ActiveX... "Now that's a name I have heard in a long time." New #ActiveX Zero-Day through IE and Office docs. #zeroday #vulnerability
Microsoft warns attackers are exploiting a zero-day flaw in Windows 10 and many Server versions that can be exploited through Internet Explorer or Office docs. No patch yet (maybe next Tuesday), but nixing ActiveX across the board mitigates this attack. krebsonsecurity.com/2021/09/…
New York State vaccine pass shortcomings offer lessons for other coronavirus app developers | The Daily Swig
portswigger.net/daily-swig/n… via @PortSwigger #VaccinePassport
Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports: threatpost.com/spoofing-bug-… via @threatpost #VaccinePassport
Your boss (or anyone else) isn’t emailing you about a gift card consumer.ftc.gov/blog/2021/0… #scam #phishing
Malware found preinstalled in classic push-button phones sold in Russia therecord.media/malware-foun…
ProtonMail forced to collect an activist’s IP address in police investigation therecord.media/protonmail-f…
Jenkins project succumbs to ‘mass exploitation’ of critical Atlassian Confluence vulnerability | The Daily Swig
portswigger.net/daily-swig/j…
Miscreants fling booby-trapped Office files at victims, no patch yet, says Microsoft theregister.com/2021/09/07/m… via @theregister
When the bits hit the fan: What to do when ransomware strikes theregister.com/2021/09/06/w… via @theregister
Northeastern OIS retweeted
Ransomware gang threatens to leak data if victim contacts FBI, police - @Ax_Sharma
bleepingcomputer.com/news/se…
Northeastern OIS retweeted
1/3: A reliable source shared visibility into a credential testing botnet that's hacking into 50-100k inboxes daily. For spam? No this group only cares about gift card, customer loyalty/points data that can be resold for cash. They've been at it 3 yrs. krebsonsecurity.com/2021/09/…
T-Mobile CEO apologizes after hacker stole millions of users' personal information nbcnews.com/tech/security/t-… via @nbcnews
BPL says its restored public WiFi, but other online services remain off as it struggles to recover from hacker attack universalhub.com/2021/bpl-sa… via @universalhub
Researchers Who Built Similar System Explain Why Apple's CSAM Scanning System Is Dangerous tdrt.io/iAI via @Techdirt @Apple #privacy
Northeastern OIS retweeted
BPL says hackers took out some of its online systems universalhub.com/2021/bpl-sa…
Northeastern OIS retweeted
Caused by the global semiconductor shortage? @westerndigital
"Chinese news outlet Expreview reportedly discovered that Western Digital may have swapped the flash on its Blue SN550 SSD, which negatively affects its performance when the SLC (single-level cell) cache is depleted."
WD Blue SN550 SSD Performance Reportedly Cut In Half When SLC Runs Out trib.al/M7CwnBW
Northeastern OIS retweeted
Synology: Multiple products impacted by OpenSSL RCE vulnerability - @serghei
bleepingcomputer.com/news/se…
Northeastern OIS retweeted
Andrew Schober was robbed of ~$1M in bitcoin in 2018. Investigators he hired found 2 minors in the UK who allegedly authored the clipboard stealing malware that siphoned his bitcoin. Now he's suing the kids' parents after they refused to return the $ krebsonsecurity.com/2021/08/…
Northeastern OIS retweeted
Don’t be a victim of #rentalphishing. It’s a #scam! Also…know that you have a great resource in our friends at @NUOffCampus.










