IT News | Extol Corporation Sdn Bhd

Latest Cybersecurity News from the World

IT News

Data Privacy Concerns Cause Sales Delays: Cisco

January 28, 2018 By aatech

Nearly two-thirds of businesses worldwide have experienced significant delays in sales due to customer data privacy concerns, according to Cisco’s 2018 Privacy Maturity Benchmark Study. The study, based on the responses of roughly 3,000 cybersecurity professionals from 25 countries, shows that 65% of businesses reported sales cycle delays due to concerns over data privacy, with […]

IT News

LENOVO FIXES HARDCODED PASSWORD FLAW IMPACTING THINKPAD FINGERPRINT SCANNERS

January 27, 2018 By aatech

PC maker Lenovo issued a fix for a hardcoded password flaw impacting ThinkPad, ThinkCentre and ThinkStation laptops. The flaw affects nearly a dozen Lenovo laptop models that run versions of Microsoft Windows 7, 8 and the 8.1 operating system. The vulnerability was disclosed by Lenovo on Thursday who also offered a patch to fix affected […]

IT News

GOOGLE CHROME ONCE AGAIN TARGET OF MALICIOUS EXTENSIONS

January 26, 2018 By aatech

Researchers at network security vendor ICEBRG recently discovered four malicious extensions in the official Google Chrome Web Store with a combined user count of more than 500,000, and as with past incidents, the implications are serious for both consumers and enterprises. ICEBRG notified Google and three of the extensions have since been removed from the […]

IT News

ORACLE SHIPS 237 FIXES IN LATEST CRITICAL PATCH UPDATE

January 25, 2018 By aatech

Oracle has shipped 237 patches for vulnerabilities impacting hundreds of product versions as part of its latest quarterly critical patch update. Product lines coming in for some of the most fixes include Oracle Financial Services Applications, with 34, Fusion Middleware with 27, MySQL with 25 and Java SE with 21. In many cases, the vulnerabilities […]

IT News

CROOKS SWITCH FROM RANSOMWARE TO CRYPTOCURRENCY MINING

January 24, 2018 By aatech

Criminals behind the VenusLocker ransomware have switched to cryptocurrency mining in their latest campaign targeting computer users in South Korea. Instead of attempting to infect targeted computers with ransomware, the group is now trying to install malware on PCs that mines for Monero, an open-source cryptocurrency. The shift was spotted by FortiGuard Labs, which said […]

IT News

ATTACKERS USE MICROSOFT OFFICE VULNERABILITIES TO SPREAD ZYKLON MALWARE

January 23, 2018 By aatech

Spam campaigns delivering Zyklon HTTP malware are attempting to exploit three relatively new Microsoft Office vulnerabilities. The attacks are targeting telecommunications, insurance and financial service firms. According to FireEye researchers who identified the campaigns, attackers are attempting to harvest passwords and cryptocurrency wallet data along with recruiting targeted systems for possible future distributed denial of […]

IT News

Cloudflare Launches Remote Access to Replace Corporate VPNs

January 22, 2018 By aatech

Mobile and cloud computing have challenged the concept of perimeter security. There is no longer an easily definable perimeter to defend. VPNs are a traditional, but not ideal solution. Neither approach addresses the attacker who gets through the perimeter or into the VPN. Google long ago recognized the problems and introduced BeyondCorp as an alternative […]

IT News

INTEL SAYS FIRMWARE FIXES FOR SPECTRE AND MELTDOWN AFFECTING NEWER CHIPS

January 21, 2018 By aatech

Intel’s efforts to issue fixes for the Spectre and Meltdown CPU vulnerabilities are still hitting some bumps in the road, a company executive said in a blog post. “We have now issued firmware updates for 90 percent of Intel CPUs introduced in the past five years, but we have more work to do,” said Navin […]

IT News

APPLE PREPS CHAIOS IMESSAGE BUG FIX FOR NEXT WEEK

January 20, 2018 By aatech

The update will address a flaw software developer Abraham Masri publicly identified in a tweet earlier this week, according to multiple published reports. The flaw causes the iMessage app on iOS devices to freeze, crash or restart. Macs are also affected. A macOS High Sierra 10.13.3 update is expected later this month to fix the […]

IT News

Google Drive Exploited to Download Malware Directly from URL

January 19, 2018 By aatech

A vulnerability has emerged that allows hackers to automatically download malware to a victim’s computer directly from a Google Drive URL. Proofpoint uncovered the vulnerability and created a proof-of-concept exploit for the issue, which exists in the Google Apps Script. The development platform is based on JavaScript and allows the creation of both standalone web […]