TRU Security

A new Windows vulnerability, dubbed CVE-2022 30190 (or "Follina"), allows attackers to create a Word document that will execute malicious code through the MSDT protocol when a user opens the file in Preview mode.

In two years time, the APT known as SideWinder has attacked as many as 1,000 victims. While the group behind SideWinder has focused on aviation, defense, IT, legal, and military targets in central Asian countries, it appears to be expanding its geography.

Carinthia, the southernmost state in Austria, has had their computer systems encrypted by BlackCat (ALPHV) ransomware, causing a severe disruption of government services.

The 2022 Verizon Data Breach Investigation Report is out, and it covers investigations into 23,896 cybersecurity incidents that occurred in 2021.

A new malware distribution campaign is embedding malicious Microsoft Word documents inside PDF files, prompting victims to launch the Word document as soon as the PDF is opened.

SpiceJet, the Indian budget airline, was recently hit by a ransomware attack that impacted flight operations.

A new variant of the macOS malware known as UpdateAgent shows its evolution into a dropper. UpdateAgent can now infect Mac computers with additional malware while bypassing the protections provided by Gatekeeper.