Indonesia Hit by Android Banking App-Cloning Campaign

Indonesia Becomes Testing Ground for Sophisticated Android Banking Malware Technique A new wave of targeted attacks is sweeping through Indonesia, exploiting a vulnerability in Google’s Android Work Profile feature to deliver malware that can evade banking security controls. The threat group behind this campaign, known as GoldFactory, has been observed using the Gigabud Trojan to … Read more

Microsoft says September updates fix mouse settings reset issues

A recent wave of problems affecting Windows users has finally been addressed by Microsoft, which has fixed a known issue that caused mouse settings to reset on some systems. The company has confirmed that its September updates, specifically KB5124008, resolve the bug that had been causing frustration for many. The issue was first identified after … Read more

Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

Cyberattackers are exploiting a seemingly low-risk vulnerability in remote work settings to gain access to corporate data, including sensitive information stored on Microsoft 365 platforms. By targeting employees’ personal devices and using a combination of social engineering tactics and technical exploits, attackers are able to bypass companies’ security protections and extract valuable data. The attacks, … Read more

The Top 4 Threats We Found by Investigating Every Alert for a Quarter

In a stark reminder of the ongoing cat-and-mouse game between attackers and defenders, a recent investigation into every alert in customer environments over a three-month period has shed light on the top four threats facing organizations today. The findings, published in Prophet Security’s first quarterly threat report, reveal that identity was the target in roughly … Read more

New ‘BlueMoon’ kit exploited Windows and Chrome zero-day flaws

Cybersecurity threat actors have unleashed a powerful exploit kit dubbed “BlueMoon” that combines three critical vulnerabilities to infiltrate systems running Microsoft Windows and Google Chrome. The toolkit leverages zero-day flaws in Chromium-based browsers, allowing remote code execution and sandbox escape, along with a kernel local privilege escalation in Windows. This potent combination has been used … Read more

September Windows Server updates break Remote Desktop Services

Windows Server Update Causes Remote Desktop Chaos Administrators around the world are facing a crisis as the September Windows Server updates have brought Remote Desktop Services (RDS) to its knees. The issue is causing existing connections to fail, preventing new users from connecting, and in some cases, requiring a hard reset to restore functionality. This … Read more

New Android malware encrypts files, steals data, and harasses victims

A New Breed of Android Malware Spells Trouble for Users with Older Devices A highly sophisticated strain of Android malware has been identified, capable of encrypting files, stealing sensitive data, and even harassing its victims. Dubbed Mantax Otax, this malicious software is being distributed through phishing and social engineering messages by Indonesian operators, targeting users … Read more

Surfshark VPN says hackers breached internal testing, proxy servers

Surfshark VPN has suffered a significant security breach, with hackers gaining unauthorized access to one of its internal test servers and another server used as a proxy. The incident has left many wondering about the potential impact on customer data and the company’s overall cybersecurity posture. According to Surfshark’s explanation, the breach was caused by … Read more

September Windows Server updates break Remote Desktop Services

Windows Server Administrators Left Reeling as September Updates Break Remote Desktop Services A growing number of Windows Server administrators are reporting a critical issue with this month’s cumulative updates, which is causing Remote Desktop Services (RDS) to fail on servers running Windows Server 2019, 2022, and 2025. The problems arise after installing the September updates, … Read more