summary

Microsoft has released 74 security patches to address vulnerabilities affecting its Operating System (OS) and other related products.

Security Bulletin 5 Oct 2023 Smm

Over the past 3 days, SingCERT has observed an increase in defacements affecting websites hosted in Singapore as well as .sg websites hosted both locally ...

CSA has observed a growing number of ransomware attacks globally. Businesses are advised to remain vigilant, secure systems, encrypt and back up data.

Microsoft has uncovered a wide-scale malicious email campaign operated by NOBELIUM, the threat actor behind the attacks against SolarWinds. The phishing campaign has targeted around 3,000 individual accounts across more than 150 organisations linked to government agencies, think tanks, consultants, and non-governmental organisations.

On 3 March, SingCERT issued an alert on "Active Exploitation of Vulnerabilities in Microsoft Exchange Server". There have been more reports that many victims globally have been compromised through these critical vulnerabilities in the Microsoft Exchange Server software. One of the affected organisations is the European Banking Authority. [1]

This joint technical cybersecurity advisory is a collaborative effort by the cybersecurity authorities of Australia, New Zealand, Singapore, the UK and the US to provide information - such as the list of indicators of compromise (IOCs) and recommended mitigation measures - to enterprises affected by the Accellion File Transfer Appliance (FTA) exploitation in our respective countries.

Many organisations have adopted cloud-based IT services. With the proliferation of telecommuting, organisations may allow employees to use both personal and corporate devices to access cloud-based resources. Despite the use of security tools and cloud monitoring products, poor cyber hygiene and "Bring Your Own Device" (BYOD) policies may be exploited by threat actors to conduct attacks on organisations' cloud services. [1]

SingCERT's Security Bulletin summarises the list of vulnerabilities collated from the National Institute of Standards and Technology (NIST)'s National ...

summary

Microsoft has released 74 security patches to address vulnerabilities affecting its Operating System (OS) and other related products.

Security Bulletin 5 Oct 2023 Smm

Over the past 3 days, SingCERT has observed an increase in defacements affecting websites hosted in Singapore as well as .sg websites hosted both locally ...

CSA has observed a growing number of ransomware attacks globally. Businesses are advised to remain vigilant, secure systems, encrypt and back up data.

Microsoft has uncovered a wide-scale malicious email campaign operated by NOBELIUM, the threat actor behind the attacks against SolarWinds. The phishing campaign has targeted around 3,000 individual accounts across more than 150 organisations linked to government agencies, think tanks, consultants, and non-governmental organisations.

On 3 March, SingCERT issued an alert on "Active Exploitation of Vulnerabilities in Microsoft Exchange Server". There have been more reports that many victims globally have been compromised through these critical vulnerabilities in the Microsoft Exchange Server software. One of the affected organisations is the European Banking Authority. [1]

This joint technical cybersecurity advisory is a collaborative effort by the cybersecurity authorities of Australia, New Zealand, Singapore, the UK and the US to provide information - such as the list of indicators of compromise (IOCs) and recommended mitigation measures - to enterprises affected by the Accellion File Transfer Appliance (FTA) exploitation in our respective countries.

Many organisations have adopted cloud-based IT services. With the proliferation of telecommuting, organisations may allow employees to use both personal and corporate devices to access cloud-based resources. Despite the use of security tools and cloud monitoring products, poor cyber hygiene and "Bring Your Own Device" (BYOD) policies may be exploited by threat actors to conduct attacks on organisations' cloud services. [1]

SingCERT's Security Bulletin summarises the list of vulnerabilities collated from the National Institute of Standards and Technology (NIST)'s National ...