Half a Billion IoT Devices Vulnerable to DNS Rebinding Attacks
Armis, the cyber-security firm that discovered the BlueBorne vulnerabilities in the Bluetooth protocol, warns that nearly half a billion of today's "smart" devices are vulnerable to a decade-old attack known as DNS rebinding. [...]
https://www.bleepingcomputer.com/news/security/half-a-billion-iot-devices-vulnerable-to-dns-rebinding-attacks/
Armis, the cyber-security firm that discovered the BlueBorne vulnerabilities in the Bluetooth protocol, warns that nearly half a billion of today's "smart" devices are vulnerable to a decade-old attack known as DNS rebinding. [...]
https://www.bleepingcomputer.com/news/security/half-a-billion-iot-devices-vulnerable-to-dns-rebinding-attacks/
BleepingComputer
Half a Billion IoT Devices Vulnerable to DNS Rebinding Attacks
Armis, the cyber-security firm that discovered the BlueBorne vulnerabilities in the Bluetooth protocol, warns that nearly half a billion of today's "smart" devices are vulnerable to a decade-old attack known as DNS rebinding.
Microsoft Trying to Fix the Windows 10 App Gap Ahead of Andromeda
In order to achieve a successful launch of Andromeda, Microsoft first needs to fix the "app gap" issue affecting Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-trying-to-fix-the-windows-10-app-gap-ahead-of-andromeda/
In order to achieve a successful launch of Andromeda, Microsoft first needs to fix the "app gap" issue affecting Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-trying-to-fix-the-windows-10-app-gap-ahead-of-andromeda/
BleepingComputer
Microsoft Trying to Fix the Windows 10 App Gap Ahead of Andromeda
In order to achieve a successful launch of Andromeda, Microsoft first needs to fix the "app gap" issue affecting Windows 10.
Researchers Discover Calisto, a Precursor to Dangerous Proton macOS Malware
Security researchers have discovered a precursor of the notorious Proton macOS malware. This supposed precursor appears to have been developed back in 2016, a year before Proton, and uploaded on VirusTotal, where it remained undetected for nearly two years until May 2018, when Kaspersky researchers stumbled upon it. [...]
https://www.bleepingcomputer.com/news/security/researchers-discover-calisto-a-precursor-to-dangerous-proton-macos-malware/
Security researchers have discovered a precursor of the notorious Proton macOS malware. This supposed precursor appears to have been developed back in 2016, a year before Proton, and uploaded on VirusTotal, where it remained undetected for nearly two years until May 2018, when Kaspersky researchers stumbled upon it. [...]
https://www.bleepingcomputer.com/news/security/researchers-discover-calisto-a-precursor-to-dangerous-proton-macos-malware/
BleepingComputer
Researchers Discover Calisto, a Precursor to Dangerous Proton macOS Malware
Security researchers have discovered a precursor of the notorious Proton macOS malware. This supposed precursor appears to have been developed back in 2016, a year before Proton, and uploaded on VirusTotal, where it remained undetected for nearly two years…
The Week in Ransomware - July 20th 2018 - Developer's Vent, Ransomware Attacks, and More
While it has been pretty slow for new ransomware this week, there was a quite a bit of ransomware related news such as the LabCorp attack being a ransomware infection, Magniber branching out, and a ransomware dev venting on Twitter. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-july-20th-2018-developers-vent-ransomware-attacks-and-more/
While it has been pretty slow for new ransomware this week, there was a quite a bit of ransomware related news such as the LabCorp attack being a ransomware infection, Magniber branching out, and a ransomware dev venting on Twitter. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-july-20th-2018-developers-vent-ransomware-attacks-and-more/
BleepingComputer
The Week in Ransomware - July 20th 2018 - Developer's Vent, Ransomware Attacks, and More
While it has been pretty slow for new ransomware this week, there was a quite a bit of ransomware related news such as the LabCorp attack being a ransomware infection, Magniber branching out, and a ransomware dev venting on Twitter.
