CyberSecurity.PH #035

eGovPH hack not real; US and PH military information sharing; China abusing GSM to infiltrate telecom networks; Five eyes provide top-15 exploits; Critical Windows Kerberos vulnerability; Apple Releases urgent patches; Palo Alto Authentication bypass; Wordpress plugin exploit enables admin access

CyberSecurity.PH #034

Multi-cloud security testing tool; Awesome GPT agents for cybersecurity; DocuSign abused to send authentic looking invoices; Synology urges updates for critical zero-click RCE; 22k addresses taken down in INTERPOL operation; Signed Remote Desktop Protocol files from Russia; Google Researchers ...

CyberSecurity.PH #033

MFA push bombing; Interpol operation rescues 400 Filipinos; Fake Wordpress plugins are infostealer malware; ATM FASTCash malware from DPRK; Vulnhuntr LLM powered SAST; SecObserve CICD management; Disposable email domains; VMware, Grafana, WebLogic, Kubernetes vulnerabilities

CyberSecurity.PH #032

United Nations report on SEA cybercrime; US wiretaps hacked by China; Adobe/Magento stores hacked by CosmicSting campaigns; Critical vulnerabilities in DrayTek; SAP BusinessObjects vulnerability; Qualcomm WLAN vulnerability; CUPS-browsed scanner

CyberSecurity.PH #031

China linked Earth Baxia threat; two new large PH data breaches; Telegram not encrypted; China linked Flax Typhoon threat; criminal comms platform Ghost takedown; Fake CAPTCHA verification spreads malware; Ransomware-Tool-Matrix; Unauthenticated RCE in all Linux; Zero-Click MediaTek vulnerability

Philippines, we need to talk about Telegram

If you are using Telegram because anything to do with “security” then please stop what you are doing, you are at risk and all the previous data you have exchanged on Telegram is at risk.

CyberSecurity.PH #030

Chinese cyber espionage Mustang Panda and Crimson Palace; Two new large Philippines data-breaches; a YubiKey vulnerability; Russian military GRU 29155 threats; Two air-gapped host exfiltration techniques; Two CVSS 10.0 vulnerabilities; Open source adversary simulation software

CyberSecurity.PH #029

APT41 targeting Philippine military; Supreme Court data breach claim; PoC exploit Windows IPv6 zero-click RCE; Backdoor in millions of RFIDs; Open-source WAF; Grype for SAST; SonicWall vulnerability; GitHub Enterprise Server auth bypass

CyberSecurity.PH #028

5x Critical cybersecurity incidents in Philippines; 1.4Bn Tencent accounts claimed leaked; 2024 Threat Hunting Report; CISA warns of destructive cyberattacks from China; Critical SAP flaw; SolarWinds critical update

CyberSecurity.PH #027

$75M ransom paid to ransomware gang; 6M+ Vivamax subscriber records compromised; POGOs have been banned effective immediately; An awesome ISO 27001 toolkit; Secure Boot broken on millions of devices; New VMware ESXi vulnerability actively exploited