CyberSecurity.PH #037

Chinese threat-actors target Philippine Executive branch and US Treasury; 30+ Chrome plugins hack, millions of users at risk; GuardDog PyPi/NPM scanner; Critical vulnerabilities in Apache, Oracle, Mitel, Ivanti and SonicWall

CyberSecurity.PH #036

Salt Typhoon targeting Southeast Asia telecoms; POGOs re-spawning as BPOs; Predatory money loan apps; Solana web3.js backdoor; Safeline self hosted WAF; Critical vulnerabilities in SailPoint, Veeam, WhatsUp and Cleantalk

CyberSecurity.PH #035

eGovPH hack not real; US and PH military information sharing; China abusing GSM to infiltrate telecom networks; Five eyes provide top-15 exploits; Critical Windows Kerberos vulnerability; Apple Releases urgent patches; Palo Alto Authentication bypass; Wordpress plugin exploit enables admin access

CyberSecurity.PH #034

Multi-cloud security testing tool; Awesome GPT agents for cybersecurity; DocuSign abused to send authentic looking invoices; Synology urges updates for critical zero-click RCE; 22k addresses taken down in INTERPOL operation; Signed Remote Desktop Protocol files from Russia; Google Researchers claim first vulnerability found using AI

CyberSecurity.PH #033

MFA push bombing; Interpol operation rescues 400 Filipinos; Fake Wordpress plugins are infostealer malware; ATM FASTCash malware from DPRK; Vulnhuntr LLM powered SAST; SecObserve CICD management; Disposable email domains; VMware, Grafana, WebLogic, Kubernetes vulnerabilities

CyberSecurity.PH #032

United Nations report on SEA cybercrime; US wiretaps hacked by China; Adobe/Magento stores hacked by CosmicSting campaigns; Critical vulnerabilities in DrayTek; SAP BusinessObjects vulnerability; Qualcomm WLAN vulnerability; CUPS-browsed scanner

CyberSecurity.PH #031

China linked Earth Baxia threat; two new large PH data breaches; Telegram not encrypted; China linked Flax Typhoon threat; criminal comms platform Ghost takedown; Fake CAPTCHA verification spreads malware; Ransomware-Tool-Matrix; Unauthenticated RCE in all Linux; Zero-Click MediaTek vulnerability

Philippines, we need to talk about Telegram

CyberSecurity.PH #030

Chinese cyber espionage Mustang Panda and Crimson Palace; Two new large Philippines data-breaches; a YubiKey vulnerability; Russian military GRU 29155 threats; Two air-gapped host exfiltration techniques; Two CVSS 10.0 vulnerabilities; Open source adversary simulation software

CyberSecurity.PH #029

APT41 targeting Philippine military; Supreme Court data breach claim; PoC exploit Windows IPv6 zero-click RCE; Backdoor in millions of RFIDs; Open-source WAF; Grype for SAST; SonicWall vulnerability; GitHub Enterprise Server auth bypass

CyberSecurity.PH #028

5x Critical cybersecurity incidents in Philippines; 1.4Bn Tencent accounts claimed leaked; 2024 Threat Hunting Report; CISA warns of destructive cyberattacks from China; Critical SAP flaw; SolarWinds critical update

CyberSecurity.PH #027

$75M ransom paid to ransomware gang; 6M+ Vivamax subscriber records compromised; POGOs have been banned effective immediately; An awesome ISO 27001 toolkit; Secure Boot broken on millions of devices; New VMware ESXi vulnerability actively exploited