Microsoft Issues Emergency Out-Of-Band Update to Fix "Crazy Bad" Vulnerability
In an emergency out-of-band update released late last night, Microsoft fixed a vulnerability in the Microsoft Malware Protection Engine discovered by two Google security experts over the weekend, and which the two described as "crazy bad" and "the worst Windows remote code exec in recent memory." [...]
https://www.bleepingcomputer.com/news/security/microsoft-issues-emergency-out-of-band-update-to-fix-crazy-bad-vulnerability/
In an emergency out-of-band update released late last night, Microsoft fixed a vulnerability in the Microsoft Malware Protection Engine discovered by two Google security experts over the weekend, and which the two described as "crazy bad" and "the worst Windows remote code exec in recent memory." [...]
https://www.bleepingcomputer.com/news/security/microsoft-issues-emergency-out-of-band-update-to-fix-crazy-bad-vulnerability/
BleepingComputer
Microsoft Issues Emergency Out-Of-Band Update to Fix "Crazy Bad" Vulnerability
In an emergency out-of-band update released late last night, Microsoft fixed a vulnerability in the Microsoft Malware Protection Engine discovered by two Google security experts over the weekend, and which the two described as "crazy bad" and "the worst Windows…
NemeS1S RaaS Is PadCrypt Ransomware's Affiliate System
A portal hidden on the Dark Web is responsible for the small deluge of PadCrypt ransomware versions that have been spotted almost on a monthly basis in the past year. [...]
https://www.bleepingcomputer.com/news/security/nemes1s-raas-is-padcrypt-ransomwares-affiliate-system/
A portal hidden on the Dark Web is responsible for the small deluge of PadCrypt ransomware versions that have been spotted almost on a monthly basis in the past year. [...]
https://www.bleepingcomputer.com/news/security/nemes1s-raas-is-padcrypt-ransomwares-affiliate-system/
BleepingComputer
NemeS1S RaaS Is PadCrypt Ransomware's Affiliate System
A portal hidden on the Dark Web is responsible for the small deluge of PadCrypt ransomware versions that have been spotted almost on a monthly basis in the past year.
FCC Says DDoS Attack Brought Down Commenting System, Not Angry John Oliver Fans
In a statement released last night, the US Federal Communications Commission (FCC) wanted to make sure everyone understood that it was a DDoS attack that prevented users from commenting on the proposal to knock down Net Neutrality, and not because of angry users flooding the site to complain about the FCC's decision. [...]
https://www.bleepingcomputer.com/news/technology/fcc-says-ddos-attack-brought-down-commenting-system-not-angry-john-oliver-fans/
In a statement released last night, the US Federal Communications Commission (FCC) wanted to make sure everyone understood that it was a DDoS attack that prevented users from commenting on the proposal to knock down Net Neutrality, and not because of angry users flooding the site to complain about the FCC's decision. [...]
https://www.bleepingcomputer.com/news/technology/fcc-says-ddos-attack-brought-down-commenting-system-not-angry-john-oliver-fans/
BleepingComputer
FCC Says DDoS Attack Brought Down Commenting System, Not Angry John Oliver Fans
In a statement released last night, the US Federal Communications Commission (FCC) wanted to make sure everyone understood that it was a DDoS attack that prevented users from commenting on the proposal to knock down Net Neutrality, and not because of angry…
Adobe Patches Seven Security Flaws Affecting Flash Player
Today, Adobe has released two security advisories affecting two of its products, Adobe Flash Player and Adobe Experience Manager Forms, the latter being an application part of the Adobe Marketing Cloud service for, a collection of integrated online marketing and Web analytics products. [...]
https://www.bleepingcomputer.com/news/security/adobe-patches-seven-security-flaws-affecting-flash-player/
Today, Adobe has released two security advisories affecting two of its products, Adobe Flash Player and Adobe Experience Manager Forms, the latter being an application part of the Adobe Marketing Cloud service for, a collection of integrated online marketing and Web analytics products. [...]
