Security News | HKCERT

5 Fundamental But Effective IoT Device Security Controls

Matt Dunn, the associate managing director for cyber-risk at Kroll, discusses how to keep networks safe from insecure IoT devices.

Threatpost 24 Apr 2021 598 Views

If you have a QNAP NAS, stop what you're doing right now and install latest updates. Do it before Qlocker gets you

Storage box maker puts customers on red alert after outbreak in ransomware infections QNAP has urged its customers to install and run its latest firmware and malware removal tools on their NAS boxes amid a surge in ransomware infections.…

The Register 23 Apr 2021 18995 Views

Signal CEO Hacks Cellebrite iPhone Hacking Device Used By Cops

Packet Storm 22 Apr 2021 26877 Views

Telegram Platform Abused In ToxicEye Malware Campaigns

Packet Storm 22 Apr 2021 22952 Views

China broke into govt, defense, finance networks via zero-day in Pulse Secure VPN gateways? No way

Crucial flaw won't be fixed until next month Dozens of defense companies, government agencies, and financial organizations in America and abroad appear to have been compromised by China via vulnerabilities in their Pulse Connect Secure VPN appliances – including a zero-day flaw that won...

The Register 21 Apr 2021 17590 Views

NitroRansomware Asks for $9.99 Discord Gift Codes, Steals Access Tokens

The malware seems like a silly coding lark at first, but further exploration shows it can wreak serious damage in follow-on attacks.

Threatpost 20 Apr 2021 1327 Views

Ransomware: A Deep Dive into 2021 Emerging Cyber-Risks

Our new eBook goes beyond the status quo to take a look at the evolution of ransomware and what to prepare for next.

Threatpost 20 Apr 2021 657 Views

WordPress core contributor proposes treating Google FLoC as a security vulnerability

Let's opt every WordPress site out of FLoC. Nice idea, but security update? Really? A proposal by a WordPress core contributor to treat Google's FLoC ad tech as a security vulnerability, and therefore backport an automatic opt-out to previous...

The Register 20 Apr 2021 17134 Views

Growing reliance on third-party suppliers signals increasing security risks

Adversaries are turning their focus on cheaper, easier targets within an organisation's supply chain, especially as businesses increasingly acquire software from external suppliers.

ZDNet 19 Apr 2021 689 Views

Chrome and Chromium updated after yet another exploit is found in browser's V8 JavaScript engine

JS component seems to be focus of researchers and miscreants alike Google has announced new updates to Chrome 89 following the discovery of yet another live exploit for a vulnerability in the V8 JavaScript engine.…

The Register 15 Apr 2021 18497 Views