10 Aug Phishing attack abuses Microsoft Azure, Google Sites to steal crypto A new large-scale phishing campaign targeting Coinbase, MetaMask, Kraken, and Gemini users is abusing Google Sites and Microsoft Azure Web App to create fraudulent sites. […]
10 Aug Google now blocks Workspace account hijacking attempts automatically Google Workspace (formerly G Suite) now comes with stronger protections for risky account actions, automatically blocking hijacking attempts with identity verification prompts and logging them for further investigation. […]
10 Aug Microsoft 365 outage triggered by Meraki firewall false positive An ongoing outage affects multiple Microsoft 365 services, blocking users from connecting to Exchange Online, Microsoft Teams, Outlook desktop clients, and OneDrive for Business. […]
09 Aug Microsoft patches Windows DogWalk zero-day exploited in attacks Microsoft has released security updates to address a high severity Windows zero-day vulnerability with publicly available exploit code and abused in attacks. […]
09 Aug Windows 11 KB5016629 update fixes Start Menu, File Explorer issues Microsoft has released the Windows 11 KB5016629 cumulative update with security updates, improvements, including fixes for File Explorer and the Start Menu and a new Focus Assist feature. […]
09 Aug Microsoft August 2022 Patch Tuesday fixes exploited zero-day, 121 flaws Today is Microsoft’s August 2022 Patch Tuesday, and with it comes fixes for the actively exploited ‘DogWalk’ zero-day vulnerability and a total of 121 flaws. […]
09 Aug Windows 10 KB5016616 and KB5016623 updates released Microsoft has released the Windows 10 KB5016616 and KB5016623 cumulative updates for versions 21H2, version 21H1, version 20H2, and 1809 to fix security vulnerabilities and resolve bugs and performance issues. […]
09 Aug Cloudflare employees also hit by hackers behind Twilio breach Cloudflare says some of its employees’ credentials were also stolen in an SMS phishing attack very similar to the one that led to Twilio’s network being breached last week. […]
08 Aug Email marketing firm hacked to steal crypto-focused mailing lists Email marketing firm Klaviyo disclosed a data breach after threat actors gained access to internal systems and downloaded marketing lists for cryptocurrency-related customers. […]
08 Aug US sanctions crypto mixer Tornado Cash used by North Korean hackers The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned Tornado Cash today, a decentralized cryptocurrency mixer service used to launder more than $7 billion since its creation in 2019. […]