09 Mar Adobe fixes critical Creative Cloud, Adobe Connect vulnerabilities Adobe has released security updates that fix vulnerabilities in Adobe Creative Cloud Desktop, Framemaker, and Connect. […]
09 Mar z0Miner botnet hunts for unpatched ElasticSearch, Jenkins servers A cryptomining botnet spotted last year is now targeting and attempting to take control of Jenkins and ElasticSearch servers to mine for Monero (XMR) cryptocurrency. […]
09 Mar GandCrab ransomware affiliate arrested for phishing attacks A suspected GandCrab Ransomware member was arrested in South Korea for using phishing emails to infect victims. […]
09 Mar Security bug hunters focus on misconfigured services, earn big rewards An overview of the hacking activity on the HackerOne vulnerability coordination and bug bounty platform shows that misconfiguration of cloud resources is quickly becoming a hot target for ethical hackers. […]
08 Mar European Banking Authority discloses Exchange server hack The European Banking Authority (EBA) took down all email systems after their Microsoft Exchange Servers were hacked as part of the ongoing attacks targeting organizations worldwide. […]
08 Mar Flagstar Bank hit by data breach exposing customer, employee data US bank and mortgage lender Flagstar has disclosed a data breach after the Clop ransomware gang hacked their Accellion file transfer server in January. […]
08 Mar CISA takes over .GOV top-level domain (TLD) administration The US Cybersecurity and Infrastructure Security Agency (CISA) is taking over the administration of the.gov top-level domain (TLD) as its new policy and management authority. […]
08 Mar Unpatched QNAP devices are being hacked to mine cryptocurrency Unpatched network-attached storage (NAS) devices are targeted in ongoing attacks where the attackers try to take them over and install cryptominer malware to mine for cryptocurrency. […]
07 Mar Microsoft’s MSERT tool now finds web shells from Exchange Server attacks Microsoft has pushed out a new update for their Microsoft Safety Scanner (MSERT) tool to detect web shells deployed in the recent Exchange Server attacks. […]
06 Mar This new Microsoft tool checks Exchange Servers for ProxyLogon hacks Microsoft has released a PowerShell script that admins can use to check whether the recently disclosed ProxyLogon vulnerabilities have hacked a Microsoft Exchange server. […]