Microsoft Edge's XSS Filter Appears to Be Broken
A security feature that's included with the Microsoft Edge browser appears to have stopped working, according to Gareth Heyes, a security researcher with cyber-security firm PortSwigger. [...]
https://www.bleepingcomputer.com/news/security/microsoft-edges-xss-filter-appears-to-be-broken/
A security feature that's included with the Microsoft Edge browser appears to have stopped working, according to Gareth Heyes, a security researcher with cyber-security firm PortSwigger. [...]
https://www.bleepingcomputer.com/news/security/microsoft-edges-xss-filter-appears-to-be-broken/
BleepingComputer
Microsoft Edge's XSS Filter Appears to Be Broken
A security feature that's included with the Microsoft Edge browser appears to have stopped working, according to Gareth Heyes, a security researcher with cyber-security firm PortSwigger.
Unknown Dev Brings LibreOffice to Windows 10 via the Microsoft Store
The free and open-source Microsoft Office challenger called LibreOffice is now available in the Microsoft Store for Windows 10 PCs and Tablets. What is concerning, though, is that the app's publisher does not appear to be LibreOffice's actual developer, but rather a 3rd party that also prompts you to purchase it for $2.99. [...]
https://www.bleepingcomputer.com/news/microsoft/unknown-dev-brings-libreoffice-to-windows-10-via-the-microsoft-store/
The free and open-source Microsoft Office challenger called LibreOffice is now available in the Microsoft Store for Windows 10 PCs and Tablets. What is concerning, though, is that the app's publisher does not appear to be LibreOffice's actual developer, but rather a 3rd party that also prompts you to purchase it for $2.99. [...]
https://www.bleepingcomputer.com/news/microsoft/unknown-dev-brings-libreoffice-to-windows-10-via-the-microsoft-store/
BleepingComputer
Unknown Dev Brings LibreOffice to Windows 10 via the Microsoft Store
The free and open-source Microsoft Office challenger called LibreOffice is now available in the Microsoft Store for Windows 10 PCs and Tablets. What is concerning, though, is that the app's publisher does not appear to be LibreOffice's actual developer, but…
Source Code for Exobot Android Banking Trojan Leaked Online
The source code of a top-of-the-line Android banking trojan has been leaked online and has since rapidly spread in the malware community, worrying researchers that a new wave of malware campaigns may be in the works. [...]
https://www.bleepingcomputer.com/news/security/source-code-for-exobot-android-banking-trojan-leaked-online/
The source code of a top-of-the-line Android banking trojan has been leaked online and has since rapidly spread in the malware community, worrying researchers that a new wave of malware campaigns may be in the works. [...]
https://www.bleepingcomputer.com/news/security/source-code-for-exobot-android-banking-trojan-leaked-online/
BleepingComputer
Source Code for Exobot Android Banking Trojan Leaked Online
The source code of a top-of-the-line Android banking trojan has been leaked online and has since rapidly spread in the malware community, worrying researchers that a new wave of malware campaigns may be in the works.
After Chrome & Edge, Firefox Also Gets Option to Mute Sites With Autoplay Sound
Mozilla has added an experimental feature to the Firefox Nightly edition browser (63.0a1) that lets users control if a site is allowed to autoplay sound when it loads. [...]
https://www.bleepingcomputer.com/news/software/after-chrome-and-edge-firefox-also-gets-option-to-mute-sites-with-autoplay-sound/
Mozilla has added an experimental feature to the Firefox Nightly edition browser (63.0a1) that lets users control if a site is allowed to autoplay sound when it loads. [...]
https://www.bleepingcomputer.com/news/software/after-chrome-and-edge-firefox-also-gets-option-to-mute-sites-with-autoplay-sound/
BleepingComputer
After Chrome & Edge, Firefox Also Gets Option to Mute Sites With Autoplay Sound
Mozilla has added an experimental feature to the Firefox Nightly edition browser (63.0a1) that lets users control if a site is allowed to autoplay sound when it loads.
Academics Announce New Protections Against Spectre and Rowhammer Attacks
Academics from multiple universities have announced fixes for two severe security flaws known as Spectre and Rowhammer. [...]
https://www.bleepingcomputer.com/news/security/academics-announce-new-protections-against-spectre-and-rowhammer-attacks/
Academics from multiple universities have announced fixes for two severe security flaws known as Spectre and Rowhammer. [...]
https://www.bleepingcomputer.com/news/security/academics-announce-new-protections-against-spectre-and-rowhammer-attacks/
BleepingComputer
Academics Announce New Protections Against Spectre and Rowhammer Attacks
Academics from multiple universities have announced fixes for two severe security flaws known as Spectre and Rowhammer.