Microsoft, Google, Facebook, Twitter Announce "Data Transfer Project"
Facebook, Google, Microsoft, and Twitter have announced on Friday, July 20, the Data Transfer Project (DTP), an initiative to create an open-source, service-to-service data portability platform so that users of their sites and others can easily migrate data from one platform to another. [...]
https://www.bleepingcomputer.com/news/technology/microsoft-google-facebook-twitter-announce-data-transfer-project/
Facebook, Google, Microsoft, and Twitter have announced on Friday, July 20, the Data Transfer Project (DTP), an initiative to create an open-source, service-to-service data portability platform so that users of their sites and others can easily migrate data from one platform to another. [...]
https://www.bleepingcomputer.com/news/technology/microsoft-google-facebook-twitter-announce-data-transfer-project/
BleepingComputer
Microsoft, Google, Facebook, Twitter Announce "Data Transfer Project"
Facebook, Google, Microsoft, and Twitter have announced on Friday, July 20, the Data Transfer Project (DTP), an initiative to create an open-source, service-to-service data portability platform so that users of their sites and others can easily migrate data…
Microsoft Edge's XSS Filter Appears to Be Broken
A security feature that's included with the Microsoft Edge browser appears to have stopped working, according to Gareth Heyes, a security researcher with cyber-security firm PortSwigger. [...]
https://www.bleepingcomputer.com/news/security/microsoft-edges-xss-filter-appears-to-be-broken/
A security feature that's included with the Microsoft Edge browser appears to have stopped working, according to Gareth Heyes, a security researcher with cyber-security firm PortSwigger. [...]
https://www.bleepingcomputer.com/news/security/microsoft-edges-xss-filter-appears-to-be-broken/
BleepingComputer
Microsoft Edge's XSS Filter Appears to Be Broken
A security feature that's included with the Microsoft Edge browser appears to have stopped working, according to Gareth Heyes, a security researcher with cyber-security firm PortSwigger.
Unknown Dev Brings LibreOffice to Windows 10 via the Microsoft Store
The free and open-source Microsoft Office challenger called LibreOffice is now available in the Microsoft Store for Windows 10 PCs and Tablets. What is concerning, though, is that the app's publisher does not appear to be LibreOffice's actual developer, but rather a 3rd party that also prompts you to purchase it for $2.99. [...]
https://www.bleepingcomputer.com/news/microsoft/unknown-dev-brings-libreoffice-to-windows-10-via-the-microsoft-store/
The free and open-source Microsoft Office challenger called LibreOffice is now available in the Microsoft Store for Windows 10 PCs and Tablets. What is concerning, though, is that the app's publisher does not appear to be LibreOffice's actual developer, but rather a 3rd party that also prompts you to purchase it for $2.99. [...]
https://www.bleepingcomputer.com/news/microsoft/unknown-dev-brings-libreoffice-to-windows-10-via-the-microsoft-store/
BleepingComputer
Unknown Dev Brings LibreOffice to Windows 10 via the Microsoft Store
The free and open-source Microsoft Office challenger called LibreOffice is now available in the Microsoft Store for Windows 10 PCs and Tablets. What is concerning, though, is that the app's publisher does not appear to be LibreOffice's actual developer, but…
Source Code for Exobot Android Banking Trojan Leaked Online
The source code of a top-of-the-line Android banking trojan has been leaked online and has since rapidly spread in the malware community, worrying researchers that a new wave of malware campaigns may be in the works. [...]
https://www.bleepingcomputer.com/news/security/source-code-for-exobot-android-banking-trojan-leaked-online/
The source code of a top-of-the-line Android banking trojan has been leaked online and has since rapidly spread in the malware community, worrying researchers that a new wave of malware campaigns may be in the works. [...]
https://www.bleepingcomputer.com/news/security/source-code-for-exobot-android-banking-trojan-leaked-online/
BleepingComputer
Source Code for Exobot Android Banking Trojan Leaked Online
The source code of a top-of-the-line Android banking trojan has been leaked online and has since rapidly spread in the malware community, worrying researchers that a new wave of malware campaigns may be in the works.
