Cyber Bites

03/31 is Global backup day. Of course, you should be backing up your data every day. However, in honor of GBD, we want to remind everyone of three critical security considerations relating to backups.

And yesterday they have yet another, bringing the total to 11 zero-day vulnerabilities addressed since January 1st. The following operating systems are impacted. Update ASAP as one vulnerability is actively being exploited.

You are a speaker at an international conference, and your talk is a great success. Afterward, several attendees ask for a copy so they can share it with their teams. One of the attendees gives you a USB drive, and you copy the presentation

Google released information today on what they are doing to protect the Play Store. The sheer size of what they need to try and protect is staggering, approximately 250 BILLION installs globally.

Apple released critical updates on Wednesday for most of their devices. Among other things, these updates address two zero-day threats that have been weaponized in a mobile surveillance campaign called Operation

Philippines police rescued 1,534 Filipinos and 1,190 others from a variety of different countries from a forced labor compound in Las Pinas.

Apple released their data for protecting the App Store. Much like Google's, the sheer size of these app stores and the number of apps and transactions being processed are staggering.

Improper error message handling in some firewall versions could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device

Avoid using free charging stations in airports, hotels or shopping centers. Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices.

software security flaw that is unknown to the software vendor and for which there is no patch or fix available. Attackers can exploit zero-day vulnerabilities to gain unauthorized access to systems or data, and to carry out other malicious activities.

Multiple security researchers are reporting new malware, JokerSpy targeting Macs. The malware circumvents Apple's TCC protections which are in place to require explicit permission from a user before an app can access a Mac

Researchers at Elastic Security Labs have uncovered an updated version of the macOS malware called Rustbucket. The malware is present in a third-party PDF reader application being distributed by phishing emails and social networks