That IE Zero-Day From May Needed a Second Patch in July
The July Patch Tuesday that was delivered two weeks ago included a second patch for an Internet Explorer zero-day discovered and initially fixed by Microsoft in May. [...]
https://www.bleepingcomputer.com/news/security/that-ie-zero-day-from-may-needed-a-second-patch-in-july/
The July Patch Tuesday that was delivered two weeks ago included a second patch for an Internet Explorer zero-day discovered and initially fixed by Microsoft in May. [...]
https://www.bleepingcomputer.com/news/security/that-ie-zero-day-from-may-needed-a-second-patch-in-july/
BleepingComputer
That IE Zero-Day From May Needed a Second Patch in July
The July Patch Tuesday that was delivered two weeks ago included a second patch for an Internet Explorer zero-day discovered and initially fixed by Microsoft in May.
Researchers Detail New CPU Side-Channel Attack Named SpectreRSB
Academics from the University of California, Riverside (UCR) have published details last week about a new Spectre-class attack that they call SpectreRSB. [...]
https://www.bleepingcomputer.com/news/security/researchers-detail-new-cpu-side-channel-attack-named-spectrersb/
Academics from the University of California, Riverside (UCR) have published details last week about a new Spectre-class attack that they call SpectreRSB. [...]
https://www.bleepingcomputer.com/news/security/researchers-detail-new-cpu-side-channel-attack-named-spectrersb/
BleepingComputer
Researchers Detail New CPU Side-Channel Attack Named SpectreRSB
Academics from the University of California, Riverside (UCR) have published details last week about a new Spectre-class attack that they call SpectreRSB.
Dark Mode Rolling Out Now To Outlook.com Users
Earlier this month, we reported that a Dark Mode was coming to Outlook.com. Well, it is finally here and currently being slowly rolled out to Outlook.com users right now. [...]
https://www.bleepingcomputer.com/news/security/dark-mode-rolling-out-now-to-outlookcom-users/
Earlier this month, we reported that a Dark Mode was coming to Outlook.com. Well, it is finally here and currently being slowly rolled out to Outlook.com users right now. [...]
https://www.bleepingcomputer.com/news/security/dark-mode-rolling-out-now-to-outlookcom-users/
BleepingComputer
Dark Mode Rolling Out Now To Outlook.com Users
Earlier this month, we reported that a Dark Mode was coming to Outlook.com. Well, it is finally here and currently being slowly rolled out to Outlook.com users right now.
Microsoft Getting Ready to Launch Windows 10 Redstone 6 Preview Builds
With Windows 10 Redstone 5 nearly feature-complete and close to entering the stabilization process, Microsoft is now preparing to begin work on the very next Windows 10 release internally codenamed Redstone 6/19H1. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-getting-ready-to-launch-windows-10-redstone-6-preview-builds/
With Windows 10 Redstone 5 nearly feature-complete and close to entering the stabilization process, Microsoft is now preparing to begin work on the very next Windows 10 release internally codenamed Redstone 6/19H1. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-getting-ready-to-launch-windows-10-redstone-6-preview-builds/
BleepingComputer
Microsoft Getting Ready to Launch Windows 10 Redstone 6 Preview Builds
With Windows 10 Redstone 5 nearly feature-complete and close to entering the stabilization process, Microsoft is now preparing to begin work on the very next Windows 10 release internally codenamed Redstone 6/19H1.
Microsoft Reopens the Skip Ahead Ring for Windows 10 Redstone 6 Insider Builds
Microsoft announced today that they have reopened the Skip Ahead Ring for Windows 10 Insiders. If you have not had the opportunity to try skip ahead Windows 10 builds or want to join it again, you better do so quickly before all the spots are taken. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-reopens-the-skip-ahead-ring-for-windows-10-redstone-6-insider-builds/
Microsoft announced today that they have reopened the Skip Ahead Ring for Windows 10 Insiders. If you have not had the opportunity to try skip ahead Windows 10 builds or want to join it again, you better do so quickly before all the spots are taken. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-reopens-the-skip-ahead-ring-for-windows-10-redstone-6-insider-builds/
BleepingComputer
Microsoft Reopens the Skip Ahead Ring for Windows 10 Redstone 6 Insider Builds
Microsoft announced today that they have reopened the Skip Ahead Ring for Windows 10 Insiders. If you have not had the opportunity to try skip ahead Windows 10 builds or want to join it again, you better do so quickly before all the spots are taken.
