SecureTeam

Phishing attacks use email senders to avoid spam filters

A large phishing campaign has captured 400,000 Office 365 credentials by using compromised commercial email marketing services to avoid spam filters. The Compact Phishing operation has been using compromised accounts with services including SendGrid, MailGun and Amazon SES. Commercial email marketeers work hard to ensure their email systems have a high reputation, so their emails […]

Phishing attacks use email senders to avoid spam filters Read More »

Google demonstrates Spectre attack in Chrome

News, Vulnerabilities / Ian Reynolds

At the start of 2018 details were first published of the theoretical Spectre attack which exploits flaws in the design of modern CPU to allow data to be stolen from memory. Now Google has published a working proof-of-concept. Spectre is the name given to a number of attacks that are variations on a theme –

Google demonstrates Spectre attack in Chrome Read More »

Microsoft releases One-Click ProxyLogon workaround for Exchange

News, Tools, Vulnerabilities / Ian Reynolds

Microsoft has released an easy to install one-click mitigation tool for the critical Exchange security vulnerability known as ProxyLogon as the NCSC issues an urgent alert to UK firms. The Hafnium/Proxylogon attack against Microsoft Exchange servers worldwide is escalating. Security researchers at Checkpoint report a 10 fold increase in daily attacks against Exchange e-mail servers

Microsoft releases One-Click ProxyLogon workaround for Exchange Read More »

How to identify ProxyLogon – Hafnium attacks on your Exchange Server

News, Vulnerabilities / Ian Reynolds

Microsoft has updated their Microsoft Safety Scanner (MSERT) tool so that it detects Web Shells installed on your Exchange servers through the ProxyLogon vulnerability. Last week Microsoft issued emergency patches to address four zero-day exploits that were being exploited by the Hafnium group. Since the disclosures, criminal groups have been targeting Microsoft Exchange Servers around

How to identify ProxyLogon – Hafnium attacks on your Exchange Server Read More »

Rockwell Automation Critical Vulnerability in PLC

News, Vulnerabilities / Ian Reynolds

Programmable Logic Controllers manage industrial systems of all kinds, from oil rigs to vaccine production and one of the leading manufacturers of PLC is Rockwell Automation. A bad-as-it-gets (CVSS 10) vulnerability has been discovered that affects the Logix line of PLC devices. According to the alert issued by the US CERT: Successful exploitation of this

Rockwell Automation Critical Vulnerability in PLC Read More »

Exchange 0-day exploits need patching today

News, Vulnerabilities / Ian Reynolds

Microsoft has published details and out of cycle patches for several 0-day Exchange exploits under active attack. Microsoft Security Response Center advises: Due to the critical nature of these vulnerabilities, we recommend that customers apply the updates to affected systems immediately to protect against these exploits and to prevent future abuse across the ecosystem. The exploits have been linked to the

Exchange 0-day exploits need patching today Read More »

VMware patches critical RCE in vCenter Server

News, Vulnerabilities / Ian Reynolds

A critical vulnerability in vCenter Server could allow an unauthenticated attacker to execute arbitrary code on the server that hosts vCenter and so take over the system. vCenter Server is used by IT Admins to manage VMware installations and the virtual machines that run in the VMware environment. The vulnerability (CVE-2021-21972) in a plug-in used

VMware patches critical RCE in vCenter Server Read More »

Critical Windows Fax Server Vulnerability Patched – and Why You Should Care

News, Vulnerabilities / Ian Reynolds

In the February 2021 Patch Tuesday security update Microsoft fixed 56 flaws, one zero-day vulnerability and two remote code execution vulnerabilities in the Windows Fax Service. That’s right, someone can send you a fax and take over your Windows system. While you might be tempted to think: ‘who sends faxes these days?’ that is the

Critical Windows Fax Server Vulnerability Patched – and Why You Should Care Read More »

Billion users at risk from vulnerable Android app

News, Vulnerabilities / Ian Reynolds

The SHAREit app has over a billion users on Android – and it can be exploited to steal user’s data or run malicious code on the device. A new report from Trend Micro details the vulnerabilities in the SHAREit app, which is one of the most popular downloads from the Google Play Store. According to

Billion users at risk from vulnerable Android app Read More »

Plex Media Server abused in DDOS Attacks

News, Vulnerabilities / Ian Reynolds

37,000 Plex Media servers exposed to the internet are being abused in DDOS attacks according to a new security report. Plex Media Server is a personal media library and streaming platform available on Windows, Mac and Linux platforms. One of the attractions of Plex is the ability to stream your local media library to remote

Plex Media Server abused in DDOS Attacks Read More »

Vulnerabilities

Phishing attacks use email senders to avoid spam filters

Google demonstrates Spectre attack in Chrome

Microsoft releases One-Click ProxyLogon workaround for Exchange

How to identify ProxyLogon – Hafnium attacks on your Exchange Server

Rockwell Automation Critical Vulnerability in PLC

Exchange 0-day exploits need patching today

VMware patches critical RCE in vCenter Server

Critical Windows Fax Server Vulnerability Patched – and Why You Should Care

Billion users at risk from vulnerable Android app

Plex Media Server abused in DDOS Attacks

Our Address

Talk to us

Office Hours

Company Number

VAT Registration Number

Penetration Testing

Risk & Compliance Services

Quick Links

information. secured.

Head Office Address

Opening Hours

Stay in Touch