Cyberattackers are exploiting a seemingly low-risk vulnerability in remote work settings to gain access to corporate data, including sensitive information stored on Microsoft 365 platforms. By targeting employees’ personal devices and using a combination of social engineering tactics and technical exploits, attackers are able to bypass companies’ security protections and extract valuable data. The attacks, … Read more
In a stark reminder of the ongoing cat-and-mouse game between attackers and defenders, a recent investigation into every alert in customer environments over a three-month period has shed light on the top four threats facing organizations today. The findings, published in Prophet Security’s first quarterly threat report, reveal that identity was the target in roughly … Read more
Cybersecurity threat actors have unleashed a powerful exploit kit dubbed “BlueMoon” that combines three critical vulnerabilities to infiltrate systems running Microsoft Windows and Google Chrome. The toolkit leverages zero-day flaws in Chromium-based browsers, allowing remote code execution and sandbox escape, along with a kernel local privilege escalation in Windows. This potent combination has been used … Read more
Windows Server Update Causes Remote Desktop Chaos Administrators around the world are facing a crisis as the September Windows Server updates have brought Remote Desktop Services (RDS) to its knees. The issue is causing existing connections to fail, preventing new users from connecting, and in some cases, requiring a hard reset to restore functionality. This … Read more
A New Breed of Android Malware Spells Trouble for Users with Older Devices A highly sophisticated strain of Android malware has been identified, capable of encrypting files, stealing sensitive data, and even harassing its victims. Dubbed Mantax Otax, this malicious software is being distributed through phishing and social engineering messages by Indonesian operators, targeting users … Read more
A Critical Update for Microsoft Excel Has Left Some Users Stuck – Here’s What Happened In a strange turn of events, this week’s security update for Microsoft Office has left some users unable to copy and paste data in Microsoft Excel. The issue, which affects various versions of Office, including 2016 through 2024, has caused … Read more
Surfshark VPN has suffered a significant security breach, with hackers gaining unauthorized access to one of its internal test servers and another server used as a proxy. The incident has left many wondering about the potential impact on customer data and the company’s overall cybersecurity posture. According to Surfshark’s explanation, the breach was caused by … Read more
Windows Server Administrators Left Reeling as September Updates Break Remote Desktop Services A growing number of Windows Server administrators are reporting a critical issue with this month’s cumulative updates, which is causing Remote Desktop Services (RDS) to fail on servers running Windows Server 2019, 2022, and 2025. The problems arise after installing the September updates, … Read more
A New Breed of Android Malware Emerges, Encrypting Files and Harassing Victims In a disturbing development, researchers have uncovered a new strain of Android malware that combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and harass victims with repeated dialog boxes and full-screen videos. Dubbed Mantax Otax, this highly sophisticated threat is … Read more
A Recent Flood of Cyber Threats Exposes Vulnerabilities Across Multiple Platforms In a disturbing trend, a recent surge in cyber threats has exposed numerous vulnerabilities across various platforms, leaving users vulnerable to potential attacks. The latest wave of incidents includes a staggering 200 Android flaws, browser-built phishing scams, and over 119,000 scam shops, among other … Read more