Attacks on Oracle WebLogic Servers Detected After Publication of PoC Code
Oracle WebLogic servers are under attack from hackers who are trying to take over vulnerable installations that have not received a recent patch for a critical vulnerability. [...]
https://www.bleepingcomputer.com/news/security/attacks-on-oracle-weblogic-servers-detected-after-publication-of-poc-code/
Oracle WebLogic servers are under attack from hackers who are trying to take over vulnerable installations that have not received a recent patch for a critical vulnerability. [...]
https://www.bleepingcomputer.com/news/security/attacks-on-oracle-weblogic-servers-detected-after-publication-of-poc-code/
BleepingComputer
Attacks on Oracle WebLogic Servers Detected After Publication of PoC Code
Oracle WebLogic servers are under attack from hackers who are trying to take over vulnerable installations that have not received a recent patch for a critical vulnerability.
Many Bluetooth Implementations and OS Drivers Affected by Crypto Bug
A cryptographic bug affects the Bluetooth implementations and operating system drivers of Apple, Broadcom, Intel, Qualcomm, and possibly other hardware vendors. [...]
https://www.bleepingcomputer.com/news/security/many-bluetooth-implementations-and-os-drivers-affected-by-crypto-bug/
A cryptographic bug affects the Bluetooth implementations and operating system drivers of Apple, Broadcom, Intel, Qualcomm, and possibly other hardware vendors. [...]
https://www.bleepingcomputer.com/news/security/many-bluetooth-implementations-and-os-drivers-affected-by-crypto-bug/
BleepingComputer
Many Bluetooth Implementations and OS Drivers Affected by Crypto Bug
A cryptographic bug affects the Bluetooth implementations and operating system drivers of Apple, Broadcom, Intel, Qualcomm, and possibly other hardware vendors.
Microsoft Released Windows 10 Insider Update To Build 17713.1002 To Test Servicing Pipeline
Microsoft announced yesterday that they released "Cumulative Update for Windows 10 Version Next (10.0.17713.1002) (KB4345215)" to Windows Insiders in order to test the servicing pipeline. This is being done to make sure that there are no issues when they push the Insider Preview Build 17713 to Insiders in the slow ring. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-released-windows-10-insider-update-to-build-177131002-to-test-servicing-pipeline/
Microsoft announced yesterday that they released "Cumulative Update for Windows 10 Version Next (10.0.17713.1002) (KB4345215)" to Windows Insiders in order to test the servicing pipeline. This is being done to make sure that there are no issues when they push the Insider Preview Build 17713 to Insiders in the slow ring. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-released-windows-10-insider-update-to-build-177131002-to-test-servicing-pipeline/
BleepingComputer
Microsoft Released Windows 10 Insider Update To Build 17713.1002 To Test Servicing Pipeline
Microsoft announced yesterday that they released "Cumulative Update for Windows 10 Version Next (10.0.17713.1002) (KB4345215)" to Windows Insiders in order to test the servicing pipeline. This is being done to make sure that there are no issues when they…
Cyber-Attacks on Finland Intensified Before the Trump-Putin Summit
Prior to the Trump-Putin summit that took place on July 16 in Helsinki, Finland, cyber-attacks on the host country saw an uncharacteristic spike of activity. [...]
https://www.bleepingcomputer.com/news/security/cyber-attacks-on-finland-intensified-before-the-trump-putin-summit/
Prior to the Trump-Putin summit that took place on July 16 in Helsinki, Finland, cyber-attacks on the host country saw an uncharacteristic spike of activity. [...]
https://www.bleepingcomputer.com/news/security/cyber-attacks-on-finland-intensified-before-the-trump-putin-summit/
BleepingComputer
Cyber-Attacks on Finland Intensified Before the Trump-Putin Summit
Prior to the Trump-Putin summit that took place on July 16 in Helsinki, Finland, cyber-attacks on the host country saw an uncharacteristic spike of activity.
Hackers Hiding Web Shell Logins in Fake HTTP Error Pages
Malware distributors, hackers, and phishing scammers are continuing to use the practice of hiding login forms for their web shells in fake HTTP error documents. These pages pretend to be HTTP errors such as 404 Not Found or Forbidden, while in reality they are login pages that allow an attacker to issues commands on the server. [...]
https://www.bleepingcomputer.com/news/security/hackers-hiding-web-shell-logins-in-fake-http-error-pages/
Malware distributors, hackers, and phishing scammers are continuing to use the practice of hiding login forms for their web shells in fake HTTP error documents. These pages pretend to be HTTP errors such as 404 Not Found or Forbidden, while in reality they are login pages that allow an attacker to issues commands on the server. [...]
