WordPress as a threat to a secure internet – this is why you need to attend our training course – social engineering attacks are everywhere

phishing email threat

It is a long title but it explains exactly what this post is about. The instructions for setting up simple but profitable social engineering and phishing email campaigns are easily available across the ordinary internet, not just the dark web. The software required is free, both the malicious stuff and …

Do you know what an .xlsb file is? The hackers do and it is another way to obscure their malicious payloads

Here is yet another email attachment, examined by Xme, at SANS Internet Storm and for you to look out for: XLSB Files: Because Binary is Stealthier Than XML – Sans Internet Storm Centre For phishing attacks to succeed the hackers need to exploit your trust – for them to fail …

Active Mass Scanning for a Movable Type Vulnerability – If you do not know if this impacts you – then your business continuity documentation is not up to date!

SANS Internet Storm Diary is reporting a dramatic increase in the scanning for a vulnerability in the CMS Movable Type – software similar in function to WordPress for the development of web sites and web content. Scans for Movable Type Vulnerability (CVE-2021-20837) – SANS Internet Storm Centre National Vulnerability Database …

Credential leaks

It is always an issue when websites lose control of your credentials – it is a real worry when it is a site used by cyber security professionals. Credentials Leaks on VirusTotal – San Internet Storm Centre