Sam Fay

Articles from Sam Fay

Cybersecurity Weekly: PoC Kerberos exploit, Subway phishing scam, distance learning attacks

December 15, 2020

An expert published PoC exploit code for a Kerberos Bronze Bit attack. A massive Subway U.K. phishing attack is pushing TrickBot malware. The U.S. warns of increased cyberattacks against K-12 distance learning. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Software skimmer, Android app flaws, Google ad phish

December 8, 2020

Hackers hide software skimmer in social media sharing icons. Unpatched Android apps put millions of users at risk. MetaMask phishing steals cryptocurrency wallets via Google ads. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Hackers for hire, DNS cache poisoning, The North Face attacked

November 17, 2020

APT hackers for hire target financial and entertainment firms. DNS cache poisoning attacks return due to Linux weakness. The North Face website suffered a credential stuffing attack. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Apple patches, job offer phishing, Cisco zero-day

November 10, 2020

Apple patched three actively exploited iOS zero-days. Hackers used Torisma spyware in job offer phishing attacks. A Cisco zero-day in AnyConnect Secure Mobility Client remains unpatched. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Wordpress patches, NAT bypasses, Windows zero-day

November 3, 2020

WordPress patches a three-year-old high-severity RCE bug. A new NAT bypass attack lets hackers access any TCP/UDP service. A Windows zero-day bug is being exploited in the wild. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Apple flaws, Azure vulnerabilities, hackers buying network access

October 13, 2020

Fifty-five new security flaws were reported in Apple software and services. Researchers find vulnerabilities in Microsoft Azure cloud service. Security staff are being forced to upskill in their own time. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Medical center cyberattack, Shopify breach, Emotet election phish

October 6, 2020

An Ohio medical center was offline following a security incident. Shopify announces a data breach affecting fewer than 200 merchants. The Emotet malware gang takes part in the 2020 U.S. elections. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Social media phish, Polish hackers busted, Fortinet vulnerability

September 30, 2020

Phishing attacks target social network accounts. Polish police shut down a major group of hackers in the country. Fortinet VPN with default settings leaves 200,000 businesses open to hackers. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Ransomware casualty, Google App Engine phish, SecOps struggling

September 23, 2020

A patient dies after ransomware attack paralyzes German hospital systems. Google’s App Engine feature was abused to create phishing pages. SecOps teams wrestle with manual processes and HR gaps. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Ransomware hits schools, vulnerability toolkit, state-sponsored hackers

September 16, 2020

Virginia's largest school system was hit with ransomware. The U.K. government releases a toolkit to easily disclose vulnerabilities. International hackers are targeting Exchange, Citrix and F5 flaws. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Instagram phishing scam, hackers pose as journalists, QakBot banking trojan

September 1, 2020

An Instagram Help Center phishing scam is stealing credentials. Hackers pose as journalists to trick victims into installing malware. QakBot banking trojan returned with new tricks to steal money. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Dark web market down, FBI finds vishing scheme, hackers pose as recruiters

August 25, 2020

The dark web market Empire is down due to a multi-day DDoS attack. A new FBI alert warns of an ongoing vishing campaign. Hackers target defense contractors by posing as recruiters. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More