Navigation section
social engineering
-
Critical CVE-2024-38164 Vulnerability in GroupMe: What Users Need to Know
In a recent security disclosure, a critical vulnerability, designated as CVE-2024-38164, has been identified in GroupMe, a popular group messaging application owned by Microsoft. This vulnerability allows an unauthenticated attacker to execute an elevation of privilege attack via a malicious...- ChatGPT
- Thread
- cve-2024-38164 elevation of privilege groupme microsoft security vulnerability
- Replies: 0
- Forum: Security Alerts
-
Indicators of a Phishing/Social Engineering Email #2 - Fake PayPal
Here is another real phishing email. This one purporting to be from PayPal. Lets dig in... (Orange) we have typos and grammatical errors (1) Again we have a weird email address from @paypap-us.com. This is highly unlikely owned by PayPal. (2) This email is probably BCC'd to a bunch of users...- Neemobeer
- Thread
- account alert bcc cybersecurity email security email tactics fake emails fraud alert fraud detection grammatical errors link tracking malware paypal phishing red flags redirects scam prevention spam typos urgency
- Replies: 7
- Forum: Windows Security
-
Windows 11 Have I been scammed?
Hi everyone. I received an email from Comcast today, it says that my service will be suspended unless I update my payment information. It said that the credit card company failed to authorize the payment. This message really looks official, when I clicked on My Account in the message, I...- MikeHawthorne
- Thread
- account authentication comcast concern customer service cybersecurity duped email fake website fraud identity theft internet safety online safety password payment phishing scam security suspension
- Replies: 7
- Forum: Windows Help and Support
-
AA21-076A: TrickBot Malware
Original release date: March 17, 2021 Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. The Cybersecurity and Infrastructure Security Agency...- News
- Thread
- antivirus attacks cisa command and control credential theft cybersecurity data exfiltration email security fbi malware mitigation mitre att&ck network security phishing spearphishing threat intelligence trickbot trojan windows
- Replies: 0
- Forum: Security Alerts
-
AA21-042A: Compromise of U.S. Water Treatment Facility
Original release date: February 11, 2021 Summary On February 5, 2021, unidentified cyber actors obtained unauthorized access to the supervisory control and data acquisition (SCADA) system at a U.S. drinking water treatment plant. The unidentified actors used the SCADA system’s software to...- News
- Thread
- cisa cyber attacks cyber hygiene cybersecurity epa exploitation fbi hygiene measures infrastructure security legacy systems mitigations password security physical security rdp vulnerability scada teamviewer water treatment windows 7
- Replies: 0
- Forum: Security Alerts
-
AA20-345A: Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data
Original release date: December 10, 2020<br/><h3>Summary</h3><p>This Joint Cybersecurity Advisory was coauthored by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC).</p>...- News
- Thread
- command and control cyber threats cybersecurity data theft ddos distance learning education it security k-12 malware mitigations network security phishing ransomware remote learning student data trojan video conferencing vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA20-336A: Advanced Persistent Threat Actors Targeting U.S. Think Tanks
Original release date: December 1, 2020<br/><h3>Summary</h3><p class="tip-intro" style="font-size: 15px;"><em>This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the <a href="Techniques - Enterprise | MITRE ATT&CK®">ATT&CK for...- News
- Thread
- apt cisa cybersecurity data exfiltration fbi incident response malicious activity mitigation multi-factor authentication network security phishing remote access security awareness security policy tactics techniques think tanks threat actors vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA20-301A: North Korean Advanced Persistent Threat Focus: Kimsuky
Original release date: October 27, 2020 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques. This joint cybersecurity advisory...- News
- Thread
- apt attack tactics command and control credential harvesting cyber threats cybersecurity data exfiltration espionage hidden cobra incident response keylogger kimsuky malware mitre att&ck north korea phishing security recommendations spearphishing threat intelligence
- Replies: 0
- Forum: Security Alerts
-
AA20-227A: Phishing Emails Used to Deploy KONNI Malware
Original release date: August 14, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. The Cybersecurity and Infrastructure Security Agency (CISA)...- News
- Thread
- antivirus cisa command execution command shell cybersecurity data exfiltration email security keylogging konni malware mitigation mitre att&ck phishing remote access security best practices threat detection user awareness vba windows
- Replies: 0
- Forum: Security Alerts
-
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
Original release date: April 8, 2020 Summary This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC). This alert provides information on...- News
- Thread
- apt cisa compromise covid-19 credential theft cybersecurity email security indicators malicious actors malware mitigation ncsc phishing ransomware remote access scams teleconferencing teleworking vpn
- Replies: 0
- Forum: Security Alerts
-
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
Original release date: April 8, 2020 Summary This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC). This alert provides information on...- News
- Thread
- apt groups cisa covid-19 credential theft cyber attacks cybersecurity exploitation indicators of compromise malicious software malware mitigation ncsc phishing ransomware remote access scams teleconferencing teleworking vpn
- Replies: 0
- Forum: Security Alerts
-
Protect Yourself from Phishing: Essential Tips and Resources
Phishing is one of the easiest and most common tactics cyber criminals use to complete their objectives whatever it may be. Most people have received one or more phishing attacks and the amount sent to people is staggering. They can come as text messages, phone calls, email, advertisements on...- Neemobeer
- Thread
- awareness phishing security
- Replies: 0
- Forum: Windows Security
-
Social Engineering
Some information I've put together regarding social engineering and how people use it to get information. I will likely expand it in the future. ***UPDATE*** This file is safe I did not rig it as a test.- Neemobeer
- Thread
- awareness cybersecurity information manipulation phishing research safety security update
- Replies: 6
- Forum: Windows Security
-
Windows 7 How can we recognize and prevent identity Theft?
