PDF Files Can Be Abused to Steal Windows Credentials
PDF files can be weaponized by malicious actors to steal Windows credentials (NTLM hashes) without any user interaction, and only by opening a file, according to Assaf Baharav, a security researcher with cyber-security Check Point. [...]
https://www.bleepingcomputer.com/news/security/pdf-files-can-be-abused-to-steal-windows-credentials/
PDF files can be weaponized by malicious actors to steal Windows credentials (NTLM hashes) without any user interaction, and only by opening a file, according to Assaf Baharav, a security researcher with cyber-security Check Point. [...]
https://www.bleepingcomputer.com/news/security/pdf-files-can-be-abused-to-steal-windows-credentials/
BleepingComputer
PDF Files Can Be Abused to Steal Windows Credentials
PDF files can be weaponized by malicious actors to steal Windows credentials (NTLM hashes) without any user interaction, and only by opening a file, according to Assaf Baharav, a security researcher with cyber-security Check Point.
Microsoft's Windows 10 "April 2018 Update" Being Released on Monday
Microsoft announced today that the next Windows 10 feature update will be called "April 2018 Update" and will be released this Monday. With this update Microsoft is focusing on helping people making the most of their time by introducing new features that make it easier and faster to finish tasks. [...]
https://www.bleepingcomputer.com/news/microsoft/microsofts-windows-10-april-2018-update-being-released-on-monday/
Microsoft announced today that the next Windows 10 feature update will be called "April 2018 Update" and will be released this Monday. With this update Microsoft is focusing on helping people making the most of their time by introducing new features that make it easier and faster to finish tasks. [...]
https://www.bleepingcomputer.com/news/microsoft/microsofts-windows-10-april-2018-update-being-released-on-monday/
BleepingComputer
Microsoft's Windows 10 "April 2018 Update" Being Released on Monday
Microsoft announced today that the next Windows 10 feature update will be called "April 2018 Update" and will be released this Monday. With this update Microsoft is focusing on helping people making the most of their time by introducing new features that…
Beware of "Rules of Conduct" Office 365 Phishing Emails
A new phishing email scam is under way that pretends to be from a company's human resources (HR) department and requests that the recipient read and acknowledge an attached "Rules of Conduct" document. This document, though, prompts you to login at a fake Office 365 login prompt, which is used to steal your credentials. [...]
https://www.bleepingcomputer.com/news/security/beware-of-rules-of-conduct-office-365-phishing-emails/
A new phishing email scam is under way that pretends to be from a company's human resources (HR) department and requests that the recipient read and acknowledge an attached "Rules of Conduct" document. This document, though, prompts you to login at a fake Office 365 login prompt, which is used to steal your credentials. [...]
https://www.bleepingcomputer.com/news/security/beware-of-rules-of-conduct-office-365-phishing-emails/
BleepingComputer
Beware of "Rules of Conduct" Office 365 Phishing Emails
A new phishing email scam is under way that pretends to be from a company's human resources (HR) department and requests that the recipient read and acknowledge an attached "Rules of Conduct" document. This document, though, prompts you to login at a fake…
Enterprises Still Impacted by SAP Configuration Issue 13 Years Later
Companies using SAP systems for their business software infrastructure might want to review some of their servers' settings for a configuration that if left in its default state will let an attacker gain access to a company's business data. [...]
https://www.bleepingcomputer.com/news/business/enterprises-still-impacted-by-sap-configuration-issue-13-years-later/
Companies using SAP systems for their business software infrastructure might want to review some of their servers' settings for a configuration that if left in its default state will let an attacker gain access to a company's business data. [...]
https://www.bleepingcomputer.com/news/business/enterprises-still-impacted-by-sap-configuration-issue-13-years-later/
BleepingComputer
Enterprises Still Impacted by SAP Configuration Issue 13 Years Later
Companies using SAP systems for their business software infrastructure might want to review some of their servers' settings for a configuration that if left in its default state will let an attacker gain access to a company's business data.
