Scams targeting hospitality sector
Information provided by the City of London Police has advised that analysis of crime reports by the National Fraud Intelligence Bureau reveals that the hospitality…
Category: Threat Intelligence Alerts
Latest threats and guidance from the cyber and fraud world
Over 4,000 internet-facing Sophos Firewalls found to be still vulnerable to remote code execution bug disclosed in September 2022
Description: In September 2022, Sophos released a security advisory warning of a critical remote code execution vulnerability that had been seen exploited in the wild….
Threat actors spreading malware using Google Ads campaigns
Description: A recent rise in malware spreading through Google Ads has been noted by security researchers, with the impersonation campaigns affecting multiple software brands, such…
Microsoft’s January 2023 Patch Tuesday addresses 11 critical vulnerabilities, with one actively exploited
Description: Microsoft’s first Patch Tuesday of 2023 fixes 98 vulnerabilities, 11 of which have a critical CVSS severity rating. Of the 98, only one of the vulnerabilities…
Cisco warns of critical authentication bypass vulnerability in End-of-Life small business routers
Description: Cisco has published a security advisory warning of a critical vulnerability in multiple End-Of-Life (EoL) routers that could allow a remote attacker to bypass authentication or…
Over 60,000 on-premise Microsoft Exchange Servers still vulnerable to ProxyNotShell exploits
Description: Scans conducted by researchers at internet security company Shadowserver have shown that over 60,000 Microsoft Exchange servers are still vulnerable to two vulnerabilities, CVE-2022-41082…
New botnet uses compromised credentials to brute-force WordPress websites
Description: Researchers at FortiGuard Labs have recently published a report detailing a new botnet, named GoTrim, seen scanning the web for self-hosted WordPress websites and using compromised credentials to…
Microsoft warns of increasing cyber attacks from Russia this winter
Description: Microsoft has published a report warning of an increase in cyber attacks from Russia, particularly on Ukraine and NATO allies. The organisation notes that Russia’s battlefield…
Information-stealing malware sees spike in popularity
Researchers at Accenture’s Cyber Threat Intelligence team have written a report documenting a surge in the popularity of information stealing (infostealer) malware on the dark web. The…