26 SEPTEMBER 2022 WEEKLY NEWSLETTER

BOCRA website

     

NEWSLETTER

 

Windows 11 now warns when typing your password in Notepad, websites


                                                     LATEST CYBER HACKS 

 
 
icon

Gaming Sector Under Relentless Attack

Last month, cybersecurity firm Akamai reported a 167% surge in web application attacks in the gaming industry, affecting millions of gamers globally. In less than a month, hackers have carried out five major attacks on gamers and gaming platforms, the most recent of which was on 2K Games.

icon

Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall — Patch Released

Security software company Sophos has released a patch update for its firewall product after it was discovered that attackers were exploiting a new critical zero-day vulnerability to attack its customers' network.

icon

London Police Arrested 17-Year-Old Hacker Suspected of Uber and GTA 6 Breaches

The City of London Police on Friday revealed that it has arrested a 17-year-old teenager from Oxfordshire on suspicion of hacking.


                                                      VULNERABILITIES

 
 
icon

New Firmware Vulnerabilities Affecting Millions of Devices Allow Persistent Access

Firmware security company Binarly has discovered another round of potentially serious firmware vulnerabilities that could allow an attacker to gain persistent access to any of the millions of affected devices.

icon

Netlify vulnerable to XSS, SSRF attacks via cache poisoning

A vulnerability in Netlify could allow an attacker to achieve either persistent cross-site scripting (XSS) or full-response server-side request forgery on any supported website.


                                     MALWARES

 
 
icon

Malicious NPM package discovered in supply chain attack

Researchers with ReversingLabs said the Material Tailwind library is being impersonated for an apparent supply chain attack targeting developers. The team spotted a look-alike NPM package circulating on repositories, intended to trick unwitting developers into using the package in place of the real library.

icon

Researchers Uncover New Metador APT Targeting Telcos, ISPs, and Universities

A previously undocumented threat actor of unknown origin has been linked to attacks targeting telecom, internet service providers, and universities across multiple countries in the Middle East and Africa.


                              

icon

BlackCat Ransomware Attackers Spotted Fine-Tuning Their Malware Arsenal

BlackCat, also known by the names ALPHV and Noberus, is attributed to an adversary tracked as Coreid (aka FIN7, Carbanak, or Carbon Spider) and is said to be a rebranded successor of DarkSide and BlackMatter, both of which shut shop last year following a string of high-profile attacks, including that of Colonial Pipeline.


                              


                               GENERAL NEWS

 
 
icon

Google to Make Account Login Mandatory for New Fitbit Users in 2023

Wearable technology company Fitbit has announced a new clause that requires users to switch to a Google account "sometime" in 2023.

"In 2023, we plan to launch Google accounts on Fitbit, which will enable use of Fitbit with a Google account," the Google-owned fitness devices maker said.

icon

5 Network Security Threats And How To Protect Yourself

Cybersecurity today matters so much because of everyone's dependence on technology, from collaboration, communication and collecting data to e-commerce and entertainment. Every organisation that needs to deliver services to their customers and employees must protect their IT 'network' - all the apps and connected devices from laptops and desktops to servers and smartphones.