We have observed a new wave of scam emails (known as Business Email Compromise or BEC) in NUS, some of which unfortunately involved individuals falling prey and leading to personal financial loss. Unlike phishing emails, these scams do not require you to click on any link or provide any credentials. Instead, they usually start with an innocuous message like “Are you available” and continue as a plea for help should one reply. Eventually, the scammer will attempt to convince and trick the victim into purchasing iTunes gift cards on their behalf. To add credibility, the emails are seemingly sent from someone of authority like the Head of Department using a spoofed email address.

Drupal recently fixed a highly critical vulnerability (CVE-2019-6340), which could be exploited to perform unauthenticated remote code execution (RCE). This allow the attackers to take over a Drupal site, accessing, modifying or deleting data in it. Affected System 1….

As the University pushes ahead with our work-from-home and home-based-learning initiatives amid the COVID-19 situation, there has been an increase in the use of Zoom to facilitate online communications over the past weeks. Unfortunately, the use of this platform has unraveled security vulnerabilities and privacy issues, which have no fixes at this moment.