Multiple vulnerabilities were identified in Mozilla Firefox, a remote attacker could exploit some of these...
Multiple vulnerabilities were identified in Microsoft Edge, a remote attacker could exploit some of these...
(Hong Kong, 19 October 2021) The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT)...
Multiple vulnerabilities were identified in Android, a remote attacker could exploit some of these vulnerabilities...
Tender date : 02 November 2021 Paper on offer : EF Bills Issue number :...
Updated The way Unicode’s UTF-8 text encoding handles different languages could be misused to write...
The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a...
Cybersecurity firm Proofpoint has found evidence of a prolific cybercrime group using the popularity of...
The Hive ransomware gang now also encrypts Linux and FreeBSD using new malware variants specifically...
Cyber Alerts
- Over 16,000 Fortinet devices compromised with symlink backdoor April 16, 2025Over 16,000 internet-exposed Fortinet devices have been detected as compromised with a new symlink backdoor that
- Midnight Blizzard deploys new GrapeLoader malware in embassy phishing April 15, 2025Russian state-sponsored espionage group Midnight Blizzard is behind a new spear-phishing campaign targeting diplomatic entities in
- Infamous message board 4chan taken down following major hack April 15, 20254chan, a notorious online forum, was taken offline earlier today after what appears to be a significant hack
- AI-Powered Presentation Tool Leveraged in Phishing Attacks April 15, 2025Researchers at Abnormal Security said threat actors are using a legitimate presentation and graphic design tool named "Gamma"
- New SSL/TLS certs to each live no longer than 47 days by 2029 April 14, 2025IT admins, get ready to grumble CA/Browser Forum – a central body of web browser makers
- Google adds Android auto-reboot to block forensic data extractions April 14, 2025Google is rolling out a new security mechanism on Android devices that will automatically reboot locked, unused devices after
- Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool April 14, 2025The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant
- Why is someone mass-scanning Juniper and Palo Alto Networks products? April 10, 2025Espionage? Botnets? Trying to exploit a zero-day? Updated Someone or something is probing devices
- Oracle says "obsolete servers" hacked, denies cloud breach April 9, 2025Oracle finally confirmed in email notifications sent to customers that a hacker stole and leaked credentials that were stolen from
- Malicious VSCode extensions infect Windows with cryptominers April 7, 2025Nine VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with
- PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks April 7, 2025A malicious campaign dubbed PoisonSeed is leveraging compromised credentials associated with customer relationship management (CRM) tools and bulk
- Carding tool abusing WooCommerce API downloaded 34K times on PyPI April 5, 2025A newly discovered malicious PyPi package named 'disgrasya' that abuses legitimate WooCommerce stores for validating stolen credit
- WinRAR flaw bypasses Windows Mark of the Web security alerts April 4, 2025A vulnerability in the WinRAR file archiver solution could be exploited to bypass the Mark of the Web (MotW
- Gootloader Malware Resurfaces in Google Ads for Legal Docs April 1, 2025Attackers target a familiar industry, law professionals, by hiding the infostealer in ads delivered via Google-based
- Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks March 31, 2025A phishing-as-a-service (PhaaS) platform named 'Lucid' has been targeting 169
- Hackers abuse WordPress MU-Plugins to hide malicious code March 31, 2025Hackers are utilizing the WordPress mu-plugins ("Must-Use Plugins") directory to stealthily run malicious code
- Google makes end-to-end encrypted Gmail easy for all – even Outlook users March 31, 2025The UK government must be thrilled Google will soon offer end-to-end encrypted (E2EE)
- RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features March 29, 2025The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has shed light on a new malware
- Oracle customers confirm data stolen in alleged cloud breach is valid March 26, 2025Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data
- Browser-in-the-Browser attacks target CS2 players' Steam accounts March 24, 2025A new phishing campaign targets Counter-Strike 2 players utilizing Browser-in-the-Browser (BitB