(954) 237-7797
Let's Talk
Blog
June 17, 2021 by Vertical Axion
There’s good news and bad news in the Apple ecosystem, specifically with regards to the company’s M1 chip. The bad news is that researchers have discovered a security flaw in the chip’s design that cannot be fixed without redesigning the chip itself. This flaw allows two malicious apps on a machine utilizing an M1 chip […]
Read more »
Tagged
June 5, 2021 by Vertical Axion
Craig Federighi, one of the top executives at Apple, is not happy, and recently made his displeasure known in court. In response to questions from Apple’s lawyers, he said, “Today, we have a level of malware on the Mac that we don’t find acceptable.” Federighi made the statement in defense of Apple’s longstanding strategy to […]
June 3, 2021 by Vertical Axion
Recently, a whole raft of security flaws have been found that impact all Wi-Fi devices, including smart phones, IoT devices, and personal computers going back as far as 1997. This unfortunately means that almost every Wi-Fi device in use today is vulnerable. Collectively, the attacks associated with these issues have been dubbed FragAttacks. Mathy Vanhoef, […]
June 2, 2021 by Vertical Axion
Recently, Microsoft issued an alert, warning users about a remote access tool called RevengeRAT, also known as AsyncRAT. It is being used to target travel and aerospace companies with spear-phishing emails. The emails use social engineering tricks to prompt employees at these types of firms to open a poisoned Adobe PDF attachment which downloads a […]
May 31, 2021 by Vertical Axion
Recently, Google did some house cleaning. They removed ten different apps from the Play Store, all of which contained droppers for financial Trojans, this according to a recent blog post by Check Point Research. Apparently, all ten of the poisoned apps were submitted by the same threat actor, who took pains to get them past […]
May 26, 2021 by Vertical Axion
A company named ‘UK security Watchdog, Which?’ recently released a report with some disturbing security ramifications. Based on a survey of more than 6000 UK households, the company identified 13 different older routers that are still regularly being used today. Of those 13, nine were found to fall well short of meeting modern security standards. […]
May 20, 2021 by Vertical Axion
There’s an ongoing, global scale phishing attack you should be aware of, even if your firm isn’t currently being targeted by it. The attack is being tracked by Mandiant, who recently published a report about it. According to that report, the attack was planned in waves, hitting more than 50 different organizations spanning a broad […]
May 19, 2021 by Vertical Axion
On April 20, 2021, Google released Chrome 90.0.4430.85, designed to address a zero-day exploit hackers are currently taking advantage of, tracked as CVE-2021-21224. The patch also patches four other high severity security flaws that had previously been plaguing the most popular browser on the web. By the time you read these words, the latest version […]
May 18, 2021 by Vertical Axion
Recently, researchers at Qihoo 360 Network Security discovered a particularly stealthy piece of malware designed to create backdoors in the Linux ecosystem. It was so good at its job, and so stealthy that it went completely undetected for years. That gave the hackers controlling it a convenient access point literally for years. Based on the […]
May 15, 2021 by Vertical Axion
QNAP recently addressed a critical security vulnerability you need to be aware of. Previous to the fix, the company had included hard-coded credentials to serve as a backdoor to the device. Unfortunately, hackers became aware of this and began abusing those credentials. That resulted in a number of confirmed instances where hackers gained access to […]
May 13, 2021 by Vertical Axion
If you’re a Microsoft Edge user, be aware. Beginning in July, with the release of Edge 92, the browser will automatically redirect users to a secure HTTPS connection any time they visit a website via the HTTP protocol. Microsoft is not alone in this, and in fact, is coming a bit late to the party. […]
May 11, 2021 by Vertical Axion
There’s a new malware threat you need to be aware of, and it recently made its way onto the UK’s National Cyber Security Centre’s radar. Called FluBot, it is designed to steal information including passwords and banking particulars. There are a couple of interesting aspects about this threat that are noteworthy. First, it is currently […]
May 8, 2021 by Vertical Axion
Last year, Google made some important changes to their Chrome browser in a bid to increase user security. Among these changes was to default to “HTTPS” in the browser in an attempt to reduce the number of “man in the middle” and similar types of attacks. Their strategy worked. Other companies adopted Google’s approach and […]
May 7, 2021 by Vertical Axion
Jiri Kropac, the head of ESET’s Threat Detection Labs, recently reported a new malware campaign to be aware of. This one is a bit different in terms of methodology. Hackers most commonly employ emails utilizing various social engineering tricks in an attempt to lure unsuspecting recipients into clicking malicious links or downloading poisoned files. In […]
April 30, 2021 by Vertical Axion
The Microsoft 365 Defender Threat Intelligence Team recently issued a dire warning that every IT professional should take seriously. They’ve discovered an emerging threat in the form of hackers utilizing legitimate “Contact Us” forms associated with Google websites to distribute malware to unsuspecting site visitors. Since the website is legitimate, it almost always bypasses email […]
April 27, 2021 by Vertical Axion
There’s a new cryptomining worm threat to be aware of, and it’s making the lives of IT Administrators who manage Windows and Linux environments nightmarish. This news comes from a recently published report offered by a research firm called Juniper, which began monitoring the activities of the new Sysrv Botnet back in December of 2020. […]
April 19, 2021 by Vertical Axion
Gamers tend to be surprisingly tech savvy, and as such, they’re a bit harder to trick with social engineering than many other groups. Gamers do have a weakness, and it’s one that hackers around the world have recently begun to exploit in a systematic way. Increasingly, security researchers are finding instances of poisoned cheat codes. […]
April 17, 2021 by Vertical Axion
If you have an Android device and you’re something of an app fanatic, you may have been tempted by an app called FlixOnline, which was available on the Google Play Store for a time. The app’s description promises a free trial subscription to Netflix, which naturally prompted many people to download it and give it […]
April 8, 2021 by Vertical Axion
If you don’t spend much time in the Apple ecosystem, you may not realize that Xcode is a completely legitimate tool used in macOS for developing a wide range of software and applications. Recently, based on research conducted by SentinelLabs, it has come to light that hackers are abusing Xcode via malware that has been […]
April 3, 2021 by Vertical Axion
Clubhouse has taken the internet by storm. Or rather, it has taken the iOS ecosystem by storm, since the company has yet to release an Android version of their increasingly popular app. If you’re not sure what all the fuss is about, Clubhouse is an audio chat app that is invitation only. If you get […]
April 2, 2021 by Vertical Axion
One of the more disturbing trends this year is that worms are becoming popular among the hackers of the world again. We’ve seen a handful of new malware strains introduced in recent months with worm modules added to their code, allowing them to scan and infect Windows systems connected to the initial source of the […]
March 31, 2021 by Vertical Axion
If you rely on TCP port 554, you’ll probably want to do a bit of reconfiguration. Last year, security researchers discovered a new version of the NAT Slipstream vulnerability that allowed hackers to deploy malicious scripts in order to bypass a website visitor’s NAT firewall and access any TCP/UDP port on the visitor’s internal network. […]
March 30, 2021 by Vertical Axion
In early January of this year (2021), Microsoft informed security expert Brian Krebs that the company found four zero-day security flaws in their Exchange Server. Those flaws were actively being exploited by a persistent threat group known as Halfnium, sponsored by the Chinese government. According to Microsoft’s statistics, more than 30,000 Exchange Servers had already […]
March 20, 2021 by Vertical Axion
Macros have been a simple, effective means of spreading malware since the 1990’s, and some hackers still rely on them heavily to ensnare and infect unsuspecting users. It’s a long standing issue that many companies have attempted to address over the years. Now, it seems that it’s Microsoft’s turn at bat again. Recently, the Redmond […]
