Microsoft Releases Two New Windows Updates Containing New Spectre 2 Mitigations

Microsoft released yesterday two new Windows Update packages meant to fix the Spectre v2 vulnerability. [...]

https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-two-new-windows-updates-containing-new-spectre-2-mitigations/

6 Alternative Browsers That Aren't Chrome or Firefox

Although Chrome and Firefox are very popular, it doesn't mean you have to use them. Depending on your needs and browsing habits, there may very well be another browser that's a better fit. In this article we take a look at six alternative browsers that have different strengths & features. [...]

https://www.bleepingcomputer.com/tips/web-browsers/6-alternative-browsers-that-arent-chrome-or-firefox/

Device Can Generate Master Keys From Valid or Expired Hotel Keys

Two security researchers from F-Secure have created a device that can read any valid or expired hotel key card and generate a master key that can open any room door or grant attackers access to secure hotel areas. [...]

https://www.bleepingcomputer.com/news/security/device-can-generate-master-keys-from-valid-or-expired-hotel-keys/

Hello! We want to tell you about few new awesome channels you must like.

HYPREME — everything about street wear fashion and style, new drops releases dates and super-cool photos.
époque — the most atmospheric channel ever, old movies, music and vintage photography.
Life Pro Tips — tips that improve your life in one way or another (it's true, really).
The Spectator — focused on politics, economics, history, military affairs, sports, science and technology (for the serious guys).

Also check out PosterBot — bot who can delivery posts from your favourite social networks to your channels (even when you sleep). It's realy cool thing.

Thanks and have a good day!

Ransomware Hits HPE iLO Remote Management Interfaces

Attackers are targeting Internet accessible HPE iLO 4 remote management interfaces, supposedly encrypting the drives, and then demanding Bitcoins to get access to the data again. While it has not been 100% confirmed if the hard drives are actually being encrypted, we do know that multiple victims have been affected by this attack. [...]

https://www.bleepingcomputer.com/news/security/ransomware-hits-hpe-ilo-remote-management-interfaces/

Researchers Turn Amazon Echo Into an Eavesdropping Device

Researchers at cybersecurity firm Checkmarx have found a way to turn an Amazon Echo (Alexa-powered) smart speaker into an eavesdropping device. [...]

https://www.bleepingcomputer.com/news/security/researchers-turn-amazon-echo-into-an-eavesdropping-device/

Windows Insider RS5 Build 17655 Starts Transition to the Net Adapter Framework

Today Microsoft released Windows 10 Insider Build 17655 to insiders on the Redstone 5 Skip Ahead ring. In this build, Microsoft begins its first step of transitioning the Windows network stack to use the Net Adapter framework. The first network component to take advantage of this framework is a new driver for mobile broadband. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-insider-rs5-build-17655-starts-transition-to-the-net-adapter-framework/

Hackers Don't Give Site Owners Time to Patch, Start Exploiting New Drupal Flaw Within Hours

Five hours after the Drupal team published a security update for the Drupal CMS, hackers have found a way to weaponize the patched vulnerability, and are actively exploiting it in the wild. [...]

https://www.bleepingcomputer.com/news/security/hackers-dont-give-site-owners-time-to-patch-start-exploiting-new-drupal-flaw-within-hours/

Ski Lift in Austria Left Control Panel Open on the Internet

Officials from the city of Innsbruck in Austria have shut down a local ski lift after two security researchers found its control panel open wide on the Internet, and allowing anyone to take control of the ski lift's operational settings. [...]

https://www.bleepingcomputer.com/news/security/ski-lift-in-austria-left-control-panel-open-on-the-internet/

Police Shut Down Anon-IB, an Infamous Revenge Porn Forum

Dutch police announced today that they had seized the servers of Anon-IB, a notorious online portal where users would share pictures of revenge porn and child pornography. [...]

https://www.bleepingcomputer.com/news/security/police-shut-down-anon-ib-an-infamous-revenge-porn-forum/

New C# Ransomware Compiles itself at Runtime

A new in-development ransomware was discovered that has an interesting characteristic. Instead of the distributed executable performing the ransomware functionality, the executables compiles an embedded encrypted C# program at runtime and launches it directly into memory. [...]

