SecureTeam

@BHinfoSecurity Hey people 👋🏻 We’re a team of cyber security researchers and penetration testers over in the UK. We often share news and articles that might be of interest to the community. Check us out: secureteam.co.uk

INFOSEC CONTENT CREATORS! Do you have a YouTube channel, Twitch stream, blog, magazine, or anything else where you share your knowledge and insights on cybersecurity, please drop the link in the comments. We want to help you find more people to help. We're all in this together!

In recent months, a notable wave of cyber-attacks has swept across Europe, orchestrated by the cybercriminal group known as Hive0145. #cybercrime #malware #phishing secureteam.co.uk/articles/strel…

Palo Alto Networks has issued an urgent advisory to its customers, highlighting a potential remote code execution (RCE) vulnerability within the PAN-OS management interface. #paloalto #patching #vulnerabilitymanagement secureteam.co.uk/news/palo-alto…

The CVE-2024-38812 vulnerability is a critical flaw that exposes VMware vCenter Servers to serious security risks, including remote code execution and full system compromise. #patching #vmware #vulnerabilitymanagement secureteam.co.uk/2024/10/23/554…

The recently disclosed vulnerability, CVE-2024-38094, in Microsoft SharePoint presents a significant threat to organisations by allowing attackers to execute remote code on compromised servers. #microsoft #patching #sharepoint #vulnerabilitymanagement secureteam.co.uk/2024/10/23/cri…

Nation-state cyberattacks on critical infrastructure are becoming increasingly sophisticated and destructive, as highlighted by recent reports. #cybersecuritynews #nationstate secureteam.co.uk/2024/10/23/nat…

Apple has recently addressed a significant vulnerability in its VoiceOver feature that raised privacy concerns for iPhone and iPad users. #Apple #cybersecuritynews #vulnerabilitymanagement secureteam.co.uk/2024/10/07/app…

A newly discovered rootkit known as "Snapekit" has emerged, posing a significant risk to users of Arch Linux systems, particularly those running the 6.10.2-arch1-1 kernel. #Linux #malware #rootkit secureteam.co.uk/2024/10/07/lat…

In September 2024, NVIDIA disclosed a critical security flaw, CVE-2024-0132, affecting its NVIDIA Container Toolkit. #cybersecuritynews secureteam.co.uk/2024/10/01/nvi…

Recently, IASME has introduced their latest Willow question set for the NCSC Cyber Essentials Self-Assessment Certification, which will replace the current (Montpelier) questions on the 28th April, 2025. #cyberessentials #iasme secureteam.co.uk/2024/10/02/cyb…

Meta, the parent company of Facebook and Instagram, has been hit with a significant €91 million (£79 million) fine by Ireland’s Data Protection Commission (DPC) after an investigation revealed serious lapses in the company’s handling of user data. secureteam.co.uk/2024/09/30/met…

A high severity vulnerability has been found in RARLAB’s popular Windows file archiver WinRAR #cybercrime #cybersecuritynews #patching #vulnerabilitymanagement secureteam.co.uk/2023/08/23/win…

Multiple stack-based buffer overflows have been identified in Ivanti Avalanche, tracked as a single vulnerability with a critical severity rating and CVSS base score of 9.8/10 #cybercrime #cybersecuritynews #patching #vulnerabilitymanagement secureteam.co.uk/2023/08/22/sta…

Highly targeted phishing attacks have been carried out by the threat actor Midnight Blizzard, previously known as NOBELIUM, via Microsoft Teams #credentialstuffing #cybersecuritynews #microsoft #phishing secureteam.co.uk/2023/08/22/mic…

LinkedIn accounts have been targeted by attackers in hacking events that have led to users being locked out of their own accounts by LinkedIn, and unable to recover them through LinkedIn support #credentialstuffing #cybercrime #cybersecuritynews secureteam.co.uk/2023/08/17/lin…

A five-year-old vulnerability is currently being exploited in Zyxel P660HN-T1A routers to introduce a Gafgyt malware variant onto target networks #Botnet #cybersecuritynews #malware #vulnerabilitymanagement secureteam.co.uk/2023/08/16/mal…

A Defense-In-Depth Office update has been released by Microsoft as a part of the Patch Tuesday updates made available this week to fix an actively exploited remote code execution flaw #cybersecuritynews #microsoft #patching #vulnerabilitymanagement secureteam.co.uk/2023/08/09/act…

A critical severity flaw in PaperCut NG and PaperCut MF print management applications that can allow unauthenticated attackers to perform RCE on vulnerable Windows servers #cybercrime #cybersecuritynews #patching #vulnerabilitymanagement secureteam.co.uk/2023/08/09/pap…

A zero-day cross-site scripting (XSS) flaw that has been exploited in the wild has now been patched for Zimbra Collaboration Suite in version 8.8.15 patch 41 #cybercrime #cybersecuritynews #patching #vulnerabilitymanagement secureteam.co.uk/2023/08/02/zim…

Canon Inkjet printers have been found to retain sensitive Wi-Fi information after the usual wipe that is performed in the initialisation process #cybercrime #cybersecuritynews #securitybreach #wireless secureteam.co.uk/2023/08/01/can…