Collaborate Disseminate
Since their release on Patch Tuesday, the updates have been breaking Windows, causing spontaneous boot loops on Windows domain controller servers, breaking Hyper-V and making ReFS volume systems unavailable. Continue reading Microsoft Yanks Buggy Windows Server Updates
Meanwhile, EtherumMax got sued over an alleged pump-and-dump scam after using celebs like Floyd Mayweather Jr. & Kim Kardashian to promote EMAX Tokens.
Continue reading North Korean APTs Stole ~$400M in Crypto in 2021
US Cyber Command linked the group to Iranian intelligence and detailed its multi-pronged, increasingly sophisticated suite of malware tools.
Continue reading US Military Ties Prolific MuddyWater Cyberespionage APT to Iran
GootLoader hijacks WordPress sites to lure professionals to download malicious sample contract templates.
Continue reading New GootLoader Campaign Targets Accounting, Law Firms
Threat actors are creating accounts within the Adobe Cloud suite and sending images and PDFs that appear legitimate to target Office 365 and Gmail users, researchers from Avanan discovered.
Continue reading Adobe Cloud Abused to Steal Office 365, Gmail Credentials
Most Windows versions are at risk of remote, unprivileged attackers abusing RDP from the inside to hijack smart cards and get unauthorized file system access.
Continue reading Widespread, Easily Exploitable Windows RDP Bug Opens Users to Data Theft
Scammers easily game YouTube Shorts with viral TikTok content, bilking both creators and users. Continue reading Stolen TikTok Videos, Bent on Fraud, Invade YouTube Shorts
Electronic Arts blamed “human error” after attackers compromised customer support and took over and drained some of the top FIFA Ultimate Team player accounts.
Continue reading Phishers Rip Off High-Profile EA Gamers
It’s not about buying security products! Joseph Carson, chief security scientist from ThycoticCentrify, offers practical steps to start the zero-trust journey. Continue reading Here’s REALLY How to Do Zero-Trust Security
The large January 2022 Patch Tuesday update covers nine critical CVEs, including a self-propagator with a 9.8 CVSS score. Continue reading Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days