Vishing Attacks on The Rise

What is Vishing? Voice phishing, also known as vishing, is the practice of eliciting information or attempting to influence action via the telephone.(from hhs.gov site) Recently, a large U.S. company fell victim to a cyber attack that leveraged sophisticated phishing techniques involving phone calls to gain access to the victim organization. Phishing campaigns continue to … Read more

Is Ransomware Like Lightning? Does it hit same site 2x?

lightning like ransomware?

The Myth of Lightning not striking the same place  again and again should be broken by now as in tomorrow.io post: What about ransomware, does it hit in the same place twice? Unfortunately just like lightning can hit the same place twice especially if it is a Metal rod on top of a tall building, … Read more

Top 5 Prevent Hacks

Patch your software and hardware    (portswigger article) Password management – Keep passwords locked    – 2FA MFA, Backup and test backups – social engineering – Phishing education  (CISA – Cybersecurity& Infrastructure Security AgencyTips)  Test your environment     Why did i give the patching/upgrade the highest importance, because a policy of upgrading can lead your environment … Read more

Horde Webmail Has Zero-Day RCE Bug – Will Not Be Patched

What if you have software with a vulnerability that will not be patched? What does this mean?   RCE means Remote Code Execution which means the attacker does not have to be on the system to exploit it (this is the most dangerous attack). If you are running Horde webmail to check your email – … Read more