Sam Fay

Articles from Sam Fay

Cybersecurity Weekly: DNS flaw, Natura data leak, ZLoader banking malware

May 26, 2020

A new DNS vulnerability lets attackers launch large-scale DDoS attacks. Cosmetic brand Natura exposes personal details of its users. The ZLoader banking malware has been deployed in over 100 campaigns. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: RDP vulnerability, RATicate malware, Android 2FA bypass

May 18, 2020

An improper Microsoft patch leaves third-party RDP clients vulnerable to reverse RDP. RATicate drops info-stealing malware and RATs on industrial targets. A new Android banking trojan is able to bypass two-factor authentication. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Thunderbolt flaws, DocuSign phishing, Sharefile vulnerability

May 13, 2020

New Thunderbolt security flaws affect systems shipped before 2019. A DocuSign phishing campaign uses COVID-19 as bait. A Citrix ShareFile flaw could let attackers steal data. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Multiple active Microsoft phishing campaigns

May 4, 2020

Targeted phishing attacks successfully hacked top executives at over 150 companies. An Office 365 phishing campaign uses fake Microsoft Teams alerts. A new phishing campaign packs an info-stealer, ransomware punch. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Apple Mail flaw, hackers make millions, Trickbot exploits COVID-19

April 27, 2020

Apple devices found to be vulnerable to a zero-day flaw in the default mail app. Hackers trick British private equity firms into sending $1.3 million. Microsoft warns of prolific Trickbot malware exploiting COVID-19 crisis. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: New COVID domains, Pulse Secure VPN, Nemty goes private

April 20, 2020

Thousands of newly-registered Coronavirus-themed domains have appeared since early March. Patched Pulse Secure VPNs could still expose organizations to hackers. Nemty Ransomware shuts down public RaaS operation. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Travelex pays ransom, Maze hacks HMR, Microsoft buys corp.com

April 14, 2020

Travelex paid $2.3 million ransom to restore operations after a ransomware attack. The Maze ransomware gang discloses data from drug testing firm HMR. Microsoft buys corp.com so bad guys can’t. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: LokiBot spearphish, Marriott breach, Zoom vulnerability

April 6, 2020

A spearphishing campaign exploits COVID-19 to spread Lokibot infostealer. Marriott suffers a second breach, exposing data of 5.2 million hotel guests. A new Zoom hack lets attackers compromise Windows and its login password. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Carding gang busted, Tupperware suffers cyberattack, Linksys under fire

March 31, 2020

Government officials shut down a huge credit card fraud ring. A cyberattack harvests card details from Tupperware customers. Linksys routers see more frequent cyberattacks as more employees work from home. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: COVID ransomware truce, Sodinokibi selling data, Windows EoS delayed

March 23, 2020

A hacking group promises to stop attacking medical units until COVID-19 cools down. Sodinokibi ransomware data leaks are now sold on hacker forums. Microsoft delays Windows 10 1709 end of service due to pandemic. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: COVID malware, Exchange Server flaw, Botnet dismantled

March 17, 2020

Coronavirus-themed malware is infecting PCs to steal passwords. A Microsoft Exchange Server flaw is being exploited in APT attacks. A large-scale botnet operation was dismantled by a coalition of security organizations. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: SSL malware campaign, Intel vulnerability, PwnedLocker decrypted

March 9, 2020

A new malware campaign employs fake security certificate updates. An unfixable vulnerability in Intel chipsets allows hackers to obtain protected data. Decryption is now available for PwnedLocker ransomware. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More