20 tips for 2020: Mistakes to avoid

cyber

As we’re entering 2020, we’re also plotting out our New Year’s resolutions. Instead of suggesting what you should do next year, however, let’s have a look at some cybersecurity mistakes you should avoid for a more secure 2020. Denying you are a target You’ve probably already brushed off this possibility […]

La sensibilisation à la cybersécurité en Tunisie

cyber

Ocotobre 2017: Le mois de la sensibilisation à la cybersécurité En europe, La MSC est   une campagne de sensibilisation lancée par plus de 40 partenaires et 25 pays européens. En Canada  les efforts sont mené en   coordonnation des activités des ministères et des organismes fédéraux chargés de protéger les […]

Attacking MS Exchange Web Interfaces

cyber

Exchange is basically a mail server that supports a bunch of Microsoft protocols. It’s usually located on subdomains named autodiscover, mx, owa or mail, and it can also be detected by existing /owa/, /ews/, /ecp/, /oab/, /autodiscover/, /Microsoft-Server-ActiveSync/, /rpc/, /powershell/ endpoints on the web server. The knowledge about how to attack Exchange is crucial for every penetration testing team. […]

Hacking Microsoft Teams accounts with a GIF image

cyber

Experts discovered how to take over Microsoft Teams accounts by just sending recipients a regular GIF, it works for both desktop and web Teams versions. Microsoft has addressed a vulnerability in Teams workplace video chat and collaboration platform that could have allowed attackers to take Team accounts by sending participants […]

Online credit card skimming increased by 26 percent in March

cyber

Crisis events such as the current COVID-19 pandemic often lead to a change in habits that captures the attention of cybercriminals. With the confinement measures imposed in many countries, for example, online shopping has soared and along with it, credit card skimming. According to our data, web skimming increased by 26 percent in […]

Ryuk Ransomware Keeps Targeting Hospitals During the Pandemic

cyber

The Ryuk Ransomware operators to continue to target hospitals even as these organizations are overwhelmed during the Coronavirus pandemic. Last week BleepingComputer contacted various ransomware groups and asked if they would target hospitals and other healthcare organizations during the pandemic. With the amount of strain healthcare organizations are under during this pandemic, […]

Microsoft Leaks Info on Wormable Windows SMBv3 CVE-2020-0796 Flaw

cyber

Critical bug in Microsoft’s SMBv3 implementation published under mysterious circumstances. Word leaked out on Tuesday of a new vulnerability in recent versions of Windows that has the potential to unleash the kind of self-replicating attacks that allowed the WannaCry and NotPetya worms to cripple business networks around the world. The […]