LastPass Says There Is No Evidence Of Data Breach

There are strange events swirling around LastPass. LastPass is a popular password safe and identity protection service. Recently Twitter exploded with reports from around the world of people who received a notification from LastPass regarding a string of suspicious login attempts. Most of them came from countries other than the …

New Remote Access Trojan Virus Hides In Windows Registry

There’s a new malware strain you should make sure your IT staff is aware of.  Called the Dark Watchman, it is a well-designed and highly capable RAT (Remote Access Trojan) paired with a keylogger written in C#. First discovered by researchers at Prevailion this piece of malware likes to lurk …

Hackers Are Using Big Brand Surveys To Scam Victims

Surveys have long been a playground of hackers and scammers. That’s true at any time of the year but it’s especially true around the Holidays when such scams seem to attract even more unwitting victims.  In fact, some estimates place scammer profits revolving around fake surveys as being nearly $80 …

New Ransomware Named AvosLocker Uses Multiple Tricks In Attacks

There’s a new strain of ransomware to be concerned about in the form of AvosLocker. This is from security firm Sophos who warns that the new strain of human-operated ransomware is one to watch. AvosLocker burst onto the scene over the summer of this year (2021). Having enjoyed some success …

Update Your All In One SEO Plugin For Security Patch

Do you own and operate a WordPress website?  Do you also use the “All in One” SEO plugin? If you answered yes to both of those questions, then be aware that you’ll want to update that plugin as soon as possible. Recently security researcher Marc Montpas from Automattic Security discovered …

Reasons The Log4j Java Library Security Issue Is Concerning

Haven’t heard of Log4j before right now? If not, you’re certainly not alone but unfortunately it’s something you’re likely to hear more about in the weeks ahead. It may wind up being the cause of a few headaches for you. “Log4j” is a Java library.  Its function is to log …

Some Lenovo Laptops Have Admin Level Security Vulnerability

Do you own a Lenovo Yoga or ThinkPad laptop?  If so be advised that a pair of critical security flaws have recently been found that could allow an attacker Admin level access to your machine. The flaws are centered in the IMControllerService and are being tracked as CVE-2021-3922 and CVE-2021-3969.  …

This Android Banking Malware Is Back

We haven’t heard much about Anubis in recent months. Anubis is the nasty Android-based banking Trojan that has made headlines on more than one occasion. If history is any guide at all Anubis will soon be making headlines again.  It’s back and based on the findings from researchers at Lookout …

Microsoft Teams Gets End To End Encryption

Two months ago, Microsoft began rolling out support for end-to-end encryption for all Teams calls.  Given the pandemic and the increased demand for Teams and services like it, that was a very big deal. The good news is that Microsoft recently announced that the rollout is complete and all Teams …

QNAP Still Dealing With Attacks On NAS Devices

QNAP has recently warned its customers of an ongoing campaign that is targeting QNAP NAS (Network Attached Storage) devices and infecting them with cryptomining malware.  This particular campaign is deploying software designed to mine Bitcoin and using your computing power to generate profits for them.  If you are infected, you’ll …