After Chrome & Edge, Firefox Also Gets Option to Mute Sites With Autoplay Sound
Mozilla has added an experimental feature to the Firefox Nightly edition browser (63.0a1) that lets users control if a site is allowed to autoplay sound when it loads. [...]
https://www.bleepingcomputer.com/news/software/after-chrome-and-edge-firefox-also-gets-option-to-mute-sites-with-autoplay-sound/
Mozilla has added an experimental feature to the Firefox Nightly edition browser (63.0a1) that lets users control if a site is allowed to autoplay sound when it loads. [...]
https://www.bleepingcomputer.com/news/software/after-chrome-and-edge-firefox-also-gets-option-to-mute-sites-with-autoplay-sound/
BleepingComputer
After Chrome & Edge, Firefox Also Gets Option to Mute Sites With Autoplay Sound
Mozilla has added an experimental feature to the Firefox Nightly edition browser (63.0a1) that lets users control if a site is allowed to autoplay sound when it loads.
Academics Announce New Protections Against Spectre and Rowhammer Attacks
Academics from multiple universities have announced fixes for two severe security flaws known as Spectre and Rowhammer. [...]
https://www.bleepingcomputer.com/news/security/academics-announce-new-protections-against-spectre-and-rowhammer-attacks/
Academics from multiple universities have announced fixes for two severe security flaws known as Spectre and Rowhammer. [...]
https://www.bleepingcomputer.com/news/security/academics-announce-new-protections-against-spectre-and-rowhammer-attacks/
BleepingComputer
Academics Announce New Protections Against Spectre and Rowhammer Attacks
Academics from multiple universities have announced fixes for two severe security flaws known as Spectre and Rowhammer.
That IE Zero-Day From May Needed a Second Patch in July
The July Patch Tuesday that was delivered two weeks ago included a second patch for an Internet Explorer zero-day discovered and initially fixed by Microsoft in May. [...]
https://www.bleepingcomputer.com/news/security/that-ie-zero-day-from-may-needed-a-second-patch-in-july/
The July Patch Tuesday that was delivered two weeks ago included a second patch for an Internet Explorer zero-day discovered and initially fixed by Microsoft in May. [...]
https://www.bleepingcomputer.com/news/security/that-ie-zero-day-from-may-needed-a-second-patch-in-july/
BleepingComputer
That IE Zero-Day From May Needed a Second Patch in July
The July Patch Tuesday that was delivered two weeks ago included a second patch for an Internet Explorer zero-day discovered and initially fixed by Microsoft in May.
Researchers Detail New CPU Side-Channel Attack Named SpectreRSB
Academics from the University of California, Riverside (UCR) have published details last week about a new Spectre-class attack that they call SpectreRSB. [...]
https://www.bleepingcomputer.com/news/security/researchers-detail-new-cpu-side-channel-attack-named-spectrersb/
Academics from the University of California, Riverside (UCR) have published details last week about a new Spectre-class attack that they call SpectreRSB. [...]
https://www.bleepingcomputer.com/news/security/researchers-detail-new-cpu-side-channel-attack-named-spectrersb/
BleepingComputer
Researchers Detail New CPU Side-Channel Attack Named SpectreRSB
Academics from the University of California, Riverside (UCR) have published details last week about a new Spectre-class attack that they call SpectreRSB.
Dark Mode Rolling Out Now To Outlook.com Users
Earlier this month, we reported that a Dark Mode was coming to Outlook.com. Well, it is finally here and currently being slowly rolled out to Outlook.com users right now. [...]
https://www.bleepingcomputer.com/news/security/dark-mode-rolling-out-now-to-outlookcom-users/
Earlier this month, we reported that a Dark Mode was coming to Outlook.com. Well, it is finally here and currently being slowly rolled out to Outlook.com users right now. [...]
https://www.bleepingcomputer.com/news/security/dark-mode-rolling-out-now-to-outlookcom-users/
BleepingComputer
Dark Mode Rolling Out Now To Outlook.com Users
Earlier this month, we reported that a Dark Mode was coming to Outlook.com. Well, it is finally here and currently being slowly rolled out to Outlook.com users right now.
