Cybersecurity, ENISA draws up the top cyber threats for EU
The “Threat Landscape 2020” has just been released. Malware is in first place, followed by web-based attack and phishing. COVID-19 fuelled cyber aggressions.
Syria, Turkey leaves the south of Idlib. It is feared that it points to the east
The progress of the SAA offensive towards Barah led to the abandonment by the TAF of the observation points in the area. In parallel, Ankara suddenly bombs Ain Issa.
Cybercrime, ABEL RENOVATIONS, INC used in Quakbot signed campaign
It exploits company certificates to sign the executable and decept the anti virus. The malware infection chain is activated by the attachment.
WordPress: New plugin vulnerability. This time it’s up to Realia
Cybersecurity Help: The flaw (CWE-284) exists due to an IDOR issue. A threat actor could send a specially crafted request with the post ID to delete arbitrary posts.
Iraq: Isis under attack in Salahuddin, Nineveh, Ramadi and Falluja
Several ISF targeted operations are underway to neutralize IS cells and facilitators. The latest is underway on Kanous Island near Mosul and with floating bridges.
Cybercrime, new Formbook malspam campaign against hotels
The bait is a false booking with a compressed attachment. Inside there is an .exe file from which the malware infection chain starts.
Cybersecurity, Microsoft SharePoint server has a new vulnerability
UK NCSC experts: It’s the CVE-2020-16952. It can be exploited when a user uploads a specially crafted application package to an affected version of SharePoint.
Syria, the SDF may have thwarted an Isis attack on Conoco
Several IS jihadists arrested between Hasaka and Deir Ezzor in the last few hours, also near the plants. Meanwhile, in the north there is a boom in escapes to Turkey. But only from Aleppo.
Cybercrime, Emotet returns to hit Italy with a new campaign
The bait is always real stolen email conversations. The doc attachment contacts the first available url from a list within it to start the malware infection.
Cybercrime, new MassLogger campaign on false invoices
The malware infection chain to spread the keylogger is initiated by a .doc document, which contacts a malicious link.