Español
English
Deutsch
📨During the month of August, we continued bringing you more informative content, events, analyses, and much more. So, here we go with the highlights from the past thirty days, brought to you by your t rusted CSIRT.
📰News + Analysis
➡️We are reporting on a new smishing campaign impersonating the Spanish Social Security Treasury (TGSS) through fraudulent SMS messages. These messages contain links that redirect users to fake websites designed to obtain personal and banking information. We recommend not clicking on suspicious links or providing personal or banking information, and always accessing Social Security services through official channels.
🌐Official website | 
LinkedIn | 𝕏 (X)
🚨Alert
➡️We are reporting on security vulnerabilities identified in various Microsoft products and services, some of which could allow remote code execution, privilege escalation, or the exposure of sensitive information. We also provide information on the affected products and the recommended security updates to mitigate the associated risks.
🌐Official website | 
LinkedIn | 𝕏 (X)
➡️We report on the release of a security update for Google Chrome that addresses multiple vulnerabilities, including 10 rated as critical and 61 rated as high severity.
🌐Official website | 
LinkedIn | 𝕏 (X)
🎓Learning Bites
➡️Discover and expand your knowledge about computer viruses, how they can affect our devices, and the measures we can take to prevent infections and protect our information from potential cyberattacks.
🌐Official website | 
LinkedIn | 𝕏 (X)
👥Social Media
➡️We highlight the importance of using strong passwords to protect our accounts from unauthorized access. We recommend creating long, unique, and hard-to-guess passwords, avoiding password reuse, enabling two-factor authentication (2FA), and using a password manager as key measures to strengthen your security.
➡️We would like to remind you of the importance of taking extra precautions when scanning QR codes, as they can be used in quishing attacks to redirect users to fraudulent websites designed to steal information or credentials. We recommend always checking the web address before entering any data, being cautious of unexpected requests, and accessing corporate services through official and trusted channels as key measures to strengthen security.
➡️We would like to remind you of the importance of not sharing sensitive or confidential information with artificial intelligence tools.
➡️We shared La Provincia’s coverage of CSIRT-CAN’s progress on our social media channels and would like to thank La Provincia and Qualoom Expertise Technology for their support and for helping to raise awareness of this project.
The CSIRT-CAN team hopers you have enjoyed this month’s updates.
Best regards, The CSIRT-CAN Team.