https://www.bleepingcomputer.com/news/security/adobe-patches-seven-security-flaws-affecting-flash-player/
BleepingComputer
Adobe Patches Seven Security Flaws Affecting Flash Player
Today, Adobe has released two security advisories affecting two of its products, Adobe Flash Player and Adobe Experience Manager Forms, the latter being an application part of the Adobe Marketing Cloud service for, a collection of integrated online marketing…
Mozilla Is Not Ditching Thunderbird After All
After exploring plans of ditching the Thunderbird project in the lap of another organization, the Mozilla Foundation has decided to keep its infamous email client under its wing for a little longer, albeit in a new role, and not as a core project. [...]
https://www.bleepingcomputer.com/news/software/mozilla-is-not-ditching-thunderbird-after-all/
After exploring plans of ditching the Thunderbird project in the lap of another organization, the Mozilla Foundation has decided to keep its infamous email client under its wing for a little longer, albeit in a new role, and not as a core project. [...]
https://www.bleepingcomputer.com/news/software/mozilla-is-not-ditching-thunderbird-after-all/
BleepingComputer
Mozilla Is Not Ditching Thunderbird After All
After exploring plans of ditching the Thunderbird project in the lap of another organization, the Mozilla Foundation has decided to keep its infamous email client under its wing for a little longer, albeit in a new role, and not as a core project.
Microsoft Security Updates for May 2017 Include Fixes for Three Zero-Days
Earlier today, Microsoft officially released its monthly updates, something that sysadmins all over the world call Patch Tuesday. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-security-updates-for-may-2017-include-fixes-for-three-zero-days/
Earlier today, Microsoft officially released its monthly updates, something that sysadmins all over the world call Patch Tuesday. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-security-updates-for-may-2017-include-fixes-for-three-zero-days/
BleepingComputer
Microsoft Security Updates for May 2017 Include Fixes for Three Zero-Days
Earlier today, Microsoft officially released its monthly updates, something that sysadmins all over the world call Patch Tuesday.
RSAUtil Ransomware (.helppme@india.com) Installed Via Hacked Remote Desktop Services
Today we are going to take a quick look at a new ransomware called RSAUtil that was discovered by Emsisoft malware researcher xXToffeeXx. RSAUtil is distributed by the developer hacking into remote desktop services and uploading a package of files. [...]
https://www.bleepingcomputer.com/news/security/rsautil-ransomware-helppme-india-com-installed-via-hacked-remote-desktop-services/
Today we are going to take a quick look at a new ransomware called RSAUtil that was discovered by Emsisoft malware researcher xXToffeeXx. RSAUtil is distributed by the developer hacking into remote desktop services and uploading a package of files. [...]
https://www.bleepingcomputer.com/news/security/rsautil-ransomware-helppme-india-com-installed-via-hacked-remote-desktop-services/
BleepingComputer
RSAUtil Ransomware (.helppme@india.com) Installed Via Hacked Remote Desktop Services
Today we are going to take a quick look at a new ransomware called RSAUtil that was discovered by Emsisoft malware researcher xXToffeeXx. RSAUtil is distributed by the developer hacking into remote desktop services and uploading a package of files.
3 of 4 Zero-Days Microsoft Patched Yesterday Were Used by Russian Cyberspies
Microsoft's May 2017 Patch Tuesday, released yesterday, included fixes for three zero-days, which according to ESET and FireEye, were used by cyber-espionage groups operating out of Russia. [...]
https://www.bleepingcomputer.com/news/security/3-of-4-zero-days-microsoft-patched-yesterday-were-used-by-russian-cyberspies/
Microsoft's May 2017 Patch Tuesday, released yesterday, included fixes for three zero-days, which according to ESET and FireEye, were used by cyber-espionage groups operating out of Russia. [...]
https://www.bleepingcomputer.com/news/security/3-of-4-zero-days-microsoft-patched-yesterday-were-used-by-russian-cyberspies/
BleepingComputer
3 of 4 Zero-Days Microsoft Patched Yesterday Were Used by Russian Cyberspies
Microsoft's May 2017 Patch Tuesday, released yesterday, included fixes for three zero-days, which according to ESET and FireEye, were used by cyber-espionage groups operating out of Russia.
