Threat actors are taking advantage of an unpatched five-year-old flaw in TBK digital video recording (DVR) devices. The vulnerability, known as CVE-2018-9995, is a critical authentication bypass issue that malicious actors can exploit to gain elevated permissions remotely. Despite the availability of a PoC exploit, there are no fixes that address the vulnerability. CVE-2018-9995 vulnerability affecting TBK DVR devices The
As the COVID-19 pandemic sent most of the world into lockdown in March 2020, companies quickly pivoted to remote work in an effort to keep their employees safe. While the switch to remote work has allowed businesses to continue operating, it has also added to the threat vectors of cyberattacks. With employees connecting to their home networks instead of secure
In today’s digital age, our personal devices are constantly at risk of security breaches. With the increasing prevalence of cyber threats, it is imperative that companies and individuals take robust measures to protect themselves from attackers. One such measure is to keep all software up-to-date with the latest security patches and updates. Apple, one of the world’s largest technology companies,
Google releases an Android OS update every month, which is a crucial part of its device maintenance. These updates come with improvements and bug fixes that enhance device functionality and security. Recently, Google released its May Android update, and it is already available for Pixel phones, including Pixel 4a, Pixel 4a 5G, and later models. Additionally, the update is also
In recent news, T-Mobile, the third-largest wireless carrier in the United States, announced that it had suffered a massive security breach that put the personal information of approximately 100 million customers at risk. This devastating turn of events is not T-Mobile’s first data breach within this year alone, raising concerns over the company’s security protocols and measures. The security breach,
An increasing number of adversaries are adopting malvertising and search engine optimization (SEO) poisoning as techniques to redirect users to fake websites and download trojanized installers of popular software. Recently, a threat actor has been observed leveraging Google Ads to deliver a new Windows-based financial Trojan and information stealer called LOBSHOT. This article will discuss the distribution and functionality of
Blockchain technology has taken the world by storm, and its potential to revolutionize the way we live our daily lives cannot be ignored. This article explores the rise of blockchain technology, the potential for real-time settlements, increased liquidity through tokenized venture funds and real estate, as well as the enhanced security and transparency in financial systems. The Rise of Blockchain
Blockchain technology has taken the world by storm and has been making headlines for its potential to revolutionize the way we conduct transactions and store data. The technology powers the digital currency Bitcoin; however, its application goes beyond just financial transactions. Blockchain technology has the power to transform various industries, including supply chain management, voting systems, and much more. What
In today’s fast-paced business environment, maintaining a secure and agile enterprise network is crucial. With the rise of remote workforces, cloud-based applications, and the Internet of Things (IoT), businesses require a network that can adapt to changing conditions and provide secure access to employees and customers from anywhere in the world. Additionally, the growing threat of cyberattacks means that businesses
Network security is one of the most critical aspects of modern technology-driven businesses. With the increasing threats of data breaches, hacking, and cyber-attacks, companies need to protect their valuable data from unauthorized access. The traditional network security models like VPNs and firewalls that worked well in the past are no longer effective in modern computing environments. This is where Software-Defined
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a warning about a recent series of cyberattacks on various government entities in the country. The phishing campaign has been attributed to APT28, also known as Fancy Bear, which is a known associate of the Russian military intelligence agency, GRU. The attackers are using fake Microsoft Outlook email accounts, created
In recent years, macOS devices have been relatively safe from malware attacks compared to other operating systems like Windows. However, the trend is changing, with macOS devices increasingly becoming a target for cybercriminals. This fact is evident in the latest malware called Atomic macOS Stealer (AMOS), which bad actors advertise on Telegram for $1000 per month. The AMOS can steal
