OSINT, defined Open-source intelligence (OSINT) is the process of getting information from sources that have been published or are otherwise open to the public. OSINT operations are done by IT security professionals, malicious hackers, and state-sanctioned intelligence operatives. They use advanced techniques to search through the huge amount of visible Read more…
Rogue HackerOne Employee Steals Bug Reports to Sell on the Side A HackerOne employee stole vulnerability reports submitted through the bug bounty platform and disclosed them to affected customers to claim financial rewards. The rogue worker had contacted about half a dozen HackerOne customers and collected bounties “in a handful Read more…
Verified Twitter Accounts Hacked to Send Fake Suspension Notices Threat actors are hacking verified Twitter accounts to send fake but well-written suspension messages that attempt to steal other verified users’ credentials. Twitter verifies accounts if they are considered notable influencers, celebrities, politicians, journalists, activists, and government and private organizations. To Read more…
Microsoft Finds Raspberry Robin Worm in Hundreds of Windows Networks Microsoft says that a recently spotted Windows worm has been found on the networks of hundreds of organizations from various industry sectors. The malware, dubbed Raspberry Robin, spreads via infected USB devices, and it was first spotted in September 2021 by Red Read more…
Zoho ManageEngine ADAudit Plus Bug Gets Public RCE Exploit Security researchers have published technical details and proof-of-concept exploit code for CVE-2022-28219, a critical vulnerability in the Zoho ManageEngine ADAudit Plus tool for monitoring activities in the Active Directory. The vulnerability allows an unauthenticated attacker to execute code remotely and compromise Read more…
The Week in Ransomware – July 1st 2022 – Bug Bounties It has been relatively busy this week with new ransomware attacks unveiled, a bug bounty program introduced, and new tactics used by the threat actors to distribute their encryptors. This week’s big news was the release of LockBit 3.0, which Read more…
CISA Orders Agencies to Patch Windows LSA Bug Exploited in the Wild CISA has re-added a security bug affecting Windows devices to its list of bugs exploited in the wild after removing it in May due to Active Directory (AD) certificate authentication issues caused by Microsoft’s May 2022 updates. The Read more…
Microsoft: Windows Server 2012 Reaches End of Support in October 2023 Microsoft has reminded customers that Windows Server 2012/2012 R2 will reach its extended end-of-support (EOS) date next year, on October 10, 2023. Released in October 2012, Windows Server 2012 has entered its tenth year of service and has already reached Read more…
Jenkins Discloses Dozens of zero-day Bugs in Multiple Plugins On Thursday, the Jenkins security team announced 34 security vulnerabilities affecting 29 plugins for the Jenkins open source automation server, 29 of the bugs being zero-days still waiting to be patched. Jenkins is a highly popular platform (with support for over 1,700 plugins) Read more…
Toll Fraud Malware Disables your WiFi to Force Premium Subscriptions Microsoft is warning that toll fraud malware is one of the most prevalent threats on Android and that it is evolving with features that allow automatic subscription to premium services. Toll fraud is a subset of billing fraud, where the Read more…
Let us help you out.
Singapore
7 Temasek Boulevard
#12-07, Suntec Tower One
Singapore 038987
The Royal Place 1
2, 2/399 Mahatlek Luang 1 Alley, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!
Click one of our contacts below to chat on WhatsApp