Kaspersky Denies Report It Might Help Russian Government Spy on US Citizens
In an article published yesterday, ABC News cited congressional sources who claimed the Senate Intelligence Committee had started an investigation into Kaspersky Lab's relationship with the Russian government. [...]
https://www.bleepingcomputer.com/news/security/kaspersky-denies-report-it-might-help-russian-government-spy-on-us-citizens/
In an article published yesterday, ABC News cited congressional sources who claimed the Senate Intelligence Committee had started an investigation into Kaspersky Lab's relationship with the Russian government. [...]
https://www.bleepingcomputer.com/news/security/kaspersky-denies-report-it-might-help-russian-government-spy-on-us-citizens/
BleepingComputer
Kaspersky Denies Report It Might Help Russian Government Spy on US Citizens
In an article published yesterday, ABC News cited congressional sources who claimed the Senate Intelligence Committee had started an investigation into Kaspersky Lab's relationship with the Russian government.
Upcoming NIST Guideline Advocates Simpler Rules for Online Passwords
The US National Institute of Standards and Technology (NIST) is preparing to issue a new Digital Identity Guideline, which unlike its previous editions, will take a softer stance on the complexity of online passwords. [...]
https://www.bleepingcomputer.com/news/security/upcoming-nist-guideline-advocates-simpler-rules-for-online-passwords/
The US National Institute of Standards and Technology (NIST) is preparing to issue a new Digital Identity Guideline, which unlike its previous editions, will take a softer stance on the complexity of online passwords. [...]
https://www.bleepingcomputer.com/news/security/upcoming-nist-guideline-advocates-simpler-rules-for-online-passwords/
BleepingComputer
Upcoming NIST Guideline Advocates Simpler Rules for Online Passwords
The US National Institute of Standards and Technology (NIST) is preparing to issue a new Digital Identity Guideline, which unlike its previous editions, will take a softer stance on the complexity of online passwords.
Microsoft Has Effectively Banned Third-Party Browsers From the Windows Store
A one-liner in the Windows Store policy is the reason why we'll never have the "original" Chrome, Firefox, Opera, or other browsers available through the official Windows Store. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-has-effectively-banned-third-party-browsers-from-the-windows-store/
A one-liner in the Windows Store policy is the reason why we'll never have the "original" Chrome, Firefox, Opera, or other browsers available through the official Windows Store. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-has-effectively-banned-third-party-browsers-from-the-windows-store/
BleepingComputer
Microsoft Has Effectively Banned Third-Party Browsers From the Windows Store
A one-liner in the Windows Store policy is the reason why we'll never have the "original" Chrome, Firefox, Opera, or other browsers available through the official Windows Store.
Microsoft Bans SHA-1 Certificates in Edge and Internet Explorer
Starting yesterday, via updates delivered in the May 2017 Patch Tuesday, Microsoft browsers such as Edge and Internet Explorer, have begun flagging websites as insecure if they use SSL/TLS certificates signed with the SHA-1 algorithm. [...]
https://www.bleepingcomputer.com/news/security/microsoft-bans-sha-1-certificates-in-edge-and-internet-explorer/
Starting yesterday, via updates delivered in the May 2017 Patch Tuesday, Microsoft browsers such as Edge and Internet Explorer, have begun flagging websites as insecure if they use SSL/TLS certificates signed with the SHA-1 algorithm. [...]
https://www.bleepingcomputer.com/news/security/microsoft-bans-sha-1-certificates-in-edge-and-internet-explorer/
BleepingComputer
Microsoft Bans SHA-1 Certificates in Edge and Internet Explorer
Starting yesterday, via updates delivered in the May 2017 Patch Tuesday, Microsoft browsers such as Edge and Internet Explorer, have begun flagging websites as insecure if they use SSL/TLS certificates signed with the SHA-1 algorithm.