KCW Ransomware Encrypting Web Sites in Pakistan
Team Kerala Cyber Warriors, a hacking group based out of India, have begun to install ransomware on web sites based out of Pakistan. This ransomware, called KCW Ransomware, encrypts the files on a web site and then demands a ransom payment in order to get the files back. [...]
https://www.bleepingcomputer.com/news/security/kcw-ransomware-encrypting-web-sites-in-pakistan/
Team Kerala Cyber Warriors, a hacking group based out of India, have begun to install ransomware on web sites based out of Pakistan. This ransomware, called KCW Ransomware, encrypts the files on a web site and then demands a ransom payment in order to get the files back. [...]
https://www.bleepingcomputer.com/news/security/kcw-ransomware-encrypting-web-sites-in-pakistan/
BleepingComputer
KCW Ransomware Encrypting Web Sites in Pakistan
Team Kerala Cyber Warriors, a hacking group based out of India, have begun to install ransomware on web sites based out of Pakistan. This ransomware, called KCW Ransomware, encrypts the files on a web site and then demands a ransom payment in order to get…
The Week in Ransomware - April 27th 2018 - iLO, KCW, and VevoLocker
This was an interesting week for ransomware with various government servers being infected with VevoLocker, a new ransomware attack again HP iLO remote management interfaces, and the KCW Ransomware targeting web sites in Pakistan. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-april-27th-2018-ilo-kcw-and-vevolocker/
This was an interesting week for ransomware with various government servers being infected with VevoLocker, a new ransomware attack again HP iLO remote management interfaces, and the KCW Ransomware targeting web sites in Pakistan. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-april-27th-2018-ilo-kcw-and-vevolocker/
BleepingComputer
The Week in Ransomware - April 27th 2018 - iLO, KCW, and VevoLocker
This was an interesting week for ransomware with various government servers being infected with VevoLocker, a new ransomware attack again HP iLO remote management interfaces, and the KCW Ransomware targeting web sites in Pakistan.
PoC Code Published for Triggering an Instant BSOD on All Recent Windows Versions
A Romanian hardware expert has published proof-of-concept code on GitHub that will crash most Windows computers within seconds, even if the computer is in a locked state. [...]
https://www.bleepingcomputer.com/news/microsoft/poc-code-published-for-triggering-an-instant-bsod-on-all-recent-windows-versions/
A Romanian hardware expert has published proof-of-concept code on GitHub that will crash most Windows computers within seconds, even if the computer is in a locked state. [...]
https://www.bleepingcomputer.com/news/microsoft/poc-code-published-for-triggering-an-instant-bsod-on-all-recent-windows-versions/
BleepingComputer
PoC Code Published for Triggering an Instant BSOD on All Recent Windows Versions
A Romanian hardware expert has published proof-of-concept code on GitHub that will crash most Windows computers within seconds, even if the computer is in a locked state.
Long Prison Sentence for Man Who Hacked Jail Computer System to Bust Out Friend
A judge sentenced a Michigan man to 87 months —7 years 3 months— in prison for hacking into a county jail's computer system and modifying prisoner records in an attempt to get an inmate released early. [...]
https://www.bleepingcomputer.com/news/security/long-prison-sentence-for-man-who-hacked-jail-computer-system-to-bust-out-friend/
A judge sentenced a Michigan man to 87 months —7 years 3 months— in prison for hacking into a county jail's computer system and modifying prisoner records in an attempt to get an inmate released early. [...]
https://www.bleepingcomputer.com/news/security/long-prison-sentence-for-man-who-hacked-jail-computer-system-to-bust-out-friend/
BleepingComputer
Long Prison Sentence for Man Who Hacked Jail Computer System to Bust Out Friend
A judge sentenced a Michigan man to 87 months —7 years 3 months— in prison for hacking into a county jail's computer system and modifying prisoner records in an attempt to get an inmate released early.
UK Health Agency Switches to Windows 10 Citing WannaCry Ransomware Outbreak
The UK Department of Health and Social Care has announced that it will transition all National Health Service (NHS) computer systems to Windows 10. [...]
https://www.bleepingcomputer.com/news/government/uk-health-agency-switches-to-windows-10-citing-wannacry-ransomware-outbreak/
The UK Department of Health and Social Care has announced that it will transition all National Health Service (NHS) computer systems to Windows 10. [...]
https://www.bleepingcomputer.com/news/government/uk-health-agency-switches-to-windows-10-citing-wannacry-ransomware-outbreak/
BleepingComputer
UK Health Agency Switches to Windows 10 Citing WannaCry Ransomware Outbreak
The UK Department of Health and Social Care has announced that it will transition all National Health Service (NHS) computer systems to Windows 10.
