – 1+ Million WordPress Users Affected

It’s a fact that corporate data breaches happen much more often than we know about. And then there are data breaches in a category of their own, like the one discovered at GoDaddy earlier this year. The popular web hosting company announced among their data breach findings, that 1.2M of their Managed WordPress customers were affected. GoDaddy found the three-year-long breach began in March 2020 with a successfully phished employee password. READ FULL STORY
QR Code Scanning Scams – How To Use QR’s Safely And Securely

Mobile Security

QR Code Scanning Scams – How To Use QR’s Safely And Securely

In our never-ending pursuit of info-quick technology, QR (quick response) codes have found a huge following. In return, these codes seem to be everywhere and on everything. From TV screens to product packaging, web pages, and more, QR codes are easy to find. But like most technology we’ve grown to love, cybercriminals love it too but for very different reasons. Some QR-secure tips can help scan fans stay safer and enjoy the benefits of this quick response technology. READ FULL STORY
Activision Gaming Breached When Employee Gets Phished With SMS Text

Your Security

Activision Gaming Breached When Employee Gets Phished With SMS Text

In their own words, Activision explains what they do as “We connect and engage the world through epic entertainment.” Late last year, the gaming powerhouse with hits like “Call of Duty” and “Candy Crush” underwent an assault on their data systems. What started the attack was an employee who answered an SMS text, a phishing text. That’s all it took to steal sensitive company data: one phishing text + one response = a data breach. Activision says their information security team immediately settled the situation before any sensitive data was lost. But not everyone agrees it was that clear-cut. READ FULL STORY
Businesses Encounter This Costly Cybercrime Every Day

Corporate Security

Businesses Encounter This Costly Cybercrime Every Day

Most businesses don’t have to look very far to find a cybercrime waiting to happen. Just take a peek at any employee’s email inbox, in particular the spam folder, and you’ll find any number of phishing emails in search of a victim. Email phishing persists despite decades trying to prevent it. Just ask a favorite target; the world of business and finance. They know phishing attacks are easier to do and unfortunately for them, they’re more costly than ever before. READ FULL STORY
Make Sure Your Smart Home Is A Safe Home. What You Need To Know

Your Security

Make Sure Your Smart Home Is A Safe Home. What You Need To Know

Most of us would agree living in a connected world has its perks. Otherwise known as the IoT (Internet of Things) all devices using the internet are IoT-connected. But what happens when some devices, especially those in smart homes, jeopardize the security of their users? The security that smart homes are expected to provide can backfire in unpredictable and disturbing ways. Knowing how to safely and securely run smart home devices is the best answer to that question. READ FULL STORY
Building Strong Passwords Using The “Don’ts” Of Password Security

General News

Building Strong Passwords Using The “Don’ts” Of Password Security

Much is made of the importance strong passwords give to online account security, and for good reason. That’s because password cracking is often the first step for a hacker looking to break into an account – your account. A formidable password can make a cybercriminal give-up and move onto the next potential victim. But what’s also important and often overlooked is what not to do when creating a password. Consider the “don’ts” of weak password creation as reminders of what not to do. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.