News

A new Wells Fargo phishing campaign baits customers with calendar invites. A hijacked Oxford server was used by hackers for Office 365 phishing. A new Cisco Webex Meetings flaw lets attackers steal auth tokens. All this, and more, in this week’s edition of Cybersecurity Weekly.

A new critical vulnerability affects Windows SMB protocol. Intel CPUs are vulnerable to new SGAxe and CrossTalk side-channel attacks. The FBI says a sudden increase in mobile banking is heightening risks for users. All this, and more, in this week’s edition of Cybersecurity Weekly.

Kupidon is the latest ransomware targeting your data. An attack targeted database credentials on 1.3 million WordPress sites. The ongoing eCh0raix ransomware campaign targets QNAP NAS devices. All this, and more, in this week’s edition of Cybersecurity Weekly.

A U.K. ad campaign seeks to deter cybercrime. A real estate app leaks thousands of user records and private messages. Hack-for-hire firms spoof WHO to target Google credentials. All this, and more, in this week’s edition of Cybersecurity Weekly.

A new DNS vulnerability lets attackers launch large-scale DDoS attacks. Cosmetic brand Natura exposes personal details of its users. The ZLoader banking malware has been deployed in over 100 campaigns. All this, and more, in this week’s edition of Cybersecurity Weekly.

An improper Microsoft patch leaves third-party RDP clients vulnerable to reverse RDP. RATicate drops info-stealing malware and RATs on industrial targets. A new Android banking trojan is able to bypass two-factor authentication. All this, and more, in this week’s edition of Cybersecurity Weekly.

New Thunderbolt security flaws affect systems shipped before 2019. A DocuSign phishing campaign uses COVID-19 as bait. A Citrix ShareFile flaw could let attackers steal data. All this, and more, in this week’s edition of Cybersecurity Weekly.

Targeted phishing attacks successfully hacked top executives at over 150 companies. An Office 365 phishing campaign uses fake Microsoft Teams alerts. A new phishing campaign packs an info-stealer, ransomware punch. All this, and more, in this week’s edition of Cybersecurity Weekly.

Apple devices found to be vulnerable to a zero-day flaw in the default mail app. Hackers trick British private equity firms into sending $1.3 million. Microsoft warns of prolific Trickbot malware exploiting COVID-19 crisis. All this, and more, in this week’s edition of Cybersecurity Weekly.

Thousands of newly-registered Coronavirus-themed domains have appeared since early March. Patched Pulse Secure VPNs could still expose organizations to hackers. Nemty Ransomware shuts down public RaaS operation. All this, and more, in this week’s edition of Cybersecurity Weekly.