The “Hong Kong Cyber Security New Generation Capture the Flag Challenge 2021”, jointly organised by...
The People’s Bank of China (PBoC) and the Hong Kong Monetary Authority (HKMA) co-organised a...
The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a...
The Log4Shell vulnerability critically threatens anybody using the popular open-source Apache Struts framework and could...
Ireland’s Health Service Executive (HSE) was almost paralysed by ransomware after a single user opened...
The Hong Kong Monetary Authority (HKMA) welcomes the launch of the revised Code of Banking...
A vulnerability has been identified in Oracle Java SE. A remote user can exploit this...
A vulnerability has been identified in IBM WebSphere Application Server. A remote user can exploit...
The Hong Kong Monetary Authority (HKMA), as representative of the Hong Kong Special Administrative Region...
Cyber Alerts
- Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks March 31, 2025A phishing-as-a-service (PhaaS) platform named 'Lucid' has been targeting 169
- Hackers abuse WordPress MU-Plugins to hide malicious code March 31, 2025Hackers are utilizing the WordPress mu-plugins ("Must-Use Plugins") directory to stealthily run malicious code
- Google makes end-to-end encrypted Gmail easy for all – even Outlook users March 31, 2025The UK government must be thrilled Google will soon offer end-to-end encrypted (E2EE)
- RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features March 29, 2025The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has shed light on a new malware
- Oracle customers confirm data stolen in alleged cloud breach is valid March 26, 2025Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data
- Browser-in-the-Browser attacks target CS2 players' Steam accounts March 24, 2025A new phishing campaign targets Counter-Strike 2 players utilizing Browser-in-the-Browser (BitB
- FBI warnings are true—fake file converters do push malware March 22, 2025The FBI is warning that fake online document converters are being used to steal people's information and,
- UK urges critical orgs to adopt quantum cryptography by 2035 March 20, 2025The UK's National Cyber Security Centre (NCSC) has published specific timelines on migrating to post-
- WhatsApp patched zero-click flaw exploited in Paragon spyware attacks March 19, 2025WhatsApp has patched a zero-click, zero-day vulnerability used to install Paragon's Graphite spyware
- Malicious Android 'Vapor' apps on Google Play installed 60 million times March 18, 2025Over 300 malicious Android applications downloaded 60 million items from Google Play acted as adware or attempted to steal credentials
- New Windows zero-day exploited by 11 state hacking groups since 2017 March 18, 2025At least 11 state-backed hacking groups from North Korea, Iran, Russia, and China have been
- Medusa Ransomware Strikes 300+ Targets: FBI & CISA Urge Immediate Action to #StopRansomware March 17, 2025Medusa ransomware now operates as a RaaS model, recruiting affiliates from criminal forums to launch attacks, encrypt data
- Malicious Adobe, DocuSign OAuth apps target Microsoft 365 accounts March 15, 2025Cybercriminals are promoting malicious Microsoft OAuth apps that masquerade as Adobe and DocuSign apps to deliver malware and steal Microsoft
- ClickFix: How to Infect Your PC in Three Easy Steps March 14, 2025A clever malware deployment scheme first spotted in targeted attacks last year has now gone mainstream. In this scam
- Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails March 12, 2025Microsoft has shed light on an ongoing phishing campaign that targeted the hospitality sector by impersonating online travel agency Booking
- ClickFix attack delivers infostealers, RATs in fake Booking.com emails March 12, 2025Microsoft is warning that an ongoing phishing campaign impersonating Booking.com is using ClickFix social engineering attacks to infect
- Apple patches 0-day exploited in “extremely sophisticated attack” March 11, 2025-day exploited by maliciously crafted Web content to break out of security sandbox.
- The Badbox botnet is back, powered by up to a million backdoored Androids March 7, 2025Best not to buy cheap hardware and use third-party app stores if you want to stay clear of
- Microsoft says malvertising campaign impacted 1 million PCs March 6, 2025Microsoft has taken down an undisclosed number of GitHub repositories used in a massive malvertising campaign that impacted almost
- 'EncryptHub' OPSEC Failures Reveal TTPs & Big Plans March 6, 2025Is EncryptHub the most prolific cybercriminal in recent history? Or, as new information suggests, a bumbling amateur