Microsoft NTLM Zero-Day to Remain Unpatched Until April
The second zero-day vulnerability found in Windows NTLM in the past two months paves the way for relay attacks and credential theft. Microsoft has no patch, but released updated NTLM cyberattack mitigation advice.
Millionaire Airbnb Phishing Ring Busted Up by Police
Scammers set up call centers in luxury rentals to run bank help-desk fraud, as well as large-scale phishing campaigns, across at least 10 European countries, according to law enforcement.
Attackers Can Use QR Codes to Bypass Browser Isolation
Researchers demonstrate a proof-of-concept cyberattack vector that gets around remote, on-premises, and local versions of browser isolation security technology to send malicious communications from an attacker-controlled server.
NCSC expects continued relationship with CISA under Trump
Apprehensions regarding a possible politically charged leadership at the Cybersecurity and Infrastructure Security Agency under the incoming Trump administration have been allayed by officials at the UK's National Cyber Security Centre amid criticism...