The UK National Cyber Security Centre and CISA in the USA have issued a joint alert detailing the risk posed by the Qsnatch/Derek malware which attacks QNAP NAS devices. The National Cyber Security Centre states in the alert: All QNAP NAS devices are potentially vulnerable to QSnatch malware if not updated with the latest security […]
Derek attacks QNAP NAS Devices Read More »
Boothole is a pervasive vulnerability that affects the GRUB2 boot loader that is used by most versions of Linux. By exploiting this vulnerability, attackers can run arbitrary code on almost any PC or Server and install RootKits or similar Malware that will persist reboots and be very difficult to detect. BootHole was first reported by
Boothole vulnerability explained Read More »
A report published by Barracuda Networks and researchers at UC Berkley which examines email compromise attacks at 111 organisations sheds light on how email is abused in cyber-attacks – often as the opening shot in the attack. The research reveals that 30% of the attacks were part of the emerging economy of ‘accounts for sale’
91% of targeted cyber-attacks start with email Read More »
Mozilla has suspended the new Firefox Send service just four months after in launched, due to criminals increasingly using it as a malware delivery platform. When it was launched, Firefox Send allowed files of up to 1Gb to be shared for free without needing to login or create an account. In a statement Mozilla advises:
Mozilla Suspends Firefox Send service Read More »
For 20 years a small two person firm in Ohio has licensed their TCP/IP software stack for use in embedded systems and IoT devices – from printers to medical devices. In June a collection of 19 vulnerabilities in this software was disclosed – affecting millions of devices from 50 different vendors. The collection of vulnerabilities
Ripple20 vulnerability affects millions of devices Read More »
Amazon Web Services has revealed that in May 2020 it deflected the largest ever recorded DDoS attack. The previous largest Distributed Denial of Service (DDoS) attack had been against GitHub in 2018 which was measured at 1.3 Terabits (Thousand Billion bits per second) – the attack against AWS in May was almost double at 2.3
AWS deflects largest every DDoS Read More »
Security software provider LastPass has published their third Annual Global Password Security Report which reveals the extent of password reuse. LastPass has analysed the anonymised data and usage patterns of their enterprise password vault used by 47,000 organisations around the world. Some key data points from the report: For Businesses under 25 employees the average
LastPass study reveals extent of password reuse Read More »
VideoLAN has released a patch for their popular VLC Media player software to resolve a remote code execution vulnerability The VLC open source media player is widely used in domestic and enterprise environments for playback of all kinds of video files and digital signage applications. In a security bulletin, the developer state that: If successful, a malicious
VideoLAN patches RCE vulnerability in VLC Read More »
The developers of the OpenSSH implementation of Secure Shell have announced their intention to drop support for SHA-1 in a ‘near future release.’ OpenSSH is used by millions of system administrators to securely access networked systems. OpenSSH supports various encryption algorithms and the decision to drop support for SHA-1 comes as recent research demonstrates it
OpenSSH to drop support for SHA-1 Read More »
After analysing dozens of ransomware incidents over the last 4 years, researchers have identified their defining common characteristics – which can help security managers design targeted defences. Mandiant Intelligence have published a report that reveals the common attributes of ransomware incidents from around the world and across the industrial spectrum. The key findings are:
Ransomware trends 2020 Read More »
SecureTeam Ltd,
Kemp House, 152 City Road,
London,
EC1V 2NX
10257784
GB 249480968
SecureTeam Ltd, Kemp House, 152 City Road,
London, EC1V 2NX
Mon – Fri: 09:00 – 17:00
Company Number: 10257784
VAT Registration No: GB 249480968
© SecureTeam 2023. All rights reserved.