Critical Apache Struts flaw just waiting to be exploited; PoC reported in the wild

Organizations relying on the Apache Struts framework should patch their servers ASAP, or at the very least ensure the namespace is always set within their infrastructure, as cybercrooks already have a proof-of-concept (PoC) at their disposal. A critica… Continue reading Critical Apache Struts flaw just waiting to be exploited; PoC reported in the wild

NHS Security Systems, Data Protection Questioned after Repeated Patient Record Losses

A new study by the Parliament Street think tank has revealed that the UK’s National Health Service (NHS) lost nearly 10,000 patient records between 2017 and 2018. After facing the ‘biggest ransomware’ offensive in history, NHS tr… Continue reading NHS Security Systems, Data Protection Questioned after Repeated Patient Record Losses

Gartner: Cloud-Smitten Companies Facing “Unpredictable” Cybersecurity Threats

Cloud computing enables the much-needed speed and agility demanded in our digital economy era. Embracing the cloud can generate significant cost savings as well as new revenue streams. However, the cloud-first mindset may be sending digital busine… Continue reading Gartner: Cloud-Smitten Companies Facing “Unpredictable” Cybersecurity Threats

The Underrated Importance of Training Your Staff to Spot Devious Phishing Attacks

A new phishing campaign is making the rounds. Scammers are taking advantage of a small, but serious oversight in Microsoft’s Office 365 suite of online services to serve phishing emails that are visually indistinguishable from work-related e… Continue reading The Underrated Importance of Training Your Staff to Spot Devious Phishing Attacks

0-day flaw in macOS High Sierra lets hackers dump all passwords from keychain

Apple prides itself on the airtight security offered by its family of products, including the Mac operating system, macOS. But while considerably less targeted by hackers, macOS is still vulnerable to attacks – especially when a bad actor comes a… Continue reading 0-day flaw in macOS High Sierra lets hackers dump all passwords from keychain

DeepLocker: new breed of malware that uses AI to fly under the radar

IBM researchers are seeking to raise awareness that AI-powered threats are coming our way soon. To that end, they’ve created an all-new breed of malware to provide insights into how to reduce risks and deploy adequate countermeasures. DeepLocker … Continue reading DeepLocker: new breed of malware that uses AI to fly under the radar

Professional Golfers’ Association hit by ransomware days before championship

Mere days before the Professional Golfers’ Association Championship at the Bellerive Country Club this week, hackers took control of the PGA’s servers and encrypted promotional materials to be used in the competition. “Your network ha… Continue reading Professional Golfers’ Association hit by ransomware days before championship

Researchers aim to befuddle cybercriminals with defensive WWII fighter pilot trick

Most ethical hackers prefer to lend their services to eliminate potentially harmful bugs. But one team of white hats wants to test the opposite approach to thwarting bad actors – by wasting their time and resources with non-exploitable, intention… Continue reading Researchers aim to befuddle cybercriminals with defensive WWII fighter pilot trick