October Patch Tuesday: Microsoft Patches Critical, Wormable RCE Bug
There were 11 critical bugs and six that were unpatched but publicly known in this month’s regularly scheduled Microsoft updates.
Microsoft has pushed out fixes for 87 security vulnerabilities in...
25% of BEC Cybercriminals Based in the US
While the US is known to be a prime target for BEC attacks, just how many perpetrators are based there came as a surprise to researchers.A new analysis of...
Preparing for Flash and Office 2010 end-of-life
Running software past its end of life introduces risk to your organization. It means you will no longer receive security updates and patches for newly discovered vulnerabilities. Sometimes the...
Silo for Safe Access: A more secure web browser for some use cases
The web browser has become a key component in the corporate security landscape as many core business applications are now web-based. But browsers are troublesome to secure, and browser...
Security Firms & Financial Group Team Up to Take Down Trickbot
Microsoft and security firms ESET, Black Lotus Labs, and Symantec collaborated with the financial services industry to cut off the ransomware operation's C2 infrastructure.Technology and security companies teamed up...
Commodified Cybercrime Infrastructure: Exploring the Underground Services Market for Cybercriminals
Cybercriminal takeover
The server takeover is the earliest stage, where exposed assets are enumerated (i.e., via network scanners), accessed, and categorized by features (e.g., availability, bandwidth, and type of GPU)...
Securing Enterprise Security: How to Manage the New Generation of Access Control Devices
Trend Micro Research
Given the increasing use by enterprises of contactless security solutions, the security of the devices that themselves are meant to control access to premises should be of...
Lost in Translation
Translation makes it possible to exchange information across the globe, regardless of language differences. Translation plays a similar role in industrial internet of things (IIoT) environments where different devices,...
The Cybersecurity Blind Spots of Connected Cars
Technology has accelerated the pace in which vehicles provide mobility and convenience. Nowadays, it’s common for connected cars to let their users have instant access to navigation and traffic...
Inter skimming kit used in homoglyph attacks
Threat actors load credit card skimmers using a known phishing technique called homoglyph attacks.
As we continue to track web threats and credit card skimming in particular, we often...
