Cybersecurity firm Sophos had released an emergency patch for its product called ‘XG Firewall’ which had a SQL injection vulnerability, a zero-day bug. Hackers already had started exploiting this vulnerability in the wild, so if you are using this product you should download and install the patch as soon as possible.
WHO mentioned that around 450 active email addresses have been leaked online, along with several other personnel’s working on this coronavirus pandemic.
309 million Facebook users profile are being sold in Dark Web for around $540 USD per record. The details include Facebook user IDs, phone numbers, relationship status, email addresses, timestamps of recent connectivity, and age.
IT managers should start with strengthening their AD passwords, employing a secure VPN for all remote access, and also activating their multi-factor authentication procedures to ensure robust foundational security is in place for your AD environment.
Apple iPhones and iPads come with a default email app called ‘Mail’, which has become another zero-day topic for today. Security researchers from ZecOps have detected two new critical vulnerabilities that are actively being exploited in the wild.
Security researcher ‘Pedro Ribeiro’ has disclosed a PoC for four zero-day vulnerabilities in IBM’s enterprise security software. The researcher has reported the same with IBM, but since they had refused to accept the disclosure, the zero-day vulnerabilities were made public.
the webcams in smartphones, tablets, laptops and desktops could be hacked without the users’ knowledge. Cyber criminals can employ camfecting attacks to breach into webcams and capture sensitive images.
A multi billion-dollar IT services company ‘Cognizant’ as hit by the Maze ransomware attack on April 18th, Saturday.
Google has blocked around 18 million phishing emails and malware using its Gmail email service ML models. These models identified and restricted COVID-19 themed attacks using the malware scanners blocking 99.9% attacks that went through the platform.
New variants of ‘Agent Tesla’ an information stealing malware is now capable of stealing WiFi passwords in the infected devices. These passwords can later be used by the attackers for improving on their infection or compromising the devices and network further.
