Do you have any internet-facing devices running memcached? Security experts warn that systems exposed to the internet and running memcached on port 11211 UDP and TCP are being exploited in a new distributed denial-of-service (DDoS) reflection attack.
Cache utility memcached is being exploited Read More »
Duo Labs has found SAML protocol vulnerabilities that impact multiple vendor single sign-on (SSO) systems.
SAML vulnerabilities affect multiple SSO implementations Read More »
Trend Micro security researchers have spotted an Oracle vulnerability that is being abused to deliver dual Monero miner malware. The Oracle WebLogic WLS-WSAT vulnerability (CVE-2017-10271) allows remote code execution and was patched by Oracle back in October.
Oracle vulnerability exploited to deliver dual Monero miners Read More »
The Internet Crime Complaint Center (IC3) has issued an alert on W-2 phishing campaigns. In the latest scam, criminals are targeting sensitive tax information by using IRS-related phishing emails.
Evolving W-2 phishing campaigns Read More »
Threat actors from likely Nigerian origin are using business email compromise scams (BECs) to target Fortune 500 companies.
Active BEC scams target Fortune 500 companies Read More »
In a relatively new IRS scam, identity thieves are now hacking tax preparers to pull off tax refund fraud.
Hacking tax preparers to pull off tax refund fraud Read More »
Indian City Union Bank said that cyber criminals gained access to the bank’s SWIFT systems and made three unauthorized transfers totalling $1.8 million.
Cyber attack on Indian bank’s SWIFT system Read More »
Apple is rushing to fix a another ‘Text Bomb’ bug that crashes a number of iOS and Mac apps.
Apple’s ‘Text Bomb’ bug Read More »
Security researchers from Trend Micro have spotted two vulnerabilities that are being exploited on popular CouchDB open source database management systems.
Apache CouchDB vulnerabilities exploited Read More »
The Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have identified Trojan malware variants, HARDRAIN and BADCALL, used by the North Korean government.
HARDRAIN and BADCALL malware Read More »
