Each week Zacco tracks the latest cyber security threats, current industry news or trends and insights into the latest protection best practice. The Cyber Security Digest is a weekly compilation of the most significant developments within both cybersecurity and digital protection space, with links to further information on how it might affect you, your company or your clients.
Essential reading for cyber security professionals, as well as the general public, to keep you informed of current events and emerging threats.
Checkpoint research new investigation revealed that 9 malicious apps act as a dropper. These apps use certain methods to evade the detection of google play protect. After the evaluation stage, it changes from a non-malicious application to an AlienBot Banker and MRAT
Google chrome has released the fix for Windows, Mac, and Linux, which will roll out to all users in a couple of weeks. The update fixes a total of 5 security issues
According to the recent patch issued by Microsoft it has fixes for 89 vulnerabilities. Among these 89 vulnerabilities, 14 are classified as Critical and 75 as Important
A tweet from the Microsoft researcher Phillip Misner said that human-operated attack methods are being used to exploit the ProxyLogon Exchange Server flaws to deliver a new strain of ransomware called ”DearCry”
Gootloader uses search engine optimization (SEO) techniques to affect the Google search engine. Gootkit RAT delivers a wider variety of malware, including ransomware payloads
Cisco Talos blog spot mentioned that Previously Microsoft word documents were used to send Phishing emails these have changed in recent times. Nowadays Infected documents are used to redirect victims to a malicious website
The flaw was found by independent security researchers and bounty hunter Laxman Muthiyah. The flaw could allow an authentication bypass used to verify the code sent as the account recovery process
The vulnerabilities are very critical. It can make untrusted connections to server port 443. Microsoft has asked its customers to update the affected systems without any delay
The company disclosed a data breach after some of its employees were affected by SIM swapping attacks. Once hijacked attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts
The findings were presented by a group of academics from Ruhr-Universität Bochum and North Carolina State University. They analysed 90194 skills in seven countries. These malicious skills could let hackers make backend code changes that could let victims give out sensitive information
The vulnerability was reported by a group of researchers from Ruhr-University Bochum in Germany. The shadow attack avoids all existing countermeasures and breaks the integrity protection of digitally signed PDFs
Proof point threat researchers have found a new phishing campaign targeting Tibetian organization globally. The URL is linked to a fake “Adobe flash player updated
Quality is our priority. Read more about what is covered by our new ISO certifications in Information Security, Information Privacy and Business Continuity.
What are some considerations when navigating your obligations under the GDPR? How might this affect those established outside of Europe?
A new attack tricks the sales terminal by using the Mastercards contactless card while believing it to be a visa card. It was discovered by a group of academics from ETH Zurich
The very first malware to target the apple new M1 chips has been discovered. Security researcher Patrick Wardle said that a Safari adware extension called GoSearch22 which is meant to run on Intel X86 chips has been ported to run on ARM-based M1 apple chips. The attackers are creating multi-architecture applications so that their code will natively run on M1 systems
