A new, high severity vulnerability has been found in Qualcomm’s MSM (Mobile Station Modem) chips, including the company’s latest 5G-capable versions. The security issue could allow hackers to access a user’s call history, text messages, and even listen in on their conversations. Unfortunately, given the ubiquity of these chips in today’s smartphones, this flaw impacts
There’s an ongoing, global scale phishing attack you should be aware of, even if your firm isn’t currently being targeted by it. The attack is being tracked by Mandiant, who recently published a report about it. According to that report, the attack was planned in waves, hitting more than 50 different organizations spanning a broad
On April 20, 2021, Google released Chrome 90.0.4430.85, designed to address a zero-day exploit hackers are currently taking advantage of, tracked as CVE-2021-21224. The patch also patches four other high severity security flaws that had previously been plaguing the most popular browser on the web. By the time you read these words, the latest version
Recently, researchers at Qihoo 360 Network Security discovered a particularly stealthy piece of malware designed to create backdoors in the Linux ecosystem. It was so good at its job, and so stealthy that it went completely undetected for years. That gave the hackers controlling it a convenient access point literally for years. Based on the
If you’re still using Skype for Business at your firm, be advised that Microsoft recently sent another friendly reminder out to all users of the service. The reminder says that it’s going away as of July 31, 2021, so you’ll need to complete your migration to Microsoft Teams (or an instance of Skype for Business
QNAP recently addressed a critical security vulnerability you need to be aware of. Previous to the fix, the company had included hard-coded credentials to serve as a backdoor to the device. Unfortunately, hackers became aware of this and began abusing those credentials. That resulted in a number of confirmed instances where hackers gained access to
Geico, the second largest insurance carrier in the US, recently became the latest high-profile company to suffer a data breach in the United States. The company is the second largest auto insurance carrier in the US, with more than 17 million policies in effect, covering more than 28 million vehicles around the country. Based on
If you’re a Microsoft Edge user, be aware. Beginning in July, with the release of Edge 92, the browser will automatically redirect users to a secure HTTPS connection any time they visit a website via the HTTP protocol. Microsoft is not alone in this, and in fact, is coming a bit late to the party.
Targeted advertising has become a mainstay of life on the web these days. You do a search on Amazon for say, exercise bikes, and then, just about every other website you visit will show you ads relating to your recent search. It’s almost scary how good the ad targeting is. If you’re not a fan,
There’s a new malware threat you need to be aware of, and it recently made its way onto the UK’s National Cyber Security Centre’s radar. Called FluBot, it is designed to steal information including passwords and banking particulars. There are a couple of interesting aspects about this threat that are noteworthy. First, it is currently