Void Balaur Hackers-for-hire Sell Stolen Mailboxes and Private Data A hacker-for-hire group called Void Balaur has been stealing emails and highly-sensitive information for more than five years, selling it to customers with both financial and espionage goals. With more than 3,500 targets spread across almost all continents, this prolific threat Read more…
HPE Says Hackers Breached Aruba Central Using Stolen Access Key HPE has disclosed that data repositories for their Aruba Central network monitoring platform were compromised, allowing a threat actor to access collected data about monitored devices and their locations. Aruba Central is a cloud networking solution that allows administrators to Read more…
FBI Warns of Iranian Hackers Looking to Buy US Orgs’ Stolen Data The Federal Bureau of Investigation (FBI) warned private industry partners of attempts by an Iranian threat actor to buy stolen information regarding US and worldwide organizations. The warning came in a private industry notification (PIN) marked as TLP:AMBER, seen Read more…
Telnyx is the Latest VoIP Provider Hit with DDoS Attacks Telnyx is the latest VoIP telephony provider targeted with distributed denial-of-service (DDoS) attacks, causing worldwide outages since yesterday. Telnyx is a voice over Internet Protocol (VoIP) company that provides worldwide telephony services over the Internet, including in the Americas, EMEA, APAC, Read more…
Researchers Show that Apple’s CSAM Scanning Can be Fooled Easily A team of researchers at the Imperial College in London have presented a simple method to evade detection by image content scanning mechanisms, such as Apple’s CSAM. CSAM (Child Sexual Abuse Material) was a controversial proposal submitted by Apple earlier Read more…
Lazarus Hackers Target Researchers with Trojanized IDA Pro A North Korean state-sponsored hacking group known as Lazarus is again trying to hack security researchers, this time with a trojanized pirated version of the popular IDA Pro reverse engineering application. IDA Pro is an application that converts an executable into assembly Read more…
Ironic twist: WP Reset PRO Bug Lets Hackers Wipe WordPress Sites A high severity security flaw in the WP Reset PRO WordPress plugin can let authenticated attackers wipe vulnerable websites, as revealed by Patchstack security researchers. It impacts only premium versions of the WP Reset plugin, up to and including the Read more…
TrickBot Teams up with Shatak Phishers for Conti Ransomware Attacks A threat actor tracked as Shatak (TA551) recently partnered with the ITG23 gang (aka TrickBot and Wizard Spider) to deploy Conti ransomware on targeted systems. The Shatak operation partners with other malware developers to create phishing campaigns that download and infect Read more…
Microsoft Patches Excel Zero-day Used in Attacks, Asks Mac Users to Wait During this month’s Patch Tuesday, Microsoft has patched an Excel zero-day vulnerability exploited in the wild by threat actors. Zero-days, as defined by Microsoft, are publicly disclosed bugs with no official security updates. The vulnerability, tracked as CVE-2021-42292, is Read more…
PhoneSpy: Android Spyware Campaign Targeting South Korean Users An ongoing spyware campaign dubbed ‘PhoneSpy’ targets South Korean users via a range of lifestyle apps that nest in the device and silently exfiltrate data. The campaign deploys a powerful Android malware capable of stealing sensitive information from the users and taking Read more…
Let us help you out.
Singapore
7 Temasek Boulevard
#12-07, Suntec Tower One
Singapore 038987
Thailand
The Royal Place 1
2, 2/399 Mahatlek Luang 1 Alley, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!
Click one of our contacts below to chat on WhatsApp
