IT News | Extol Corporation Sdn Bhd

Latest Cybersecurity News from the World

IT News

Siemens Update Patches SIMATIC PCS 7 Bug in Some Versions

November 21, 2017 By aatech

Siemens has made an update available for some of its SIMATIC PCS 7 distributed control systems that are impacted by a remotely exploitable input validation vulnerability. Siemens said version 8.2 and V8.1 prior to 8.1 SP1 with WinCC v7.3 Update 13 are affected. “Successful exploitation of this vulnerability could allow a remote authenticated attacker to […]

IT News

Windows Movie Maker Scam Uses SEO to Go Global

November 20, 2017 By aatech

A Windows Movie Maker scam has gone global, thanks to having a high Google ranking. Amid continuing demand for Windows Movie Maker, Microsoft’s free video editing software that was discontinued in January 2017, ESET found that scammers are hawking a modified version of the software, built to bilk money from unsuspecting users. Interestingly, the spread […]

IT News

Microsoft Provides Guidance on Mitigating DDE Attacks

November 17, 2017 By aatech

Despite a rash of attacks leveraging Dynamic Data Exchange fields in Office, including some spreading destructive ransomware, Microsoft has remained insistent that DDE is a product feature and won’t address it as a vulnerability. Microsoft on Wednesday did, however, put some guidance in admins’ hands as to how to safely disable the feature via new […]

IT News

Millions of Android Apps at Risk from Eavesdropper Vulnerability

November 16, 2017 By aatech

Poor mobile app development practices have created the Eavesdropper vulnerability, which has resulted in a large-scale data exposure from nearly 700 apps in enterprise mobile environments, over 170 of which are live in the official app stores today. The affected Android apps alone have been downloaded up to 180 million times. According to researchers at […]

IT News

Hackers hired for year-long DDoS attack against man’s former employer

November 15, 2017 By aatech

US federal prosecutors in Minnesota have charged a 46-year-old man with hiring a cyberhitman – well, technically, three hacking services – to launch a year-long campaign of distributed denial of service (DDoS) attacks on his former employer. Prosecutors say that John Kelsey Gammell, 46, contacted seven DDoS services and paid monthly subscriptions to three of […]

IT News

DDoS Attacks Become More Frequent in Q3, with Linux Dominating

November 14, 2017 By aatech

The share of Linux botnets is continuing to grow—accounting for 70% of attacks in Q3, compared to 51% in Q2. According to Kaspersky Lab’s Q3 2017 DDoS Intelligence Report, experts have continued to see an increase in the number of countries where resources have been targeted, with 98 countries subjected to DDoS attacks in the […]

IT News

Russian ‘Fancy Bear’ Hackers Abuse Blogspot for Phishing

November 13, 2017 By aatech

The cyber espionage group known as Fancy Bear, which is widely believed to be backed by the Russian government, has been abusing Google’s Blogspot service in recent phishing attacks. Threat intelligence firm ThreatConnect spotted the use of the blogging service while analyzing attacks aimed at Bellingcat, a group of investigative journalists that uses open source […]

IT News

Poisoned Google Search Results Lead to Banking Trojan

November 10, 2017 By aatech

A recently observed Zeus Panda banking Trojan attack used poisoned Google search results for specific banking related keywords to infect users, Cisco Talos researchers warn. As part of this attack, the actor behind Zeus Panda used Search Engine Optimization (SEO) to make their malicious links more prevalent in the search results. By targeting financial-related keyword […]

IT News

Fake WhatApp Update for Android Dodges Google Play Vetting Process

November 9, 2017 By aatech

As much as Google has tried to prevent malware from being uploaded to its official Play mobile application store, the company has kept tripping up—with almost alarming regularity in recent months. The latest incident involves a fake version of the WhatsApp instant messenger for Android that was downloaded at least 1 million times over the […]

IT News

Advantech Patches Code Execution Flaws in SCADA Product

November 8, 2017 By aatech

An update released by Taiwan-based industrial automation company Advantech for its WebAccess product patches two remote code execution vulnerabilities, ICS-CERT reported on Thursday.Advantech WebAccess is a browser-based software package for human-machine interfaces (HMI) and supervisory control and data acquisition (SCADA) systems. According to ICS-CERT, WebAccess versions prior to 8.2_20170817 are affected by a stack-based buffer […]