Each week Zacco tracks the latest cyber security threats, current industry news or trends and insights into the latest protection best practice. The Cyber Security Digest is a weekly compilation of the most significant developments within both cybersecurity and digital protection space, with links to further information on how it might affect you, your company or your clients.
Essential reading for cyber security professionals, as well as the general public, to keep you informed of current events and emerging threats.
The United States largest fuel pipeline operator Colonial Pipeline remained closed due to cyberattack. The company has informed that they have taken down certain systems in order to contain the attack and has halted all pipeline operations. FBI reports ransomware strain called the DarkSide was used
A cybersecurity researcher from SentinelOne’s SentinelLabs has discovered 5 critical vulnerabilities in the firmware update affecting Dell computers, laptops, notebooks, and tablets
Today, cybersecurity is a totally different landscape from what it was a decade, or even five years ago. Cybersecurity means different things for different people.
Analysis from Proofpoint says that threat actors of FluBot make use of more than 700 unique domains and infecting around 7000 devices in the UK. The malware uses overlay attack to perform webview-based application phishing
German Federal Criminal Police Office has taken control of the Emotet malware servers and has created a module that uninstalls the malware from the infected system
A researcher stated that Excel 4 ((XML) files are used by hackers for a long time as their attack method. Around 160000 Excel 4 files were surveyed and around 90% of them were identified as malicious
Two security researchers have discovered a Zero click vulnerability in an open-source software component called ConnMan, used in Tesla cars. With this vulnerability, the researchers were able to unlock the doors of tesla with DJI Mavic 2 drone carrying a Wi-Fi dongle
Security researchers from Trend Micro and McAfee have identified a new set of fake Android apps in the Android play store which hijacks SMS notification to carry out billing fraud
Even when you don’t install or use the app the system allows the attackers to send malicious commands and operations remotely via the mobile app. The cybersecurity firm checkpoint has identified 130 attacks for the past three months
Apple supplier Quanta on Wednesday said that they have suffered a ransomware attack for the REvil ransomware group. The threat actors have asked the apple manufacturers to buy back the blueprint for the demanded 50 million ransom by May 1
This botnet attacks the already disclose ProxyLogon vulnerability which penetrates to the network to deploy malware, credential harvesting and more,” Boston-based cybersecurity firm Cybereason
The two vulnerability was found by the US National security agency. The security experts say that these vulnerabilities can let hacker access and control business networks
Some of the EU agencies were hacked as a part of SolarWinds supply chain attack it was confirmed by the European Commissioner for Budget and Administration Johannes Hahn
A link calming to change the WhatsApp logo theme from green to pink has been spreading through the users. If the user clicks on the link they eventually get hacked and the malware takes full control of the device
Microsoft has released the patch for April 2021. It contains fixes for 108 vulnerabilities out of which 19 are classified as critical, 88 as important and 1 as moderate
The vulnerability was found in the VMware Carbon Black Cloud Workload appliance. Which if exploited attackers could take control of the systems. The vulnerability is given a rating of 9.1 out of 10 in the CVSS scoring system