Opera 45 Is Here With New UI, WhatsApp, Telegram, and Facebook Messenger Support
Opera Software released today Opera v45, nicknamed "Reborn," a brand new version of the Opera browser that comes not only with a new graphical user interface, but also adds a new feature not seen in any other browser. [...]
https://www.bleepingcomputer.com/news/software/opera-45-is-here-with-new-ui-whatsapp-telegram-and-facebook-messenger-support/
Opera Software released today Opera v45, nicknamed "Reborn," a brand new version of the Opera browser that comes not only with a new graphical user interface, but also adds a new feature not seen in any other browser. [...]
https://www.bleepingcomputer.com/news/software/opera-45-is-here-with-new-ui-whatsapp-telegram-and-facebook-messenger-support/
BleepingComputer
Opera 45 Is Here With New UI, WhatsApp, Telegram, and Facebook Messenger Support
Opera Software released today Opera v45, nicknamed "Reborn," a brand new version of the Opera browser that comes not only with a new graphical user interface, but also adds a new feature not seen in any other browser.
An unnamed UK-based regional water supply company lost over £500,000 ($645,000) in a sophisticated scam that involved social engineering, an inside man, and international bank transfers. [...]
https://www.bleepingcomputer.com/news/security/uk-water-supplier-loses-500-000-in-sophisticated-scam/
https://www.bleepingcomputer.com/news/security/uk-water-supplier-loses-500-000-in-sophisticated-scam/
BleepingComputer
UK Water Supplier Loses £500,000 in Sophisticated Scam
An unnamed UK-based regional water supply company lost over £500,000 ($645,000) in a sophisticated scam that involved social engineering, an inside man, and international bank transfers.
40 Asus RT Router Models Are Vulnerable to Simple Hacks
40 models of the Asus RT line of home routers are affected by five vulnerabilities that allow an attacker to get ahold of the router password, change router settings without authentication, and exfiltrate router data. [...]
https://www.bleepingcomputer.com/news/security/40-asus-rt-router-models-are-vulnerable-to-simple-hacks/
40 models of the Asus RT line of home routers are affected by five vulnerabilities that allow an attacker to get ahold of the router password, change router settings without authentication, and exfiltrate router data. [...]
https://www.bleepingcomputer.com/news/security/40-asus-rt-router-models-are-vulnerable-to-simple-hacks/
BleepingComputer
40 Asus RT Router Models Are Vulnerable to Simple Hacks
40 models of the Asus RT line of home routers are affected by five vulnerabilities that allow an attacker to get ahold of the router password, change router settings without authentication, and exfiltrate router data.
Edge Security Flaw Allows Theft of Facebook and Twitter Credentials
Argentinian security researcher Manuel Caballero has discovered another vulnerability in Microsoft's Edge browser that can be exploited to bypass a security protection feature and steal data such as passwords from other sites, or cookie files that contain sensitive information. [...]
https://www.bleepingcomputer.com/news/security/edge-security-flaw-allows-theft-of-facebook-and-twitter-credentials/
Argentinian security researcher Manuel Caballero has discovered another vulnerability in Microsoft's Edge browser that can be exploited to bypass a security protection feature and steal data such as passwords from other sites, or cookie files that contain sensitive information. [...]
https://www.bleepingcomputer.com/news/security/edge-security-flaw-allows-theft-of-facebook-and-twitter-credentials/
BleepingComputer
Edge Security Flaw Allows Theft of Facebook and Twitter Credentials
Argentinian security researcher Manuel Caballero has discovered another vulnerability in Microsoft's Edge browser that can be exploited to bypass a security protection feature and steal data such as passwords from other sites, or cookie files that contain…
Keylogger Found in Audio Driver of HP Laptops
The audio driver installed on some HP laptops includes a feature that could best be described as a keylogger, which records all the user's keystrokes and saves the information to a local file, accessible to anyone or any third-party software or malware that knows where to look. [...]
