Horde Webmail ZeroDay
A zero-day vulnerability in Horde Webmail enables attackers to take over the webserver and pivot to compromising an organization’s other services, according to security researchers. The flaw’s abuse relies on…
RainLoop WebMail Vulnerability
An unpatched high-severity security flaw has been disclosed in the open-source RainLoop web-based email client that could be weaponized to siphon emails from victims' inboxes. Tracked as CVE-2022-29360, the flaw relates…
Posted inSecurity
Mailchimp breach connected with Trezor breach
Cryptocurrency and fintech customers are being urged to stay vigilant after email marketing company Mailchimp was breached in an incident that saw the accounts of over 300 Mailchimp corporate customers…
Cloudflare Acquires Area 1
Cloudflare Inc. had acquired cybersecurity firm Area 1 Security Inc. for $162 million. Area 1 was founded in 2014 and offers a product focused on eliminating targeted socially engineered cyberattacks.…
Sonicwall hit by Y2K22 Bug
SonicWall has said that some of its Email Security and firewall products have been hit by the Y2K22 bug, causing message log updates and junk box failures. The email users…
Google Calendar Now Blocks Phishing Campaign
Google now makes it easy to block unwanted calendar invitations, commonly used by threat actors in phishing and malicious campaigns, from being added to your Google Calendar. This was achieved…
IIS Module Malvertised to Steal Microsoft Exchange Credentials
Threat actors are installing a malicious IIS web server module named 'Owowa' on Microsoft Exchange Outlook Web Access servers to steal credentials and execute commands on the server remotely. Owowa…
Microsoft Outlook Exploit Could Masquerade
Malicious actors are using social engineering tactics to exploit Microsoft Outlook’s vulnerability and send emails to users, making impersonators seem credible. In one attack, a test spoof email bypassed Outlook’s…