Technovage Solution News

Microsoft has disclosed a high-severity Remote Code Execution flaw (CVE-2026-70329, CVSS 8.8) in Outlook caused by an integer overflow weakness. An attacker can exploit this by tricking a user into opening a malicious file attachment, allowing arbitrary code execution and potential control of the system. Although there is no evidence of active exploitation, organizations are urged to apply the August 2026 Patch Tuesday updates immediately. Read more: https://cybersecuritynews.com/microsoft-outlook-rce-vulnerability-2/ #Technovagesolution #cybersecurity #vulnerability

𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐚𝐥𝐞𝐫𝐭: 𝐕𝐢𝐬𝐡𝐢𝐧𝐠 𝐀𝐭𝐭𝐚𝐜𝐤𝐬 𝐓𝐚𝐫𝐠𝐞𝐭 𝐏𝐞𝐫𝐬𝐨𝐧𝐚𝐥 𝐏𝐡𝐨𝐧𝐞𝐬 𝐭𝐨 𝐒𝐭𝐞𝐚𝐥 𝐒𝐚𝐚𝐒 𝐃𝐚𝐭𝐚 The data extortion group UNC6671 (or Cordial Spider) is targeting enterprise employees by posing as IT help desk staff over voice phishing (vishing) calls, frequently contacting victims on their personal mobile devices. Callers direct employees to spoofed login portals (mimicking Okta or Microsoft Entra ID) to steal credentials and real-time MFA tokens via adversary-in-the-middle infrastructure. Once inside, the attackers abuse single sign-on (SSO) trust, register their own MFA devices for persistent access, and use automated scripts to rapidly exfiltrate data from SaaS environments like Microsoft 365. Security experts advise organizations to deploy phishing-resistant MFA, restrict login access to corporate-managed devices, and monitor identity provider logs for suspicious MFA registrations. Read more: https://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.html #Technovagesolution #cybersecurity #VishingAttacks

⚠️ SECURITY ALERT: Unauthorized AI Token Reseller Scheme A gray-market service named Poison Claude is reselling access to Anthropic AI models at an 85–95% discount. The operation generates cheap API tokens by abusing free trial credits and sign-up bonuses across fraudulently created AWS and Google Cloud accounts. To maintain anonymity and bypass regional restrictions, the service operates via cryptocurrency payments and proxy routing. Organizations should be aware that utilizing such unauthorized third-party resellers exposes API traffic to potential intercept, violates provider terms of service, and supports cloud credential fraud. AI providers are escalating enforcement through mandatory identity checks (IDs and selfie verification) and IP/fingerprint blocking. Read more: https://cybersecuritynews.com/poison-claude-selling-cheap-ai-tokens/ #Technovagesolution #cybersecurity #threat

🚨 SECURITY ALERT: AI Agents Drivings Autonomous Cyberattacks Security researchers have uncovered a cyberattack campaign where a hacker commanded DeepSeek via the Hermes Agent framework to execute autonomous attacks against over 460 organizations. Triggered by a single Telegram instruction, the AI independently scanned for vulnerable systems, downloaded exploits, and adapted tactics without human intervention, targeting popular tools like Langflow, n8n, Marimo, and Citrix NetScaler. While many automated attempts failed, this marks a major shift toward hands-off, AI-driven exploitation. Organizations are strongly advised to patch exposed workflow tools immediately and restrict public internet access to internal interfaces. Read more: https://thehackernews.com/2026/07/chinese-hacker-commands-deepseek-via.html #TechnovageSolution #cybersecurity #cyberattack

Fake Microsoft Teams Updates Give Hackers Control of Your PC! Operation BlueDash is a phishing campaign that uses fake Microsoft Teams update prompts to trick users into installing remote access software. Clicking the email link leads to a spoofed Microsoft Store page that runs a malicious installer. In the background, a hidden PowerShell script installs two legitimate remote management tools (Level RMM and ScreenConnect), granting attackers persistent, redundant control over the PC to inspect local accounts and firewall settings. To stay safe, avoid updating software via email links, restrict unapproved remote tools, and flag suspicious background PowerShell activity. Read more: https://cybersecuritynews.com/fake-teams-update-gain-pc-control/ #TechnovageSolution #Cybersecurity #Phishing