https://www.bleepingcomputer.com/news/security/new-c-ransomware-compiles-itself-at-runtime/

Exposed MongoDB Server Exposes Details of Cryptocurrency Users

Security researchers have stumbled across a MongoDB database containing the personal details of over 25,000 users who invested in or received Bezop (BEZ) cryptocurrency. [...]

https://www.bleepingcomputer.com/news/security/exposed-mongodb-server-exposes-details-of-cryptocurrency-users/

North Korea's Elites Are Ditching Facebook for Chinese Social Networks

Following the publication of a report in July 2017, North Korea's elites, some of the country's few citizens allowed on the Internet, have greatly altered their online behavior, and are now obfuscating their browsing activity, and have ditched US websites like Facebook or Instagram for alternative Chinese social networks. [...]

https://www.bleepingcomputer.com/news/technology/north-koreas-elites-are-ditching-facebook-for-chinese-social-networks/

World's Largest Spam Botnet Finds a New Way to Avoid Detection... For Now

Necurs, the world's largest spam botnet, with millions of infected computers under its control, has updated its arsenal and is currently utilizing a new technique to infect victims. [...]

https://www.bleepingcomputer.com/news/security/worlds-largest-spam-botnet-finds-a-new-way-to-avoid-detection-for-now/

North Korean Hackers Are up to No Good Again

For a month leading up to today's historic meet between North and South Korea's presidents, a North Korean hacking group has amplified operations and has targeted a wide variety of business sectors in at least 17 countries. The purpose of this campaign was to infect organizations, perform reconnaissance, and steal sensitive data. [...]

https://www.bleepingcomputer.com/news/security/north-korean-hackers-are-up-to-no-good-again/

PDF Files Can Be Abused to Steal Windows Credentials

PDF files can be weaponized by malicious actors to steal Windows credentials (NTLM hashes) without any user interaction, and only by opening a file, according to Assaf Baharav, a security researcher with cyber-security Check Point. [...]

https://www.bleepingcomputer.com/news/security/pdf-files-can-be-abused-to-steal-windows-credentials/

Microsoft's Windows 10 "April 2018 Update" Being Released on Monday

Microsoft announced today that the next Windows 10 feature update will be called "April 2018 Update" and will be released this Monday.  With this update Microsoft is focusing on helping people making the most of their time by introducing new features that make it easier and faster to finish tasks. [...]

https://www.bleepingcomputer.com/news/microsoft/microsofts-windows-10-april-2018-update-being-released-on-monday/

Beware of "Rules of Conduct" Office 365 Phishing Emails

A new phishing email scam is under way that pretends to be from a company's human resources (HR) department and requests that the recipient read and acknowledge an attached "Rules of Conduct" document. This document, though, prompts you to login at a fake Office 365 login prompt, which is used to steal your credentials. [...]

https://www.bleepingcomputer.com/news/security/beware-of-rules-of-conduct-office-365-phishing-emails/

Enterprises Still Impacted by SAP Configuration Issue 13 Years Later

Companies using SAP systems for their business software infrastructure might want to review some of their servers' settings for a configuration that if left in its default state will let an attacker gain access to a company's business data. [...]

https://www.bleepingcomputer.com/news/business/enterprises-still-impacted-by-sap-configuration-issue-13-years-later/

KCW Ransomware Encrypting Web Sites in Pakistan

Team Kerala Cyber Warriors, a hacking group based out of India, have begun to install ransomware on web sites based out of Pakistan. This ransomware, called KCW Ransomware, encrypts the files on a web site and then demands a ransom payment in order to get the files back. [...]

https://www.bleepingcomputer.com/news/security/kcw-ransomware-encrypting-web-sites-in-pakistan/

The Week in Ransomware - April 27th 2018 - iLO, KCW, and VevoLocker

This was an interesting week for ransomware with various government servers being infected with VevoLocker, a new ransomware attack again HP iLO remote management interfaces, and the KCW Ransomware targeting web sites in Pakistan. [...]

https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-april-27th-2018-ilo-kcw-and-vevolocker/