Business Email Compromise or BEC may seem to be a relatively new threat vector, but it has been active since the onset of the last decade. BEC is a specialized phishing scam in which an attacker impersonates or compromises a business email account and tries to manipulate an employee or vendor to transfer a largeRead More »Business Email Compromise Remediation

A new zero-day is under active exploitation in the wild targeting Android users. Though the bug has already received the fix, it is still a severe security issue for most of the Chinese phones with modified OS or phones will no OS / Security updates. This vulnerability, CVE-2020-11261, is a high-severity bug and has receivedRead More »New Android Zero-Day Actively Exploited for Targeted Cyber Attacks

[vcex_heading text="What is Microsoft Exchange"] Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft. It runs exclusively on Windows Server operating systems. The first version was called Exchange Server 4.0, to position it as the successor to the related Microsoft Mail 3.5. Exchange initially used the X.400 directory service but switchedRead More »How to Check if you’re Vulnerable to Microsoft Exchange Server zero-days

While Amazon Alexa skills facilitate users in their day-to-day activities, this personal assistant can go malicious as well. Researchers have found that vicious skills can bypass the Amazon Alexa skill vetting process. Researchers from the Ruhr-Bochum University have found how malicious skills can flood Amazon Alexa. Alexa skills are like third-party apps that run onRead More »Researchers Identified that Amazon Alexa Can Learn Malicious Skills