Security
Headlines
HeadlinesLatestCVEs

Source

Malwarebytes

Two new Exchange Server zero-days in the wild

Categories: Exploits and vulnerabilities Categories: News Tags: Exchange Tags: ProxyShell Tags: remote PowerShell Tags: web shell Tags: CVE-2022-41040 Tags: CVE-2022-41082 Tags: SSRF Tags: RCE Two ProxyShell-like vulnerabilities are being used to exploit Microsoft Exchange Servers (Read more...) The post Two new Exchange Server zero-days in the wild appeared first on Malwarebytes Labs.

Malwarebytes
#vulnerability#web#microsoft#js#backdoor#rce#perl#ssrf#auth#zero_day
Local government cybersecurity: 5 best practices

Categories: Business With a few best practices, local governments can improve their cybersecurity posture and make it less likely that threat actors attack their systems. We’ll break down five best practices for local government cybersecurity in this post. (Read more...) The post Local government cybersecurity: 5 best practices appeared first on Malwarebytes Labs.

Optus data breach "attacker" says sorry, it was a mistake

Categories: News Tags: Optus Tags: breach Tags: optusdata Tags: text messages Tags: drivers' licenses Tags: Medicare Tags: identity protection A hacker stole the personal information of 10 million Optus customers, threatened to publish them in lots of 10,000 a day unless the ransom was paid, and then suddenly did a 180 degree turn. (Read more...) The post Optus data breach "attacker" says sorry, it was a mistake appeared first on Malwarebytes Labs.

Fast Company hacked to send obscene and racist messages

Categories: Cybercrime Categories: News The US business magazine appeared to have two separate and related incidents in which it was compromised. (Read more...) The post Fast Company hacked to send obscene and racist messages appeared first on Malwarebytes Labs.

APT28 attack uses old PowerPoint trick to download malware

Categories: News Tags: APT28 Tags: Fancy Bear Tags: PowerPoint Tags: PowerShell Tags: One Drive Tags: SyncAppvPublishingServer The Russian APT known as Fancy Bear was caught using an old mouseover technique that doesn't need macros (Read more...) The post APT28 attack uses old PowerPoint trick to download malware appeared first on Malwarebytes Labs.

FCC moves to block robotexts

Categories: News Categories: Scams The Federal Communications Commission wants mobile carriers to block spam texts at the network level. (Read more...) The post FCC moves to block robotexts appeared first on Malwarebytes Labs.

Spyware disguises itself as Zoom downloads

Categories: News Criminals are taking advantage Zoom's continuing popularity (Read more...) The post Spyware disguises itself as Zoom downloads appeared first on Malwarebytes Labs.

Erbium stealer on the hunt for data

Categories: News Tags: erbium Tags: malware Tags: data theft Tags: stealer Tags: wallets Tags: cryptocurrency Tags: browsers Tags: browser Tags: infection Tags: malware as a service We take a look at reports of new data theft malware relying on sold old tricks (Read more...) The post Erbium stealer on the hunt for data appeared first on Malwarebytes Labs.

4 times students compromised school cybersecurity

Categories: News Tags: School Tags: password Tags: sticky note Tags: lax security Tags: Sometimes we hear stories about brilliant students that hack their school and get celebrated, but it doesn't always end well. (Read more...) The post 4 times students compromised school cybersecurity appeared first on Malwarebytes Labs.

Facebook users sue Meta for allegedly building "secret workaround" to Apple privacy safeguards

Categories: News Categories: Privacy Meta is being sued by a couple of its users for allegedly deliberately circumventing Apple's privacy features on the iPhone. (Read more...) The post Facebook users sue Meta for allegedly building "secret workaround" to Apple privacy safeguards appeared first on Malwarebytes Labs.