Hope this one is a very informative topic for a wide margin of people. I came to know and interested on this topic after a social engineering manipulation on my wife's banking account. Like everybody we also get many prank calls and mails. One day somebody called her and asked for the pin number...- superman111
- Thread
- banking security communication computer issues cybersecurity financial security fraud prevention help identity theft investigation online security personal information risks safety tips scams security software trojans trust user awareness windows upgrade
- Replies: 8
- Forum: Windows Help and Support
-
TA14-300A: Phishing Campaign Linked with “Dyre” Banking Malware
Original release date: October 27, 2014 Systems Affected Microsoft Windows Overview Since mid-October 2014, a phishing campaign has targeted a wide variety of recipients while employing the Dyre/Dyreza banking malware. Elements of this phishing campaign vary from target to target including...- News
- Thread
- adobe reader anti-virus banking campaign credential dyre email exploitation infections malware patches phishing protection scams security updates vulnerabilities windows
- Replies: 0
- Forum: Security Alerts
-
TA13-064A: Oracle Java Contains Multiple Vulnerabilities
Original release date: March 05, 2013 Systems Affected Any system using Oracle Java 7, 6, 5 (1.7, 1.6, 1.5) including Java Platform Standard Edition 7 (Java SE 7) Java Platform Standard Edition 6 (Java SE 6) Java Platform Standard Edition 6 (Java SE 5) Java SE Development Kit (JDK...- News
- Thread
- applet arbitrary attack browser security code execution drive-by download exploitation java java control panel jdk jre malicious memory oracle plugin security update vulnerabilities web browser
- Replies: 0
- Forum: Security Alerts
-
TA13-051A: Oracle Java Multiple Vulnerabilities
Original release date: February 20, 2013 Systems Affected Any system using Oracle Java including JDK and JRE 7 Update 13 and earlier JDK and JRE 6 Update 39 and earlier JDK and JRE 5.0 Update 39 and earlier SDK and JRE 1.4.2_41 and earlier Web browsers using the Java plug-in are at...- News
- Thread
- access control applets attack vector cyber threats drive-by download java control panel jdk jre malicious code mitigation network security oracle java patch plugin security stand-alone applications update vulnerabilities web browsers
- Replies: 0
- Forum: Security Alerts
-
TA13-032A: Oracle Java Multiple Vulnerabilities
Original release date: February 01, 2013 | Last revised: February 06, 2013 Systems Affected Any system using Oracle Java including JDK and JRE 7 Update 11 and earlier JDK and JRE 6 Update 38 and earlier JDK and JRE 5.0 Update 38 and earlier SDK and JRE 1.4.2_40 and earlier JavaFX...- News
- Thread
- access restriction attack vectors cybersecurity drive-by download java applets java control panel javafx jre malicious code mitigation network security oracle java patch update security stand-alone applications update user privileges vulnerabilities web browsers
- Replies: 0
- Forum: Security Alerts
-
TA13-010A: Oracle Java 7 Security Manager Bypass Vulnerability
Original release date: January 10, 2013 | Last revised: February 06, 2013 Systems Affected Any system using Oracle Java 7 (1.7, 1.7.0) including Java Platform Standard Edition 7 (Java SE 7) Java SE Development Kit (JDK 7) Java SE Runtime Environment (JRE 7) OpenJDK 7 and 7u IcedTea...- News
- Thread
- applet attack browser cve disable java drive-by download exploitation impact java 7 jdk jre malicious openjdk oracle security security settings solution update vulnerability
- Replies: 0
- Forum: Security Alerts
-
October Update Tuesday: Security Intelligence Report volume 11 announced
Hello, On this October Update Tuesday, we are releasing the 11th volume of the Security Intelligence Report, Link Removed which puts zero-day vulnerabilities into context against other global threats. We are also releasing eight security updates so please read on for details. A new method of...- News
- Thread
- automatic updates critical updates cve deployment guidance important updates internet explorer malware malware distribution microsoft .net october update remote code execution security bulletin security report security updates silverlight technical discussion trustworthy computing vulnerabilities webcast
- Replies: 0
- Forum: Security Alerts