Hackers Scan the Web for Vulnerable WebLogic Servers After Oracle Botches Patch
For more than a week hackers have started scanning the Internet, searching for machines running Oracle WebLogic servers. Scans started after April 17, when Oracle published its quarterly Critical Patch Update (CPU) security advisory. [...]
https://www.bleepingcomputer.com/news/security/hackers-scan-the-web-for-vulnerable-weblogic-servers-after-oracle-botches-patch/
For more than a week hackers have started scanning the Internet, searching for machines running Oracle WebLogic servers. Scans started after April 17, when Oracle published its quarterly Critical Patch Update (CPU) security advisory. [...]
https://www.bleepingcomputer.com/news/security/hackers-scan-the-web-for-vulnerable-weblogic-servers-after-oracle-botches-patch/
BleepingComputer
Hackers Scan the Web for Vulnerable WebLogic Servers After Oracle Botches Patch
For more than a week hackers have started scanning the Internet, searching for machines running Oracle WebLogic servers. Scans started after April 17, when Oracle published its quarterly Critical Patch Update (CPU) security advisory.
Volkswagen and Audi Cars Vulnerable to Remote Hacking
A Dutch cyber-security firm has discovered that in-vehicle infotainment (IVI) systems deployed with some car models from the Volkswagen Group are vulnerable to remote hacking. [...]
https://www.bleepingcomputer.com/news/security/volkswagen-and-audi-cars-vulnerable-to-remote-hacking/
A Dutch cyber-security firm has discovered that in-vehicle infotainment (IVI) systems deployed with some car models from the Volkswagen Group are vulnerable to remote hacking. [...]
https://www.bleepingcomputer.com/news/security/volkswagen-and-audi-cars-vulnerable-to-remote-hacking/
BleepingComputer
Volkswagen and Audi Cars Vulnerable to Remote Hacking
A Dutch cyber-security firm has discovered that in-vehicle infotainment (IVI) systems deployed with some car models from the Volkswagen Group are vulnerable to remote hacking.
Windows 10's April 2018 Update Arrives Today: Here's Whats New
The next feature update for Windows 10, called the April 2018 Update, is being released today and with it comes a lot of new features. Many of these features focus on enabling you to use Windows 10 in a more efficient manner so that you can get your tasks done quicker and easier. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10s-april-2018-update-arrives-today-heres-whats-new/
The next feature update for Windows 10, called the April 2018 Update, is being released today and with it comes a lot of new features. Many of these features focus on enabling you to use Windows 10 in a more efficient manner so that you can get your tasks done quicker and easier. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10s-april-2018-update-arrives-today-heres-whats-new/
BleepingComputer
Windows 10's April 2018 Update Arrives Today: Here's Whats New
The next feature update for Windows 10, called the April 2018 Update, is being released today and with it comes a lot of new features. Many of these features focus on enabling you to use Windows 10 in a more efficient manner so that you can get your tasks…
FacexWorm Spreads via Facebook Messenger, Malicious Chrome Extension
Facebook, Chrome, and cryptocurrency users should be on the lookout for a new malware strain named FacexWorm that infects victims for the purpose of stealing passwords, stealing cryptocurrency funds, running cryptojacking scripts, and spamming Facebook users. [...]
https://www.bleepingcomputer.com/news/security/facexworm-spreads-via-facebook-messenger-malicious-chrome-extension/
Facebook, Chrome, and cryptocurrency users should be on the lookout for a new malware strain named FacexWorm that infects victims for the purpose of stealing passwords, stealing cryptocurrency funds, running cryptojacking scripts, and spamming Facebook users. [...]
https://www.bleepingcomputer.com/news/security/facexworm-spreads-via-facebook-messenger-malicious-chrome-extension/
BleepingComputer
FacexWorm Spreads via Facebook Messenger, Malicious Chrome Extension
Facebook, Chrome, and cryptocurrency users should be on the lookout for a new malware strain named FacexWorm that infects victims for the purpose of stealing passwords, stealing cryptocurrency funds, running cryptojacking scripts, and spamming Facebook users.
