Security Newsletter
TurkeyBombing Puts New Twist on Zoom Abuse
Hackers stole nearly 4,000 credentials before Thanksgiving was even over. While millions of people were forced to spend the holidays away from their loved ones and family, cybercriminals took advantage of the situation and launched a new phishing attack, called...
This Bluetooth Attack Can Steal a Tesla Model X in Minutes
https://www.youtube.com/watch?v=clrNuBb3myE&feature=emb_title The company is rolling out a patch for the vulnerabilities, which allowed one researcher to break into a car in 90 seconds and drive away. While there is a continuous work on the cars' security systems,...
Manchester United announces cyberattack, systems shut down
Cyber criminals targeted and successfully attacked Manchester United's systems, the English Premier League club said on Friday, 20th of November. Even it appears spectacular, and with significant potential damage, the club seemed to be prepared for such a cyber event,...
Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack
Researchers have discovered a new type of attack that lets hackers snoop in on homeowners’ private conversations with the help of their robot vacuums. Researchers called this attack “LidarPhone” because it operates through the vacuum cleaner’s sensors. Used for...
Facebook Messenger Bug Allows Spying on Android Users
Facebook fixed a dangerous flaw in the Android version of Facebook Messenger which gave attackers the ability to spy on users and potentially identify their surroundings without them knowing. In a normal scenario, audio from the person making the call would not be...
Microsoft is the Most-Imitated Brand for Phishing Emails
While people shifted to working from home, brands like Microsoft and Amazon rose to the top of cybercriminals scam-to-list. Microsoft got the first place when it comes to hacker impersonations by having their products and services featured in nearly a fifth of all the...
2 More Google Chrome Zero-Days Under Active Exploitation
Google is asking Chrome desktop users to prepare to update their browsers once again as two more zero-day vulnerabilities have been identified in their well known browser. Both allow an unauthenticated, remote attacker to compromise an affected system via the web, and...
Microsoft Teams Users Under Attack in ‘FakeUpdates’ Malware Campaign
Microsoft is warning its customers about the dangerous, so-called “FakeUpdates” campaigns. Attackers are using ads for fake Microsoft Teams updates to install backdoors, to infect companies’ networks with malware. The technique is called "Cobalt Strike" and is...
Zoom strong-armed by US watchdog to beef up security after boasting of end-to-end encryption that didn’t exist
The video-conferencing giant will carry out an annual security assessment of its software and have its internal security program assessed by a third-party every two years. It also has to create a vulnerability management program, and add security safeguards, such as...
Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak
Prestige Software’s “Cloud Hospitality” platform is used by hotels to integrate their reservation systems with online booking websites like Expedia and Booking.com. A misconfigured Amazon Web Services S3 bucket affects users and threatens travelers with identity...
Stay up-to-date with the latest changes in cybersecurity