Microsoft Getting Ready to Launch Windows 10 Redstone 6 Preview Builds
With Windows 10 Redstone 5 nearly feature-complete and close to entering the stabilization process, Microsoft is now preparing to begin work on the very next Windows 10 release internally codenamed Redstone 6/19H1. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-getting-ready-to-launch-windows-10-redstone-6-preview-builds/
With Windows 10 Redstone 5 nearly feature-complete and close to entering the stabilization process, Microsoft is now preparing to begin work on the very next Windows 10 release internally codenamed Redstone 6/19H1. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-getting-ready-to-launch-windows-10-redstone-6-preview-builds/
BleepingComputer
Microsoft Getting Ready to Launch Windows 10 Redstone 6 Preview Builds
With Windows 10 Redstone 5 nearly feature-complete and close to entering the stabilization process, Microsoft is now preparing to begin work on the very next Windows 10 release internally codenamed Redstone 6/19H1.
Microsoft Reopens the Skip Ahead Ring for Windows 10 Redstone 6 Insider Builds
Microsoft announced today that they have reopened the Skip Ahead Ring for Windows 10 Insiders. If you have not had the opportunity to try skip ahead Windows 10 builds or want to join it again, you better do so quickly before all the spots are taken. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-reopens-the-skip-ahead-ring-for-windows-10-redstone-6-insider-builds/
Microsoft announced today that they have reopened the Skip Ahead Ring for Windows 10 Insiders. If you have not had the opportunity to try skip ahead Windows 10 builds or want to join it again, you better do so quickly before all the spots are taken. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-reopens-the-skip-ahead-ring-for-windows-10-redstone-6-insider-builds/
BleepingComputer
Microsoft Reopens the Skip Ahead Ring for Windows 10 Redstone 6 Insider Builds
Microsoft announced today that they have reopened the Skip Ahead Ring for Windows 10 Insiders. If you have not had the opportunity to try skip ahead Windows 10 builds or want to join it again, you better do so quickly before all the spots are taken.
Attacks on Oracle WebLogic Servers Detected After Publication of PoC Code
Oracle WebLogic servers are under attack from hackers who are trying to take over vulnerable installations that have not received a recent patch for a critical vulnerability. [...]
https://www.bleepingcomputer.com/news/security/attacks-on-oracle-weblogic-servers-detected-after-publication-of-poc-code/
Oracle WebLogic servers are under attack from hackers who are trying to take over vulnerable installations that have not received a recent patch for a critical vulnerability. [...]
https://www.bleepingcomputer.com/news/security/attacks-on-oracle-weblogic-servers-detected-after-publication-of-poc-code/
BleepingComputer
Attacks on Oracle WebLogic Servers Detected After Publication of PoC Code
Oracle WebLogic servers are under attack from hackers who are trying to take over vulnerable installations that have not received a recent patch for a critical vulnerability.
Many Bluetooth Implementations and OS Drivers Affected by Crypto Bug
A cryptographic bug affects the Bluetooth implementations and operating system drivers of Apple, Broadcom, Intel, Qualcomm, and possibly other hardware vendors. [...]
https://www.bleepingcomputer.com/news/security/many-bluetooth-implementations-and-os-drivers-affected-by-crypto-bug/
A cryptographic bug affects the Bluetooth implementations and operating system drivers of Apple, Broadcom, Intel, Qualcomm, and possibly other hardware vendors. [...]
https://www.bleepingcomputer.com/news/security/many-bluetooth-implementations-and-os-drivers-affected-by-crypto-bug/
BleepingComputer
Many Bluetooth Implementations and OS Drivers Affected by Crypto Bug
A cryptographic bug affects the Bluetooth implementations and operating system drivers of Apple, Broadcom, Intel, Qualcomm, and possibly other hardware vendors.
