Yelp Sucks

ESET Research has found LuckyMouse, Tick, Winnti Group, and Calypso, among others, are likely using the recent Microsoft Exchange vulnerabilities to compromise email servers all around the world On 2021-03-02, Microsoft released out-of-band patches for Microsoft Exchange Server 2013, 2016 and 2019. These security updates fixed a pre-authentication remote code execution (RCE) vulnerability chain (CVE-2021-26855,…

ESET researchers investigate what could possibly go wrong when you connect your bedroom to the internet of things As internet of things (IoT) devices continue to seep into our homes and offer an increasingly wide range of features, new concerns are beginning to arise about the security of the data processed by these devices. Although…

Two new tools will warn users about the risks of searching for and sharing content that exploits children, including the potential legal consequences of doing so Facebook has announced a pair of new tools to help combat child abuse and exploitation content on its platform and apps. While one tool aims to curb the potentially malicious…

A snapshot of some of the ways ESET makes an impact supporting the well-being of people, communities and the environment Technology companies have been developing software and hardware that has over time become an integral part of our lives. But besides providing people with the products they need, many companies are also an essential part…

As screen time has increased, so has the risk of cyberbullying. What you can do to help protect your children from online harassment? It’s been almost a year since the World Health Organization (WHO) declared the COVID-19 outbreak a pandemic, and people everywhere have been doing their best to adhere to regional and national stay-in-place…

Neither clinical research into the coronavirus nor any patient data were affected by the incident Oxford University has confirmed that one of its biology laboratories that is researching ways to combat the COVID-19 pandemic has fallen victim to a cyberattack. Details about the incident at the Division of Structural Biology (Strubi) were released by Forbes.…

While the trackers in LastPass’s Android app don’t collect any personal data, the news may not sit well with some privacy-minded users LastPass, a popular password manager, has come under some fire following a report that its Android app features seven built-in advertising and analytics trackers that gather data ranging from the user’s device type…

Some perpetrators of online crime and fraud don’t use advanced methods to profit at the expense of unsuspecting victims and to avoid getting caught While a lot of media coverage centers on how threat actors are becoming better at evading capture and generally deploy ever more sophisticated techniques, I wanted to tell a story where…

A primer on various threats looming over financial companies and the steps that these organizations can take to counter them Companies operating in the financial services industry aren’t by any means strangers to being targeted by various forms of financial crimes and fraud. However, over time, the playing field has changed and threat actors have…

At least one vulnerability is being exploited by multiple cyberespionage groups to attacks targets mainly in the US, per ESET telemetry Microsoft has rushed out emergency updates to address four zero-day flaws affecting Microsoft Exchange Server versions 2013, 2016, and 2019. Threat actors have been observed exploiting the vulnerabilities in the wild to access on-premises…