CyberSecurity.PH #026

Malvertising impacting Philippines Facebook Pages; Justice Department indicts Coins.ph consultants; Five Eyes warnings on China APT40 group; Huione Guarantee named as cybercrime marketplace; Singapore banks to remove OTP in 90 days; 10 billion leaked passwords released

CyberSecurity.PH #025

Four new serious Philippines data-breach events; 4,000 arrested in global Interpol led crackdown; Data Security Officer of Manila Bulletin admits hacking; regreSSHion a difficult-to-exploit OpenSSH vulnerability; Polyfill supply chain attack impacts 400K+ sites; Cisco Zero-Day vulnerability...

CyberSecurity.PH #024

Maxicare patient data breach; MARINA data breaches; Dutch intelligence on Chinese FortiGate hacks; Phishing-as-a-service delivering MFA bypass; Rapid weaponization of new PHP vulnerability; VMware RCE vulnerability; Cloudsploit a cloud configuration scanner

CyberSecurity.PH #023

Correlated Chinese state-sponsored cyber threats; Possible S&R and Robinsons data breaches; TikTok zero-click account takeover; Snowflake customer data breaches; Thousands Check Point VPNs vulnerable; Linux kernel vulnerability actively exploited; Awesome pentest cheat sheets

CyberSecurity.PH #022

Philippines hacktivist Ikaruz Red Team ransomware; ABS-CBN ransomware attack 500 GB; Law enforcement seizes BreachForums; Nmap for LLM/AI models; GitHub SAML auth bypass; Veeam auth bypass; QNAP QTS zero-day; D-Link EXO zero-day

CyberSecurity.PH #021

Dropbox breach; Threat blocklists; Government agencies not responsive to DICT cybersecurity; North Korean threat actors exploiting DMARC; DHCP options cause VPN apps to leak traffic; GitLab vulnerability; 45k+ vulnerable tinyproxy servers

CyberSecurity.PH #020

Malicious cyber activity spiking in Philippines says US; Palo Alto zero-day and exploits; Telegram zero-day RCE; D-Link NAS device vulnerabilities; Japan and US cyber threat intel sharing; Sisense hack impacts critical infrastructure; AWS security playbooks

CyberSecurity.PH #019

Reported Philippine Statistics Authority (PSA) data leak; vulnerable Microsoft Exchange servers; US agency scolds Microsoft on substandard cloud security; Phishing-as-a-service MFA bypass; Supply chain attack on SSH inserts backdoor via XZ library

CyberSecurity.PH #018

Philippine law-enforcement frees hundreds of enslaved romance-scam workers; China backed Earth Krahang exploits inter-governmental trust; Acer confirms Philippines employee data leak; Active cyber-attacks on critical water infrastructure; More vulnerabilities from Fortinet, Fortra and Ivanti

CyberSecurity.PH #017

Predator spyware detected in Philippines; Russian APT29 targeting cloud environments; Australia signs cybersecurity agreements with Philippines; Maria Ressa deepfake targeting Philippines audiences; Lazarus exploited Windows zero-day that Microsoft knew about