Zero-day threat using Microsoft Office documents – even if macros are disabled – it’s called Follina

Office macros slide

I have written about the usefulness and the threat that Microsoft Office document macros can pose to your cyber security. This flaw, called Follina, exploits Office functionality to retrieve an HTML file, and Microsoft Support Diagnostic Tool (MSDT) to run some malicious code, which can lead to privilege escalation attacks. …

Ransomware targets VMware

A new malware strain known as Cheerscrypt or Cheers, is targeting a VMware enterprise virtualisation tool – VMware ESXi systems. Ransomware Cheerscrypt targets VMware ESXi systems • The Register

Pegasus Spyware – if you are a Prime Minister – anywhere – then watch out… UPDATED 27 May 2022

This post was originally published on 3 May 2022 Update 27 May 2022 Following the hacking of Spanish governmental phones, Spain’s prime minister Pedro Sánchez, will be bringing forward new legislation to regulate and oversee the nation’s spy agencies: Spain’s PM vows to reform intelligence services following phone hacking scandal …