Northeastern OIS

Northeastern University - Office of Information Security

[Northeastern OIS @Securenu]

ActiveX... "Now that's a name I have heard in a long time." New #ActiveX Zero-Day through IE and Office docs. #zeroday #vulnerability

[briankrebs @briankrebs]

Microsoft warns attackers are exploiting a zero-day flaw in Windows 10 and many Server versions that can be exploited through Internet Explorer or Office docs. No patch yet (maybe next Tuesday), but nixing ActiveX across the board mitigates this attack. https://t.co/1B2XC988ED

[Northeastern OIS @Securenu]

New York State vaccine pass shortcomings offer lessons for other coronavirus app developers | The Daily Swig
https://t.co/kvFsOn00nF via @PortSwigger #VaccinePassport

[Northeastern OIS @Securenu]

Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports: https://t.co/6r8dVwNkXK via @threatpost #VaccinePassport

[Northeastern OIS @Securenu]

Your boss (or anyone else) isn’t emailing you about a gift card https://t.co/iHkyNF9P6G #scam #phishing

[Northeastern OIS @Securenu]

Malware found preinstalled in classic push-button phones sold in Russia https://t.co/kkwX3uSzOg

[Northeastern University @Northeastern]

Walking into a new semester at #Northeastern.

[Northeastern OIS @Securenu]

ProtonMail forced to collect an activist’s IP address in police investigation https://t.co/voSI1bVer2

[Northeastern OIS @Securenu]

Jenkins project succumbs to ‘mass exploitation’ of critical Atlassian Confluence vulnerability | The Daily Swig
https://t.co/wwTCLZwpMT

[Northeastern OIS @Securenu]

Miscreants fling booby-trapped Office files at victims, no patch yet, says Microsoft https://t.co/yeWFBCy75d via @theregister

[Northeastern OIS @Securenu]

When the bits hit the fan: What to do when ransomware strikes https://t.co/dgX4fSsaf0 via @theregister

[BleepingComputer @BleepinComputer]

Ransomware gang threatens to leak data if victim contacts FBI, police - @Ax_Sharma
https://t.co/YJ7HKxDdoB

[briankrebs @briankrebs]

1/3: A reliable source shared visibility into a credential testing botnet that's hacking into 50-100k inboxes daily. For spam? No this group only cares about gift card, customer loyalty/points data that can be resold for cash. They've been at it 3 yrs. https://t.co/2QXErMs3ha

[Northeastern OIS @Securenu]

T-Mobile CEO apologizes after hacker stole millions of users' personal information https://t.co/7WmCCnA5gp via @nbcnews

[Northeastern OIS @Securenu]

BPL says its restored public WiFi, but other online services remain off as it struggles to recover from hacker attack https://t.co/cXGnT6W5dQ via @universalhub

[Northeastern OIS @Securenu]

Researchers Who Built Similar System Explain Why Apple's CSAM Scanning System Is Dangerous https://t.co/OZL13gxNMH via @Techdirt @Apple #privacy

[Adam Gaffin @universalhub]

BPL says hackers took out some of its online systems https://t.co/yAUnVEbm8F

[Sergiu Gatlan @serghei]

Caused by the global semiconductor shortage? @westerndigital

"Chinese news outlet Expreview reportedly discovered that Western Digital may have swapped the flash on its Blue SN550 SSD, which negatively affects its performance when the SLC (single-level cell) cache is depleted."

[BleepingComputer @BleepinComputer]

Synology: Multiple products impacted by OpenSSL RCE vulnerability - @serghei
https://t.co/F52T7EjbjN

[briankrebs @briankrebs]

Andrew Schober was robbed of ~$1M in bitcoin in 2018. Investigators he hired found 2 minors in the UK who allegedly authored the clipboard stealing malware that siphoned his bitcoin. Now he's suing the kids' parents after they refused to return the $ https://t.co/icjMgiTWgd

[NU Police Department @northeasternpd]

Don’t be a victim of #rentalphishing. It’s a #scam! Also…know that you have a great resource in our friends at @NUOffCampus.