https://www.bleepingcomputer.com/news/security/keylogger-found-in-audio-driver-of-hp-laptops/
The audio driver installed on some HP laptops includes a feature that could best be described as a keylogger, which records all the user's keystrokes and saves the information to a local file, accessible to anyone or any third-party software or malware that knows where to look. [...]
https://www.bleepingcomputer.com/news/security/keylogger-found-in-audio-driver-of-hp-laptops/
BleepingComputer
Keylogger Found in Audio Driver of HP Laptops
The audio driver installed on some HP laptops includes a feature that could best be described as a keylogger, which records all the user's keystrokes and saves the information to a local file, accessible to anyone or any third-party software or malware that…
Avast Antivirus Update Blocks Internet Access
An update to the Avast antivirus has blocked users' ability to access the Internet, most customers needing to disable the antivirus in order to be able to get online (and complain to Avast). [...]
https://www.bleepingcomputer.com/news/software/avast-antivirus-update-blocks-internet-access/
An update to the Avast antivirus has blocked users' ability to access the Internet, most customers needing to disable the antivirus in order to be able to get online (and complain to Avast). [...]
https://www.bleepingcomputer.com/news/software/avast-antivirus-update-blocks-internet-access/
BleepingComputer
Avast Antivirus Update Blocks Internet Access
An update to the Avast antivirus has blocked users' ability to access the Internet, most customers needing to disable the antivirus in order to be able to get online (and complain to Avast).
SLocker Android Ransomware Makes Furious Comeback with 400 New Variations
The SLocker Android ransomware is back with a new wave of infections, after previously wreaking havoc in the summer of 2016. [...]
https://www.bleepingcomputer.com/news/security/slocker-android-ransomware-makes-furious-comeback-with-400-new-variations/
The SLocker Android ransomware is back with a new wave of infections, after previously wreaking havoc in the summer of 2016. [...]
https://www.bleepingcomputer.com/news/security/slocker-android-ransomware-makes-furious-comeback-with-400-new-variations/
BleepingComputer
SLocker Android Ransomware Makes Furious Comeback with 400 New Variations
The SLocker Android ransomware is back with a new wave of infections, after previously wreaking havoc in the summer of 2016.
Jaff Ransomware Distributed via Necurs MALSPAM and asking for a $3,700 Ransom
A new ransomware was discovered today called Jaff ransomware. This ransomware will encrypt your files and append the .jaff extension to encrypted files. It also joins the ranks of other ransomware that steal payment site templates from Locky. [...]
https://www.bleepingcomputer.com/news/security/jaff-ransomware-distributed-via-necurs-malspam-and-asking-for-a-3-700-ransom/
A new ransomware was discovered today called Jaff ransomware. This ransomware will encrypt your files and append the .jaff extension to encrypted files. It also joins the ranks of other ransomware that steal payment site templates from Locky. [...]
https://www.bleepingcomputer.com/news/security/jaff-ransomware-distributed-via-necurs-malspam-and-asking-for-a-3-700-ransom/
BleepingComputer
Jaff Ransomware Distributed via Necurs MALSPAM and asking for a $3,700 Ransom
A new ransomware was discovered today called Jaff ransomware. This ransomware will encrypt your files and append the .jaff extension to encrypted files. It also joins the ranks of other ransomware that steal payment site templates from Locky.
Researchers Use Digitally Created Fingerprints to Unlock Smartphones
A team of researchers from the Tandon School of Engineering at the New York University has created a method of generating fake digital fingerprints capable of unlocking random smartphones. [...]
https://www.bleepingcomputer.com/news/security/researchers-use-digitally-created-fingerprints-to-unlock-smartphones/
A team of researchers from the Tandon School of Engineering at the New York University has created a method of generating fake digital fingerprints capable of unlocking random smartphones. [...]
https://www.bleepingcomputer.com/news/security/researchers-use-digitally-created-fingerprints-to-unlock-smartphones/
BleepingComputer
Researchers Use Digitally Created Fingerprints to Unlock Smartphones
A team of researchers from the Tandon School of Engineering at the New York University has created a method of generating fake digital fingerprints capable of unlocking random smartphones.