Business Security

Two vulnerabilities, assigned CVE-2019-9629 and CVE-2019-9630, were uncovered in Sonatype’s Nexus Repository Manager (NXRM) — an open-source governance platform used by DevOps professionals.

In a new phishing campaign, audio recordings purportedly shared via OneNote were used as a lure to lead email recipients to a fake Microsoft login page that steals user account credentials.

A newly discovered backdoor malware dubbed Godlua was discovered conducting DDoS attacks. Unique to this Lua-based malware is its abuse of the DNS over HTTPS (DoH) protocol to secure its communication channels.

Two of the U.S. Virgin Islands’ government offices have been hit by cyberattacks, causing substantial financial and operational disruptions. A ransomware attack was waged against the U.S. Virgin Islands Police Department (VIPD), compromising its network and se

Jack’d, a chat and dating app that caters to “gay, bisexual, and curious men,” has been hit with a US$240,000 settlement payment and an order to improve security after it failed to secure a leaky Amazon Web Services (AWS) S3 server that contained users’ privat

Google took down an app after being found stealing the Facebook and Google credentials of its users, along with performing other malicious activities. The malicious app, a horror game, managed to log over 50,000 downloads, before becoming unavailable.

A malicious spam campaign conducted in April used ISO image files to deliver the notorious LokiBot and NanoCore trojans.

With social media becoming more relevant to businesses today, organizations can take a proactive stance to secure it and even make it safer for everyone else connected to it.

Criminal sellers are peddling ready-to-use ATM malware in underground markets for hacking into banks. In this report, we discuss how criminals advertise and even provide instructions on how to pull off a digital heist.