Rapidly Emerging Smart Cities & The Associated Risks
A smart city can be described as a city that incorporates the capabilities of web connectivity, analytics, mobile solutions, sensors, data collection and other technology. This can include surveillance systems utilized by law enforcement, smart congestion-mitigating traffic systems, LED streetlights, and smart grids. [...]
https://www.bleepingcomputer.com/news/government/rapidly-emerging-smart-cities-and-the-associated-risks/
A smart city can be described as a city that incorporates the capabilities of web connectivity, analytics, mobile solutions, sensors, data collection and other technology. This can include surveillance systems utilized by law enforcement, smart congestion-mitigating traffic systems, LED streetlights, and smart grids. [...]
https://www.bleepingcomputer.com/news/government/rapidly-emerging-smart-cities-and-the-associated-risks/
BleepingComputer
Rapidly Emerging Smart Cities & The Associated Risks
A smart city can be described as a city that incorporates the capabilities of web connectivity, analytics, mobile solutions, sensors, data collection and other technology. This can include surveillance systems utilized by law enforcement, smart congestion…
Microsoft Wants to Secure IoT and ICS Devices With New TCPS Project
Microsoft engineers have started working on a new project codenamed TCPS —short for Trusted Cyber Physical Systems— that is intended to provide a hardened system for securing Internet of Things (IoT) and Industrial Control Systems (ICS) devices. [...]
https://www.bleepingcomputer.com/news/security/microsoft-wants-to-secure-iot-and-ics-devices-with-new-tcps-project/
Microsoft engineers have started working on a new project codenamed TCPS —short for Trusted Cyber Physical Systems— that is intended to provide a hardened system for securing Internet of Things (IoT) and Industrial Control Systems (ICS) devices. [...]
https://www.bleepingcomputer.com/news/security/microsoft-wants-to-secure-iot-and-ics-devices-with-new-tcps-project/
BleepingComputer
Microsoft Wants to Secure IoT and ICS Devices With New TCPS Project
Microsoft engineers have started working on a new project codenamed TCPS —short for Trusted Cyber Physical Systems— that is intended to provide a hardened system for securing Internet of Things (IoT) and Industrial Control Systems (ICS) devices.
How to Download and Install the Windows 10 April 2018 Update Now
In this article we will provide two methods that you can use to download and install the Windows 10 April 2018 Update so that you can start using all the new features such as Timeline, Nearby Share, Focus Assist, and some new Linux command line tools ! [...]
https://www.bleepingcomputer.com/news/microsoft/how-to-download-and-install-the-windows-10-april-2018-update-now/
In this article we will provide two methods that you can use to download and install the Windows 10 April 2018 Update so that you can start using all the new features such as Timeline, Nearby Share, Focus Assist, and some new Linux command line tools ! [...]
https://www.bleepingcomputer.com/news/microsoft/how-to-download-and-install-the-windows-10-april-2018-update-now/
BleepingComputer
How to Download and Install the Windows 10 April 2018 Update Now
In this article we will provide two methods that you can use to download and install the Windows 10 April 2018 Update so that you can start using all the new features such as Timeline, Nearby Share, Focus Assist, and some new Linux command line tools !
Chinese Authorities Accidentally Admit to Accessing Deleted WeChat Messages
Chinese government officials have accidentally admitted over the weekend that they can access deleted WeChat messages, a Chinese news site has reported. The admission came over the weekend from an anti-graft commission from the Chinese province of Anhui investigating reports of corruption among government officials. [...]
https://www.bleepingcomputer.com/news/government/chinese-authorities-accidentally-admit-to-accessing-deleted-wechat-messages/
Chinese government officials have accidentally admitted over the weekend that they can access deleted WeChat messages, a Chinese news site has reported. The admission came over the weekend from an anti-graft commission from the Chinese province of Anhui investigating reports of corruption among government officials. [...]
https://www.bleepingcomputer.com/news/government/chinese-authorities-accidentally-admit-to-accessing-deleted-wechat-messages/
BleepingComputer
Chinese Authorities Accidentally Admit to Accessing Deleted WeChat Messages
Chinese government officials have accidentally admitted over the weekend that they can access deleted WeChat messages, a Chinese news site has reported. The admission came over the weekend from an anti-graft commission from the Chinese province of Anhui investigating…
Chinese Police Arrest 15 People Who Hid Malware Inside PUBG Cheat Apps
Chinese authorities have arrested 15 people on suspicion of developing, selling or promoting game-cheating apps for the PUBG (PlayerUnknown's BattleGrounds) game. [...]
