Mapua Information Security

In Azerbaijan, a major energy firm got hacked THREE times in 3 months using the exact same entry point. The hackers (FamousSparrow) didn't need a new trick; they just used the door the company forgot to lock.

Don't be a statistic:
Put smart home tech on a GUEST Wi-Fi.
Change every "default" password immediately.
Patching a virus Patching the entry point

Read more on: https://thehackernews.com/2026/05/azerbaijani-energy-firm-hit-by-repeated

Your lawn mower might be spying on you. Seriously. A massive flaw in Yarbo robot mowers revealed a "backdoor" that lets hackers drive the 200lb machines remotely and access your private camera feeds.

Read more on the issue: https://cybernews.com/security/yarbo-china-robot-mower-backdoor-security-flaw/

This is a reminder to stay cautious, as some emails may look legitimate but are actually suspicious attempts to steal your personal information. It is important to carefully verify all emails and treat them as potential phishing attempts.

For your safety, always check the sender's information, avoid clicking on suspicious links, report questionable emails immediately, and do not respond to unknown or untrusted senders under any circumstances.

Strongly encourage everyone to delete suspicious emails right away and remain vigilant when opening any messages. Always double-check and verify before taking any action.

⚠️ Security Awareness Alert
Hackers claim a data breach involving NVIDIA GeForce NOW, but NVIDIA says its core systems were not affected. The issue is limited to a third‑party partner (GFN.AM).

🔐 Even unverified claims can lead to phishing and account takeovers.
✅ Stay alert
✅ Verify messages
✅ Enable MFA
✅ Avoid password reuse

Learn more:
🔗 https://cybernews.com/security/hackers-claim-nvidia-geforce-now/

🚨 NEW ANDROID THREAT: The Fake KYC Trap 🚨

Hackers are using fake "Know Your Customer" (KYC) pop-ups to hijack Android phones and drain bank accounts.

Here is how to stay safe:
1. The Hook 🎣You download an app (often a "free" streaming or utility app) that asks for Accessibility Permissions. STOP. This gives the hacker total control.
2. The Fake-Out 🏦A professional-looking screen pops up claiming you need to "verify your identity" or "update KYC" to keep your banking access.
3. The Theft 💸Anything you type is recorded. They steal your PINs, passwords, and 2FA codes in real-time.

🛡️ PROTECT YOURSELF:
Never grant "Accessibility" rights to apps you don't 100% trust.
Avoid downloading .APK files from random websites or texts.
Verify KYC alerts by calling your bank directly or using their official app.

Don't let a "security update" be the reason you lose your savings. Stay alert!

🛡️ Security Alert: Instructure/Canvas Incident

Instructure has disclosed a recent cybersecurity breach.

Protect your student/teacher data with these 3 quick tips:
Don’t Click: Watch for fake "Security Alert" phishing emails.
Reset & Unique: Update your password if it’s reused on other sites.
MFA is Key: Double-check that your Multi-Factor Authentication is ON.

Pro-Tip: Always log in through the official school site, never via an emailed link! 🚫🖱️

🚨 THE WARNING
U.S. Treasury and Fed officials have issued a high-level warning to the banking sector.

🚨 Breach Update: Stay alert for increased cyber attacks and identity scams.
Quick Security Checklist:
🔹 Don't click unknown links.
🔹 Use unique passwords + MFA.
🔹 Be wary of unsolicited "official" calls.
Contact helpdesk if you don’t know what to do.

🛡️

🚨 Cybersecurity Alert 🚨
Security teams are monitoring a large‑scale password‑spraying campaign targeting Microsoft 365 environments, impacting 300+ organizations.

Attackers attempt to gain access by testing common or reused passwords across multiple accounts, often bypassing lockout controls.

🔐 Key Reminders:
✅ Enable Multi‑Factor Authentication (MFA)
✅ Disable legacy authentication
✅ Use strong, unique passwords
✅ Monitor sign‑in activity for unusual behavior

☁️ Cloud identities remain high‑value targets.

Strong identity controls and visibility are critical to reducing risk.
Stay alert. Stay protected.

"Think Before You Plug In.

Why? Because one infected device can leak your data or infect your whole system.

To stay safe:
❌ Don’t use random or found USB drives.
❌ Don’t connect devices that aren’t approved.
✅ Do stick to authorized storage devices.
✅ Do ask IT if you’re unsure.

Small ports. Big risks."

A new PwC report shows a major shift in the cyber threat landscape:

Attackers aren’t breaking in anymore—they’re logging in.
AI‑powered tools are making it easier for cybercriminals to impersonate users, steal credentials, and slip past traditional defenses. With expanding cloud and SaaS use, one compromised identity can unlock an entire environment. [akshatonse...urity.tech]

🚨 What’s driving the surge?
Cybercriminals are exploiting stolen credentials, session tokens, and federated access to bypass security. [akshatonse...urity.tech]
AI is enabling deepfakes, realistic phishing, and automated multi‑stage attacks targeting both human and machine identities. [akshatonse...urity.tech]

Identity is now the primary attack vector, with adversaries choosing to “log in, not break in.” [akshatonse...urity.tech]

🛡️ How You Can Stay Safe
✔ Use strong, unique passwords
✔ Enable Multi‑Factor Authentication (MFA)
✔ Double‑check unexpected requests or login prompts
✔ Report suspicious activity immediately
✔ Protect your accounts like they protect your digital life

⚠️ Final Reminder
Cybercriminals are using AI to get smarter—we must stay one step ahead.

Your identity is your first line of defense. Guard it well.