Discover

Mimecast said that threat actors have compromised a digital certificate which is used by certain customers to connect securely with its products to Microsoft 365 exchange. This breach could lead to a Man in the middle attack

Microsoft has released a security patch for January 2021 which fixes 83 vulnerabilities. Out of these 83 vulnerabilities 10 are considered as critical and 73 as important

Europol said it shut down “DarkMarket” world’s largest illegal Dark web marketplace as part of internal operations. At the time of closure, it is said that it has around 500000 users and 2400 vendors with transactions over $170 million

The notice issued by the federal bureau of investigation wars users to enable two-factor authentication and complex passwords to help protect against swatting attacks. The issue was notified by smart home device manufactures to the law enforcement

The source code of mobile apps and internal tools of Nissan North America was leaked due to a Misconfigured Git Server. This vulnerability was informed to the software engineer of Nissan by an anonymous person. The company has now shut down the Git server as the public disclosure of the leak

The US Department Of Justice said that the SolarWinds hackers have access its Microsoft office 365 email environment. The department has more than 100000 employees. They said that none of the classified systems where impacted

Researcher Nikolai Tschacher in his proof of concept disclosed this 3-year-old vulnerability. With the success rate of 97%, it’s a risk as it is been used by major sites

T-Mobile has said that unauthorised attackers have gained access to the account information of its subscribers. The breach has affected nearly 0.2% of its users that’s over 100 million subscribers

Now patched vulnerability was discovered on July 9 security researcher Sreeram KL. This vulnerability could have let attackers take a screenshot of google documents by simply embedding them in a malicious website

Microsoft on Thursday said that hackers behind the sophisticated supply chain attack where able access some of its source code through its internal network. But the source code was not modified company said

Adobe has said that it will no longer release updates for its applications and plugins, and it will block contents from running in the flash player from 12th January 2021. The company has strongly advised users to uninstall the software to protect their systems

Cybersecurity firm Kaspersky has identified two incident targeting a pharmaceutical company and a government ministry. They have been targeted by the notorious Lazarus group who are trying to speed up the countries vaccine-development

The Security experts from Symantec, Palo Alto Networks, and Guide point investigating the supply chain attack revelled a new supernova malware. Solar winds have released update advisory for the backdoor

Hospital CEO Dr Stephen Leffler said that they have recovered about 70% from the attack and they are trying to pinpoint the exact root cause of the attack. The attacks have affected all the 5000 of the hospital’s computer

Googles project zero teams have disclosed a poorly patched zero-day vulnerability in windows print spooler API. This vulnerability could let attackers execute an arbitrary code

Researchers from IBM Trusteer have discovered a fraud operation where a network of mobile devices emulators used to steal millions of dollars from online bank accounts. The hackers have used 20 mobile network emulators to mimic the phone of over 16000 customers and their account where compromised