The following advisories/alerts from Novacoast are intended to brief users and administrators on newly discovered threats, vulnerabilities, and critical software updates.
Weekly Top 10 – 12.04.2023- Google Patches the Sixth Chrome Zero-Day of 2023, Okta Breach Impacts All Users Who Worked with Support, Sinbad Bitcoin Mixer Seized, and more.
WEEKLY TOP TEN | December 04, 2023 15:00 GMT Our Threat Operations and Intelligence team compiles a daily digest of…
Weekly Top 10 – 11.20.2023- Maine State Census Breached, Security Flaw in Google Workspace, “Royal Ransomware” Possibly ReBranding, and more
WEEKLY TOP TEN | November 20, 2023 15:00 GMT Our Threat Operations and Intelligence team compiles a daily digest of…
Weekly Top 10 – 11.13.2023- New North Korean-Linked MacOS Malware, Google Calendar CNC Abuse
WEEKLY TOP TEN | November 13, 2023 15:00 GMT Our Threat Operations and Intelligence team compiles a daily digest of…
Weekly Top 10 – 11.06.2023- Threat Actors Use Credentials Scraped from GitHub for Crypto Mining, Infamous Mozi IOT Botnet Goes Dark, HelloKitty Ransomware Gang Leverages Vulnerabilities in Apache, Boeing Confirms Cyberattack and Lockbit Claims Responsibility
WEEKLY TOP TEN | November 06, 2023 15:00 GMT Our Threat Operations and Intelligence team compiles a daily digest of…
Weekly Top 10 – 10.30.2023- Critical Vulnerabilities in SolarWinds Access Rights Manager, Zero-Day in Roundcube Exploited by Nation State Actors, VMWare VCenter Security Flaw Patched in End-of-Life Products, Vulnerabilities in Google Chrome Lead to Remote Code Execution
Critical Vulnerabilities discovered in WS_FTP Server software, Zero-day exploit in Exim Maill Server, Maximum…
Weekly Top 10 – 10.23.2023- Critical Vulnerability in Cisco IOS XE Leads to Over 30k Compromised Devices, Threat Actors Abuse Google Ads to Deliver Malware, QR Codes Used to Spread Malware and Steal Passwords, Coordinated Law Enforcement Effort Takes Down RagnarLocker Ransomware Gang
Critical Vulnerabilities discovered in WS_FTP Server software, Zero-day exploit in Exim Maill Server, Maximum…
Weekly Top 10 – 10.16.2023- Critical Vulnerability in Cisco Emergency Responder Software, Desktop Linux Vulnerable to Remote Code Execution via LibCue, Vulnerability in Citrix NetScaler Login Pages Allows for Credential Theft, cURL Patches Two High-Severity Vulnerabilities
Critical Vulnerabilities discovered in WS_FTP Server software, Zero-day exploit in Exim Maill Server, Maximum…
Weekly Top 10 – 10.9.2023- Zombie Zoom Links, Indeed.com Redirect Vulnerability Abused, CISA Adds Windows and JetBrains to KEV Catalogue, BING AI Convinced to Reveal CAPTCHA
Critical Vulnerabilities discovered in WS_FTP Server software, Zero-day exploit in Exim Maill Server, Maximum…
Weekly Top 10 – 9.25.2023- CLOP Gang Stolen Data, New AMBERSQUID Cryptojacking Operation, Payment Card Skimming Campaign
Chrome extensions capable of stealing plaintext passwords, Meta vs 'Spamoflauge' operation, new MITRE Caldera, and 7…
Weekly Top 10 – 9.14.2023- Chrome Password-Stealing Extensions, ‘Spamoflauge’, MITRE Caldera
Chrome extensions capable of stealing plaintext passwords, Meta vs 'Spamoflauge' operation, new MITRE Caldera, and 7…
Weekly Top 10 – 9.5.2023-Top 3 Malware Loaders, Nokoyawa Ransomware, WinRAR Zero-Day
80% of security incidents are the result of these 3 malware loaders, Smoke loader drops whiffy recon wi-fi scanning…
Weekly Top 10 – 7.31.2023 – IDOR, Ivanti Bugs, SEC Reporting Deadline Mandate
Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches, CISA Warns Government agencies to patch…