Microsoft Log4j Discovery
Microsoft has announced updates for cloud based defender to fight the Log4j vulnerability. Log4j has mostly been patched but can still affect some servers that could use help from Microsoft…
Autom Malware in to Cryptoming
Researchers revealed an ongoing crypto mining campaign has upgraded its arsenal while adding new defense evasion tactics that enable the threat actors to conceal the intrusions and fly under the…
MSBuild Abused for Beacon Cobalt Strike
Researchers recently observed several malicious campaigns abusing Microsoft Build Engine (MSBuild) to execute a Cobalt Strike payload on compromised machines. MSBuild is a free and open-source build toolset for managed code…
FlagPro Malware linked with Chinese Attackers
Researchers have spotted a China-linked BlackTech cyberespionage group targeted Japanese companies using new malware tracked as Flagpro that targeted multiple companies in Defense, Media, and Communications industries several times. Flagpro has been…
Most Headlined Data Breaches in 2021
The Identity Theft Research Center reports the number of data breaches this year has already surpassed the total number in 2020 by 17% by end of third quarter of 2021. And this…
Another T-Mobile Data Breach !
T-Mobile has suffered another cyberattack after being rocked by a massive data breach in August. This time around, attackers accessed “a small number of” customers’ accounts. Customers either fell victim…
LastPass Reportedly had Unprecedented Visitors
LastPass members have reported multiple attempted logins using correct master passwords from various locations, but the company says that the recent attacks are a result of shared passwords gleaned from…
Posted inSecurity
Log4j Update ! Even 2.17 is Exploitable
Another security vulnerability impacting the Log4j logging library was published as CVE-2021-44832. This new security vulnerability is affecting versions up to 2.17.0, which was previously thought to be fixed. This vulnerability is…