https://www.bleepingcomputer.com/news/gaming/chinese-police-arrest-15-people-who-hid-malware-inside-pubg-cheat-apps/
Chinese authorities have arrested 15 people on suspicion of developing, selling or promoting game-cheating apps for the PUBG (PlayerUnknown's BattleGrounds) game. [...]
https://www.bleepingcomputer.com/news/gaming/chinese-police-arrest-15-people-who-hid-malware-inside-pubg-cheat-apps/
BleepingComputer
Chinese Police Arrest 15 People Who Hid Malware Inside PUBG Cheat Apps
Chinese authorities have arrested 15 people on suspicion of developing, selling or promoting game-cheating apps for the PUBG (PlayerUnknown's BattleGrounds) game.
Starting Today, Google Chrome Will Show Warnings for Non-Logged SSL Certificates
Starting today, the Google Chrome browser will show a full-page warning whenever users are accessing an HTTPS website that's using an SSL certificate that has not been logged in a public Certificate Transparency (CT) log. [...]
https://www.bleepingcomputer.com/news/security/starting-today-google-chrome-will-show-warnings-for-non-logged-ssl-certificates/
Starting today, the Google Chrome browser will show a full-page warning whenever users are accessing an HTTPS website that's using an SSL certificate that has not been logged in a public Certificate Transparency (CT) log. [...]
https://www.bleepingcomputer.com/news/security/starting-today-google-chrome-will-show-warnings-for-non-logged-ssl-certificates/
BleepingComputer
Starting Today, Google Chrome Will Show Warnings for Non-Logged SSL Certificates
Starting today, the Google Chrome browser will show a full-page warning whenever users are accessing an HTTPS website that's using an SSL certificate that has not been logged in a public Certificate Transparency (CT) log.
Fortnite Season 4 Is Here With Hoppin' Hop Rocks and a Redesigned Map
A new season of Fornite Battle Royale has arrived and the mysterious Comet has finally laid waste to the region. While Tilted Towers survived the impact for the most part, the map is now littered with impact craters and industrial sites that are collecting the powerful shards left behind by the Comet's destruction. [...]
https://www.bleepingcomputer.com/news/gaming/fortnite-season-4-is-here-with-hoppin-hop-rocks-and-a-redesigned-map/
A new season of Fornite Battle Royale has arrived and the mysterious Comet has finally laid waste to the region. While Tilted Towers survived the impact for the most part, the map is now littered with impact craters and industrial sites that are collecting the powerful shards left behind by the Comet's destruction. [...]
https://www.bleepingcomputer.com/news/gaming/fortnite-season-4-is-here-with-hoppin-hop-rocks-and-a-redesigned-map/
BleepingComputer
Fortnite Season 4 Is Here With Hoppin' Hop Rocks and a Redesigned Map
A new season of Fornite Battle Royale has arrived and the mysterious Comet has finally laid waste to the region. While Tilted Towers survived the impact for the most part, the map is now littered with impact craters and industrial sites that are collecting…
Amazon Follows Google in Banning "Domain Fronting"
Two of today's biggest cloud service providers are now blocking a technique called "domain fronting" that has been used by websites and applications to avoid government-based censorship, but also by malware to secretly siphon stolen data to covert servers. [...]
https://www.bleepingcomputer.com/news/cloud/amazon-follows-google-in-banning-domain-fronting/
Two of today's biggest cloud service providers are now blocking a technique called "domain fronting" that has been used by websites and applications to avoid government-based censorship, but also by malware to secretly siphon stolen data to covert servers. [...]
https://www.bleepingcomputer.com/news/cloud/amazon-follows-google-in-banning-domain-fronting/
BleepingComputer
Amazon Follows Google in Banning "Domain Fronting"
Two of today's biggest cloud service providers are now blocking a technique called "domain fronting" that has been used by websites and applications to avoid government-based censorship, but also by malware to secretly siphon stolen data to covert servers.