តើ Hacker លួចចូលប្រព័ន្ធក្រុមហ៊ុនធំៗដោយរបៀបណា? 🕵️‍♂️💻 ⚠️ ការពិតដែលត្រូវទទួលស្គាល់៖ ត្រឹមមានអាជ្ញាប័ណ្ណ ឬបំពេញតាមស្តង់ដារ (Compliance) គឺមិនគ្រប់គ្រាន់ទៀតទេ! ព្រោះ Checklist មិនអាចបង្ហាញអ្នកពី «ផ្លូវវាយប្រហារ» ពិតប្រាកដរបស់ Hacker ឡើយ 💡 ដំណោះស្រាយក្នុងឆ្នាំ ២០២៦: ត្រូវដើរមុន Hacker មួយជំហាន។ ស្វែងរក និងបិទផ្លូវវាយប្រហារ (Attack Path) ក្នុងប្រព័ន្ធរបស់អ្នក មុនពេលពួកគេរកវាឃើញ! #Technovagesolution #CyberAttack2026 #CyberSecurityCambodia #TechAwareness

🚨 Cyber Threat Alert: "Khmer Shadow" Targeting Cambodians A highly sophisticated cyber espionage group known as Khmer Shadow is actively targeting Cambodian organizations, specifically aiming at government entities, defense sectors, and military intelligence. They use deceptive tactics to steal sensitive data and gain complete control over computers. How the Attack Works 1. The Deceptive Email 2. The Hidden Trap 3. The Silent Spy How to Protect Yourself and Your Office ✔️ Verify the Sender ✔️ Beware of "Meeting Invitations" ✔️ Look out for sharingfile[.]cloud ✔️ Check Scheduled Tasks The absolute best line of defense is your own caution. If a file asks you to "extract," "run," or "enable permissions" to view a meeting invite, close it immediately and report it to your IT department. Read more: https://www.acronis.com/en/tru/posts/behind-khmer-shadow-targeted-espionage-against-cambodian-government-entities #Technovagesolution #cybersecurity #cyberthreat #khmershadow

ClickFix Campaign Uses Fake Google Verification Page to Infect Mexican Bank Customers! The REF6045 cyberattack campaign targets Mexican financial services using a "ClickFix" tactic, where fake Google verification pages trick users into copying and pasting a malicious command into their Windows terminal. Once executed under the guise of a fake Windows Update, it installs the SCMBANKER malware. A live human operator then monitors the infected machine in real-time, waiting for the user to log into banking portals to hijack clipboards, redirect browsers to phishing sites, or lock screens with fake tech-support scams. Because the code was likely built using AI language models, the barrier to entry was low—meaning user awareness (never running web commands locally) remains the best defense. Read more: https://cybersecuritynews.com/clickfix-campaign-uses-fake-google-verification-page/ #technovagesolution #cybersecurity #cyberattack

WE ARE #HIRING! Ready to upgrade your career with us? ✨ Open Positions: 👉 IT Auditor x1 👉 IT Solutions Sales Executive x1 ⏳ Working conditions: Monday - Friday | 8:00 AM - 6:00 PM (1h lunch break included) Weekends OFF! 🥳 Enjoy your Saturdays & Sundays to the fullest! 🎁 Why you’ll love working with us: ✔️ Competitive Basic Salary ✔️ 13th-month Salary ✔️ Seniority Pay ✔️ Annual Leave, Sick Leave ✔️ Public Holidays (Follow Labor Law) ✔️ Health Insurance ✔️ NSSF Coverage ✔️ Professional Training Programs to grow your skills ✔️Annual Company Trips ✔️Staff Parties 📩 How to Apply: Interested applicants, please submit your resume and cover letter via: Email: hr@technovage.io Telegram: 0968417795 IT Auditor: https://technovage.io/careers/apply?slug=information-technology-auditor IT Solutions Sales Executive: https://technovage.io/careers/apply?slug=it-solutions-sales-executives #Technovagesolution #cybersecurity #hiring #IT

Security Awareness Alert: Fake Document Reader App Spreading Malware Security researchers have detected a fake file manager and document reader app in the Google Play Store that has over 100,000 downloads. While it appears legitimate at first, the app acts as a dropper to quietly install the Anatsa (TeaBot) banking trojan via a fake update. Once active, the malware uses accessibility permissions to log keystrokes, steal SMS two-factor codes, and display fake login screens over real banking and crypto apps to steal credentials. How to stay safe: - Check your devices for any unauthorized file or document managers. - Never grant Accessibility or SMS permissions to basic utility apps like readers or calculators. - Ensure Google Play Protect is enabled and running regular scans. Read more: https://cybersecuritynews.com/fake-document-reader-in-the-google-play-store/ #Technovagesolution #cybersecurity #threats