Resources / Blog
Insights on cybersecurity, managed IT, and modern business technology.
Practical guidance from the MYDWARE team — protecting and modernising businesses across the Greater Toronto Area and Simcoe County.
-
CybersecurityEmail Phishing Attackers Are Pretending To Be The IRS
Emotet is in the news again according to the latest information from email security firm Cofense. Emotet is notorious for spreading via phishing campaigns and this latest phishing campaign sees them impersonating the IRS.
April 1, 2022 2 min -
CybersecurityCritical Vulnerability Discovered in Sophos Firewall Version 18.5.3 and Older
Details
March 31, 2022 2 min -
CybersecurityMicrosoft Releases Emergency Update for Their Edge Browser
Microsoft has released an emergency patch for their Edge web browser following the acknowledgment of a zero-day exploit known to be actively used in the wild. The exploit was originally discovered in the Google Chrome browser, but as Microsoft Edge is based on an open-source version of Chrome called Chromium (also vulnerable), MS Edge remains inherently impacted. This issue has far-reaching implications as the Edge, Chrome and Chromium browsers can each run on Windows, MacOS and Linux platforms, casting a wide net for potential harm.
March 29, 2022 2 min -
CybersecurityThis Malware Phishing Campaign Hijacks Email Conversations
Hackers have been using social engineering tricks to get their malicious code onto the systems of unsuspecting victims. This has been happening for almost as long as the internet has been around.
March 28, 2022 2 min -
CybersecurityGoogle Releases Emergency Update for The Chrome Web Browser
Google has released an emergency patch for their Chrome web browser following the acknowledgment of a zero-day exploit known to be actively used in the wild. Few details are available surrounding the issue as researchers are likely waiting for a larger userbase to adopt the patch before releasing technical details. However, there are indications that the vulnerability is of a “type confusion” weakness in the JavaScript V8 engine of Chrome browsers. Type confusion vulnerabilities are source code errors that allow an application to be tricked into reading unexpected input. Under the right...
March 28, 2022 2 min -
CybersecurityHackers Get Source Code During Data Breach At Samsung
Samsung's corporate network was breached recently. That's bad news all by itself. The company has recently confirmed that in addition to the confidential customer information that was stolen, the hackers also made off with the source code for the software used in the company's Galaxy smartphones.
March 24, 2022 2 min -
CybersecurityHackers Are Increasingly Targeting Mobile Devices
Here's a statistic you're not going to like. Based on research conducted by cybersecurity researchers at Proofpoint, there has been a staggering 500 percent increase in malware attacks against mobile devices during the opening months of 2022. The most significant peak so far this year occurred at the end of February.
March 23, 2022 2 min -
CybersecurityThese Medical Devices Are Vulnerable To Security Threats
Thanks to the fine folks at Palo Alto Networks we have a better view of the relative safety and security of network-capable medical devices. Unfortunately, the news is grim.
March 19, 2022 2 min -
CybersecurityPeople Are Still Not Using Secure Passwords Despite Warnings
It's 2022 and after years of warning people repeatedly about the dangers of using the same old passwords and using the same password across multiple websites, you would think this would get better. You would think we'd have that problem solved and there would be one less network security risk to worry about.
March 18, 2022 2 min -
CybersecurityNetwork Security Breach Confirmed At Nvidia
Nvidia joined the seemingly unending parade of major corporations to fall victim of a hacking attack. Recently, a group of hackers calling itself "Lapsus$" began sharing details about the incident and the damage that it caused. Nvidia confirmed the attack.
March 17, 2022 2 min -
CybersecurityThree Critical Vulnerabilities found in APC Smart-UPS Devices
APC, one of the leaders in backup power supply products are on the receiving end of three new vulnerabilities which may put millions of organizations at risk.
March 16, 2022 5 min -
CybersecurityMozilla Patches Zero-Day Vulnerability In Firefox
Mozilla have released patches for two zero-day exploits which were recently reported by researchers at 360 ATA. A zero-day is an unpatched software vulnerability that is being actively exploited in the wild. In other words, since the vulnerability is already being exploited, there are “zero days” to spare in finding a solution.
March 15, 2022 1 min -
CybersecurityAndroid Users Need To Watch Out For Teabot Trojan
If you have smart devices in the Android ecosystem, there's a new threat to be aware of in the form of a malware strain called Teabot. This bit of malicious code is a Remote Access Trojan or RAT for short. The group behind the code is making a big push to see it spread worldwide.
March 15, 2022 2 min -
CybersecurityScammers Cost Americans Billions Of Dollars In 2021
The US Federal Trade Commission reports that Americans lost almost six billion dollars to fraud last year. The $5.8 billion total represented a catastrophic 70 percent increase compared to the losses reported in 2020.
March 14, 2022 2 min -
CybersecurityNew Phishing Emails Target Citibank Account Holders
Are you a Citibank customer? If so, be aware that a group of scammers is specifically targeting Citibank account holders.
March 12, 2022 2 min -
CybersecurityMalware Hidden Inside Games Found In Microsoft Store
Security experts tell people all the time to never to download apps from anywhere other than official sources like the Microsoft Store, the Google Play Store, and the Apple App Store.
March 11, 2022 2 min -
CybersecurityMajor Vulnerability “Dirty Pipe” found in Linux Kernel
Researcher Max Kellermann of CM4all has discovered a dangerous vulnerability in the Linux kernel which could potentially be exploited by hackers to gain full access a network. The vulnerability is being called "Dirty Pipe" (which is in reference to a similar 2016 Linux vulnerability "Dirty Cow") and works by leveraging a bug found in the Linux pipe command which can result in the elevation of system privileges once they find a way onto a machine. The pipe command is a tool used in Linux/Unix that chains together the input/output of common processes in order to harness their combined efforts....
March 11, 2022 4 min -
CybersecurityEmployee Information Was Leaked At Cookware Company Meyer
Meyer Corporation is a California-based company and a giant in the cookware industry. Meyer is the latest victim in a seemingly never-ending parade of hacking attacks. The full extent of the attack has not yet been disclosed because an investigation into the matter is ongoing. However, we do know at this point that the attackers made off with at least one database containing the personal information of thousands of Meyer employees.
March 10, 2022 2 min -
CybersecurityNew iOS 15.4 Update Addresses AirTag Stalking Issue
Apple AirTags are handy. They're an incredibly convenient way to help keep track of your stuff. If you lose something that has been tagged you can easily locate it using the "Find My" app, which will point the way to whatever it is that you have tagged.
March 9, 2022 2 min -
CybersecurityZoom Bug With Some Macs Leaves Microphone On After Meetings
If you're a Mac user and you also use Zoom be sure to check to see what version of Zoom you're running. Recently a bug in the Mac version of the software was found that could cause your computer's microphone to remain on even after leaving a meeting.
March 7, 2022 2 min
