Phishing campaigns are using AMP URLs to avoid detection

Categories: Awareness

Categories: News

Tags: phishing

Tags: amp

Tags: url

Tags: captcha

Tags: redirection

Researchers have found a new phishing tactic that uses Google Accelerated Mobile Pages (AMP) URLs to look trustworthy

(Read more…)

The post Phishing campaigns are using AMP URLs to avoid detection appeared first on Malwarebytes Labs.

Read more

Ivanti patches second zero-day vulnerability being used in attacks

Categories: Exploits and vulnerabilities

Categories: News

Tags: Ivanti

Tags: EPMM

Tags: MobileIron

Tags: CVE-2023-35081

Tags: CVE-2023-35078

Tags: tomcat

Tags: arbitrary file write

Tags: ACL

Tags: upgrade

Ivanti has issued a patch to address a second critical zero-day vulnerability

(Read more…)

The post Ivanti patches second zero-day vulnerability being used in attacks appeared first on Malwarebytes Labs.

Read more

Compromised Barracuda appliances equipped with persistent backdoors by attackers

Categories: Exploits and vulnerabilities

Categories: News

Tags: Barracuda

Tags: ESG

Tags: CVE-2023-2868

Tags: SUBMARINE

Tags: SEASPY

Tags: shell

CISA has released three reports based on the analysis of backdoors planted on compromised Barracuda ESG appliances

(Read more…)

The post Compromised Barracuda appliances equipped with persistent backdoors by attackers appeared first on Malwarebytes Labs.

Read more

Zimbra issues awaited patch for actively exploited vulnerability

Categories: Exploits and vulnerabilities

Categories: News

Tags: Zimbra

Tags: ZCS

Tags: CVE-2023-38750

Tags: CISA

Tags: CVE-2023-0464

Tags: TAG

Tags: XSS

Tags: JSP

Tags: XML

Tags:

Zimbra has released ZCS 10.0.2 that fixes two security issues, including the known bug that could lead to exposure of internal JSP and XML files.

(Read more…)

The post Zimbra issues awaited patch for actively exploited vulnerability appeared first on Malwarebytes Labs.

Read more

Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild

Categories: Exploits and vulnerabilities

Categories: News

Tags: Norwegian ministries

Tags: ivanti

Tags: EPMM

Tags: MobileIron

Tags: CVE-2023-35078

Tags: patch

A patch is now available for an Ivanti EPMM vulnerability that was used in a cyberattack on the ICT platform which is relied upon by a dozen Norwegian ministries.

(Read more…)

The post Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild appeared first on Malwarebytes Labs.

Read more

Update now! Apple fixes several serious vulnerabilities

Categories: Exploits and vulnerabilities

Categories: News

Tags: Apple

Tags: WebKit

Tags: CVE-2023-38606

Tags: CVE-2023-32409

Tags: CVE-2023-37450

Tags: CVE-2023-32416

Apple has released security updates for several products to address several serious vulnerabilities including some actively exploited zero-days.

(Read more…)

The post Update now! Apple fixes several serious vulnerabilities appeared first on Malwarebytes Labs.

Read more

How to set up computer security for your parents

Categories: News

Categories: Personal

Tags: parents

Tags: cybersecurity

Tags: chromebook

Tags: auto updates

Tags: urgent notifications

Tags: remote desktop

Tags: router

Tags: block list

Tags: encryption

Here are some tips that you can use to set up a secure environment for your parents’ digital needs.

(Read more…)

The post How to set up computer security for your parents appeared first on Malwarebytes Labs.

Read more