A zero-day vulnerability in Zoom which can be used to launch remote code execution (RCE) attacks has been disclosed by researchers. The browser version of the videoconferencing software is not impacted. Zoom is working to mitigate this issue with respect to Zoom Chat. In-session Zoom Meetings and Zoom Video Webinars are not affected. As a best practice, WESTprotect recommends that all users only accept contact requests from individuals they know and trust.
Cyber threats are evolving every day, keeping up with them is a full-time job. The WESTprotect Cyber News is your source for how these changes affect you in the real estate, title, mortgage, and settlement services industry. From cyber threats to new Tactics, Techniques, and Procedures (TTP’s) we’ve got you covered.
Last year saw a double-digit surge in ransomware, IoT threats, new malware and cryptojacking, in what SonicWall has described as a “tipping point” in the cyber-arms race.
A new scam finds fraudsters using a website designed to look like the U.S. Federal Trade Commission (FTC) site in an attempt to con people out of their money. This FTC fraud is an example of an imposter scam. It’s a type of attack where threat actors disguise themselves as a trusted authority to trick people into handing over their personal and/or financial information.
The number of attacks had slowed down after the winter holidays but after the past two weeks, it's evident that the ransomware attacks are back at full speed.
Microsoft has warned of an increasing number of consent phishing (aka OAuth phishing) attacks targeting remote workers during recent months, BleepingComputer has learned. These attacks were part of two campaigns that ran between September and December 2020, targeting victims in multiple recurring waves.