December 2021

Dridex Malware Trolls Employees with Fake Job Termination Emails A new Dridex malware phishing campaign is using fake employee termination emails as a lure to open a malicious Excel document, which then trolls the victim with a season’s greeting message. Dridex is a banking malware spread through malicious emails that Read more…

NVIDIA Discloses Applications Impacted by Log4j Vulnerability NVIDIA has released a security advisory detailing what products are affected by the Log4Shell vulnerability that is currently exploited in a wide range of attacks worldwide. Also Read: How COVID-19 Contact Tracing in Singapore Applies at Workplace After a thorough investigation, NVIDIA has Read more…

CISA Releases Apache Log4j Scanner to Find Vulnerable Apps The Cybersecurity and Infrastructure Security Agency (CISA) has announced the release of a scanner for identifying web services impacted by two Apache Log4j remote code execution vulnerabilities, tracked as CVE-2021-44228 and CVE-2021-45046. “log4j-scanner is a project derived from other members of the open-source Read more…

Major Services Including Slack, AWS, Hulu, Imgur Facing Outages Major services across the internet are currently facing ongoing networking outages. Popular sites and apps can’t be reached These services include Amazon, AWS, Hulu, Slack, Imgur, Asana, Grindr, Scruff, HubSpot, Zendesk, among other popular sites and services. Also Read: What a Vulnerability Assessment Read more…

PYSA Ransomware Behind Most Double Extortion Attacks in November Security analysts from NCC Group report that ransomware attacks in November 2021 increased over the past month, with double-extortion continuing to be a powerful tool in threat actors’ arsenal. Threat actors’ focus is also shifting to entities belonging to the government Read more…

2easy Now a Significant Dark Web Marketplace for Stolen Data A dark web marketplace named ‘2easy’ is becoming a significant player in the sale of stolen data “Logs” harvested from roughly 600,000 devices infected with information-stealing malware. “Logs” are archives of data stolen from compromised web browsers or systems using Read more…

800K WordPress Sites Still Impacted by Critical SEO Plugin Flaw Two critical and high severity security vulnerabilities in the highly popular “All in One” SEO WordPress plugin exposed over 3 million websites to takeover attacks. The security flaws discovered and reported by Automattic security researcher Marc Montpas are a critical Authenticated Privilege Read more…

Threat Actors Steal $80 million per Month with Fake Giveaways, Surveys Scammers are estimated to have made $80 million per month by impersonating popular brands asking people to participate in fake surveys or giveaways. Researchers warn of this new trend in global fraud schemes involving targeted links to make investigation Read more…