Security Affairs

APRIL 28, 2021

Google has released security updates for Chrome 90 that address a new high severity vulnerability, tracked as CVE-2021-21227, that resides in the V8 JavaScript engine used by the web browser. The CVE-2021-21227 flaw is linked to the CVE-2020-16040 and CVE-2020-15965 vulnerabilities that were addressed by Google in 2020.

Cybersecurity 90

Cybersecurity Security IT Information Security 90

Security Affairs

MAY 27, 2020

The updated Grandoreiro Malware equipped with latenbot-C2 features in Q2 2020 now extended to Portuguese banks. Cybercriminals attempt to compromise computers to generate revenue by exfiltrating information from victims’ devices, typically banking-related information. Figure 1: Grandoreiro email template Q2 2020 (Portugal).

Communications 71

Communications Archiving Access IT 71

Security Affairs

NOVEMBER 3, 2020

Google released Chrome 86.0.4240.183 for Windows, Mac, and Linux to fix 10 security vulnerabilities, including an RCE zero-day exploited in the wild. The zero-day flaw was discovered on October 29, 2020 by Google white-hat hacker Samuel Groß of Google Project Zero and Clement Lecigne of Google’s Threat Analysis Group.

Libraries 112

Libraries Security IT Access 112

Security Affairs

APRIL 6, 2020

According to the BGPmon.net , starting from 2020-04-01 19:27:28 its service detected a possible BGP hijack, the prefix involved is 31.13.64.0 /19, Many examples were just posted on @bgpstream , see for example this example for @Facebook [link] pic.twitter.com/6aEzFyIfCv — BGPmon.net (@bgpmon) April 5, 2020.

IT 97

IT Cloud Paper Marketing 97

Security Affairs

JANUARY 27, 2022

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. The group keeps updating its toolset to evade security mechanisms.” ” reads t he analysis published by Malwarebytes.

Metadata 86

Metadata Phishing Communications Ransomware 86

Security Affairs

FEBRUARY 27, 2020

This malware appears to be on the rise at the end of February 2020, after a fresh update where its operators introduced a new obfuscation layer on the first stage of the threat. On February 27th, 2020, another template email was spread impersonating the Portuguese Government Finance & Tax (Portal das Finanças – ATA).

Government 106

Government IT Security Information Security 106

Security Affairs

MARCH 28, 2020

0-day Since 2019-12-04 08:22:29 (UTC), we have been witnessing ongoing 0 day attack targeting a network CPE vendor (not the big players, but there are about ~100,000 devices online according to public available data). ” reads the security bulletin. 0-day And sending the captured files to a receiver at 103.82.143.51. .”

Manufacturing 88

Manufacturing Access IT Security 88