A major security vulnerability was discovered in Pan-OS, the operating system of Palo Alto Network’s firewalls and VPN appliances. This vulnerability is rated 10 out of 10, the most serious category. This score means it can be exploited remotely and by people without deep technical skills. Once exploited, it allows attackers to go around authentication protections. US Cyber Command warned that there is a high probability that nation state attackers will take advantage of it.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
A major security vulnerability was discovered in Pan-OS, the operating system of Palo Alto Network’s firewalls and VPN appliances. This vulnerability is rated 10 out of 10 meaning the most serious category. This score means it can be exploited remotely and by people without deep technical skills. Once exploited, it allows attackers to go around authentication protections. US Cyber Command warned that there is a high probability that nation state attackers will take advantage of it.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Sadly, many printers are not securing critical information from prying eyes. IPP is the Internet Printer Protocol that is used for managing printers. It also provides a number of additional features including secure communications. But there is a big difference between having a feature and using the feature. If the proper security isn’t used the features of this protocol allow cyber criminals to get information that can be used in attacks.
https://www.zdnet.com/article/80000-printers-are-exposing-their-ipp-port-online/?ftag=TRE-03-10aaa6b&bhid=29017885593246285133005340243949&mid=12892891&cid=2201587059
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Two phishing campaigns have been discovered that employ different lures but are still effective at trapping people. One goes after Bank of America customers, but only a specific subset. The attack bypasses security blocks. The other one is larger and goes after Wells Fargo customers by posing as the Wells security department and providing a message telling people that their account will be locked if their security credentials aren’t updated.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
A new type of ransomware was found this week that targeted MacOS. This is not the first but what differentiates this one is that in addition to encrypting the files, it sets up a keylogger, attacks crypto-wallets for their cryptocurrency and initiates a reverse shell. So even if the ransom is paid, the MacOS is still infected with multiple types of malware allowing theft of data.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
A ransomware gang has been targeting Citrix gateways. This is especially risky these days with some many people working remotely and accessing company networks through the Citrix gateways.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
A gang of successful cyber criminals that has been operating since 2007 has returned with a new strain of ransomware. The group’s activity slowed when the Department of Justice charged a number of their members with crimes. Sadly this only slowed their activity for a short period and now they are back.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Mobile banking has been growing in use, especially in light of the pandemic and social distancing recommendation. Sadly, this also means it has gotten cyber criminal’s attention as a new way to steal information.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Anything that attracts people’s attention is being used by cyber criminals in their attempts to steal information. Covid-19 became a hot topic and now it is Black Lives Matter.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Honda’s financial and customer service were unavailable due to a cyberattack. Ransomware is the suspected culprit.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.