CyberSecurity.PH #022

Philippines hacktivist Ikaruz Red Team ransomware; ABS-CBN ransomware attack 500 GB; Law enforcement seizes BreachForums; Nmap for LLM/AI models; GitHub SAML auth bypass; Veeam auth bypass; QNAP QTS zero-day; D-Link EXO zero-day

CyberSecurity.PH #021

Dropbox breach; Threat blocklists; Government agencies not responsive to DICT cybersecurity; North Korean threat actors exploiting DMARC; DHCP options cause VPN apps to leak traffic; GitLab vulnerability; 45k+ vulnerable tinyproxy servers

CyberSecurity.PH #020

Malicious cyber activity spiking in Philippines says US; Palo Alto zero-day and exploits; Telegram zero-day RCE; D-Link NAS device vulnerabilities; Japan and US cyber threat intel sharing; Sisense hack impacts critical infrastructure; AWS security playbooks

CyberSecurity.PH #019

Reported Philippine Statistics Authority (PSA) data leak; vulnerable Microsoft Exchange servers; US agency scolds Microsoft on substandard cloud security; Phishing-as-a-service MFA bypass; Supply chain attack on SSH inserts backdoor via XZ library

CyberSecurity.PH #018

Philippine law-enforcement frees hundreds of enslaved romance-scam workers; China backed Earth Krahang exploits inter-governmental trust; Acer confirms Philippines employee data leak; Active cyber-attacks on critical water infrastructure; More vulnerabilities from Fortinet, Fortra and Ivanti

CyberSecurity.PH #017

Predator spyware detected in Philippines; Russian APT29 targeting cloud environments; Australia signs cybersecurity agreements with Philippines; Maria Ressa deepfake targeting Philippines audiences; Lazarus exploited Windows zero-day that Microsoft knew about

CyberSecurity.PH #016

AFP bans TikTok; Stolen facial recognition data; 28k vulnerable MS Exchange servers; LockBit ransomware gang disrupted; ScreenConnect CVSS10 vulnerability

CyberSecurity.PH #015

PBBM approves National Cybersecurity Plan 2024; Espionage group observed using USB devices to hack targets in the Philippines; Microsoft is the supply chain threat, New critical Exchange bug exploited as zero-day; more awesome Cybersecurity Engineering tools

CyberSecurity.PH #014

Analyzing the DICT reported “China-linked’ cyber attack; Volt Typhoon threat group preparing for destructive cyberattacks; Fortinet SIEM two CVSS level 10 vulnerabilities; Cybersecurity engineering tools

CyberSecurity.PH #013

Open source threat intel feeds; a 26 billion records data breach collection; Microsoft hacked yet again by Russian intelligence group; Authentication bypass in GoAnywhere; New government office for cyber threats in the Philippines