Fake Purchase Order Used to Deliver Agent Tesla
FortiGuard Labs discovered a phishing email addressed to a Ukrainian recipient that masqueraded as purchase order containing a PPT attachment aiming to deploy the Agent Tesla RAT. Learn more.
Computer Security Articles
RSS Reader for Computer Security Articles
Update now! Mozilla patches two actively exploited vulnerabilities
Credit to Author: Pieter Arntz| Date: Mon, 07 Mar 2022 20:25:18 +0000
Mozilla has issued an out of bound update for Firefox and Thunderbird to fix two vulnerabilities being exploited in the wild.
The post Update now! Mozilla patches two actively exploited vulnerabilities appeared first on Malwarebytes Labs.
Read MoreThe struggle to reduce bug-fixing time is real
Credit to Author: Pieter Arntz| Date: Mon, 07 Mar 2022 20:06:37 +0000
Vendors want to fix their bugs as soon as possible. We look at how the big vendors are doing, and what the end user can do.
The post The struggle to reduce bug-fixing time is real appeared first on Malwarebytes Labs.
Read MoreFour key cybersecurity practices during geopolitical upheaval
Credit to Author: David Ruiz| Date: Thu, 03 Mar 2022 10:37:29 +0000
In a time of rapid-changing crisis, here are four SMB cybersecurity best practices to help prevent the most common attacks.
The post Four key cybersecurity practices during geopolitical upheaval appeared first on Malwarebytes Labs.
Read MoreHow Police Abuse Phone Data to Persecute LGBTQ People
Credit to Author: Matt Burgess| Date: Mon, 07 Mar 2022 12:36:01 +0000
In many parts of the world, law enforcement uses WhatsApp chats, text messages, and photos from confiscated phones as “evidence” against persecuted groups.
Read MoreMS Office Files Involved Again in Recent Emotet Trojan Campaign – Part I
FortiGuard Labs discovered more than 500 Microsoft Excel files involved in a campaign to deliver a fresh Emotet Trojan variant. Read to learn more how to avoid this lure.
Change my password? AGAIN?
Credit to Author: Susan Bradley| Date: Mon, 07 Mar 2022 10:02:00 -0800
Every year at this time, I have to fill out my firm’s cyber insurance application — and every year they ask whether we encourage strong passwords and change them often. This question annoys me tremendously, because we really shouldn’t be changing passwords often. We should instead be choosing authentication processes that appropriately match site risks; using a password should be the last thing you want to rely on.
First, think about the information and data a website is keeping on you. The sites we want to offer the most protections often have the weakest. Where you can, always add two-factor authentication to a site’s access. (Not all multi-factor authentication is created equally, but some sort of multi-factor is better than none. If it encourages attackers to go elsewhere, it’s done its job.
International Women’s Day 2022: Celebrating Sophos Women in Tech
Credit to Author: Editor| Date: Mon, 07 Mar 2022 12:20:59 +0000
Hear from 19 cybersecurity pros worldwide about women in tech
Read More