Microsoft Released Windows 10 Insider Update To Build 17713.1002 To Test Servicing Pipeline
Microsoft announced yesterday that they released "Cumulative Update for Windows 10 Version Next (10.0.17713.1002) (KB4345215)" to Windows Insiders in order to test the servicing pipeline. This is being done to make sure that there are no issues when they push the Insider Preview Build 17713 to Insiders in the slow ring. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-released-windows-10-insider-update-to-build-177131002-to-test-servicing-pipeline/
Microsoft announced yesterday that they released "Cumulative Update for Windows 10 Version Next (10.0.17713.1002) (KB4345215)" to Windows Insiders in order to test the servicing pipeline. This is being done to make sure that there are no issues when they push the Insider Preview Build 17713 to Insiders in the slow ring. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-released-windows-10-insider-update-to-build-177131002-to-test-servicing-pipeline/
BleepingComputer
Microsoft Released Windows 10 Insider Update To Build 17713.1002 To Test Servicing Pipeline
Microsoft announced yesterday that they released "Cumulative Update for Windows 10 Version Next (10.0.17713.1002) (KB4345215)" to Windows Insiders in order to test the servicing pipeline. This is being done to make sure that there are no issues when they…
Cyber-Attacks on Finland Intensified Before the Trump-Putin Summit
Prior to the Trump-Putin summit that took place on July 16 in Helsinki, Finland, cyber-attacks on the host country saw an uncharacteristic spike of activity. [...]
https://www.bleepingcomputer.com/news/security/cyber-attacks-on-finland-intensified-before-the-trump-putin-summit/
Prior to the Trump-Putin summit that took place on July 16 in Helsinki, Finland, cyber-attacks on the host country saw an uncharacteristic spike of activity. [...]
https://www.bleepingcomputer.com/news/security/cyber-attacks-on-finland-intensified-before-the-trump-putin-summit/
BleepingComputer
Cyber-Attacks on Finland Intensified Before the Trump-Putin Summit
Prior to the Trump-Putin summit that took place on July 16 in Helsinki, Finland, cyber-attacks on the host country saw an uncharacteristic spike of activity.
Hackers Hiding Web Shell Logins in Fake HTTP Error Pages
Malware distributors, hackers, and phishing scammers are continuing to use the practice of hiding login forms for their web shells in fake HTTP error documents. These pages pretend to be HTTP errors such as 404 Not Found or Forbidden, while in reality they are login pages that allow an attacker to issues commands on the server. [...]
https://www.bleepingcomputer.com/news/security/hackers-hiding-web-shell-logins-in-fake-http-error-pages/
Malware distributors, hackers, and phishing scammers are continuing to use the practice of hiding login forms for their web shells in fake HTTP error documents. These pages pretend to be HTTP errors such as 404 Not Found or Forbidden, while in reality they are login pages that allow an attacker to issues commands on the server. [...]
https://www.bleepingcomputer.com/news/security/hackers-hiding-web-shell-logins-in-fake-http-error-pages/
BleepingComputer
Hackers Hiding Web Shell Logins in Fake HTTP Error Pages
Malware distributors, hackers, and phishing scammers are continuing to use the practice of hiding login forms for their web shells in fake HTTP error documents. These pages pretend to be HTTP errors such as 404 Not Found or Forbidden, while in reality they…
Chrome 68 Released With Warnings on HTTP Sites, But Also Other Security Features
Google has released today version 68 of the Chrome browser. This marks a milestone release for the browser maker, being the first version where Chrome will mark HTTP sites as "Not Secure." [...]
https://www.bleepingcomputer.com/news/software/chrome-68-released-with-warnings-on-http-sites-but-also-other-security-features/
Google has released today version 68 of the Chrome browser. This marks a milestone release for the browser maker, being the first version where Chrome will mark HTTP sites as "Not Secure." [...]
https://www.bleepingcomputer.com/news/software/chrome-68-released-with-warnings-on-http-sites-but-also-other-security-features/
BleepingComputer
Chrome 68 Released With Warnings on HTTP Sites, But Also Other Security Features
Google has released today version 68 of the Chrome browser. This marks a milestone release for the browser maker, being the first version where Chrome will mark HTTP sites as "Not Secure."