https://www.bleepingcomputer.com/news/security/hackers-hiding-web-shell-logins-in-fake-http-error-pages/
BleepingComputer
Hackers Hiding Web Shell Logins in Fake HTTP Error Pages
Malware distributors, hackers, and phishing scammers are continuing to use the practice of hiding login forms for their web shells in fake HTTP error documents. These pages pretend to be HTTP errors such as 404 Not Found or Forbidden, while in reality they…
Chrome 68 Released With Warnings on HTTP Sites, But Also Other Security Features
Google has released today version 68 of the Chrome browser. This marks a milestone release for the browser maker, being the first version where Chrome will mark HTTP sites as "Not Secure." [...]
https://www.bleepingcomputer.com/news/software/chrome-68-released-with-warnings-on-http-sites-but-also-other-security-features/
Google has released today version 68 of the Chrome browser. This marks a milestone release for the browser maker, being the first version where Chrome will mark HTTP sites as "Not Secure." [...]
https://www.bleepingcomputer.com/news/software/chrome-68-released-with-warnings-on-http-sites-but-also-other-security-features/
BleepingComputer
Chrome 68 Released With Warnings on HTTP Sites, But Also Other Security Features
Google has released today version 68 of the Chrome browser. This marks a milestone release for the browser maker, being the first version where Chrome will mark HTTP sites as "Not Secure."
Malware Author Building "Death" Botnet Using Old AVTech Flaw
A malware author by the name of EliteLands is currently building a botnet named "Death" by targeting unpatched AVTech devices. [...]
https://www.bleepingcomputer.com/news/security/malware-author-building-death-botnet-using-old-avtech-flaw/
A malware author by the name of EliteLands is currently building a botnet named "Death" by targeting unpatched AVTech devices. [...]
https://www.bleepingcomputer.com/news/security/malware-author-building-death-botnet-using-old-avtech-flaw/
BleepingComputer
Malware Author Building "Death" Botnet Using Old AVTech Flaw
A malware author by the name of EliteLands is currently building a botnet named "Death" by targeting unpatched AVTech devices.
Bitdefender Releases Decryption Tool for Older Version of LockCrypt Ransomware
Romanian antivirus firm Bitdefender released yesterday a decryption tool that can recover files encrypted by an older version of the LockCrypt ransomware, the one that locks files with the .1btc extension. [...]
https://www.bleepingcomputer.com/news/security/bitdefender-releases-decryption-tool-for-older-version-of-lockcrypt-ransomware/
Romanian antivirus firm Bitdefender released yesterday a decryption tool that can recover files encrypted by an older version of the LockCrypt ransomware, the one that locks files with the .1btc extension. [...]
https://www.bleepingcomputer.com/news/security/bitdefender-releases-decryption-tool-for-older-version-of-lockcrypt-ransomware/
BleepingComputer
Bitdefender Releases Decryption Tool for Older Version of LockCrypt Ransomware
Romanian antivirus firm Bitdefender released yesterday a decryption tool that can recover files encrypted by an older version of the LockCrypt ransomware, the one that locks files with the .1btc extension.
Windows 10 Cumulative Updates KB4340917, KB4338817 and KB4338827 Released
Microsoft has released a new patch for systems running the Windows 10 April 2018 Update (version 1803), Windows 10 Fall Creators Update (version 1709), and Windows 10 Creators Update (version 1703). [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-cumulative-updates-kb4340917-kb4338817-and-kb4338827-released/
Microsoft has released a new patch for systems running the Windows 10 April 2018 Update (version 1803), Windows 10 Fall Creators Update (version 1709), and Windows 10 Creators Update (version 1703). [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-cumulative-updates-kb4340917-kb4338817-and-kb4338827-released/
BleepingComputer
Windows 10 Cumulative Updates KB4340917, KB4338817 and KB4338827 Released
Microsoft has released a new patch for systems running the Windows 10 April 2018 Update (version 1803), Windows 10 Fall Creators Update (version 1709), and Windows 10 Creators Update (version 1703).
New Version of the Kronos Banking Trojan Discovered
A new version of the Kronos banking trojan is making the rounds, according to Proofpoint security researchers, who say they've identified at last three campaigns spreading a revamped version of this old trojan that had its heyday back in 2014. [...]
https://www.bleepingcomputer.com/news/security/new-version-of-the-kronos-banking-trojan-discovered/
A new version of the Kronos banking trojan is making the rounds, according to Proofpoint security researchers, who say they've identified at last three campaigns spreading a revamped version of this old trojan that had its heyday back in 2014. [...]
https://www.bleepingcomputer.com/news/security/new-version-of-the-kronos-banking-trojan-discovered/
BleepingComputer
New Version of the Kronos Banking Trojan Discovered
A new version of the Kronos banking trojan is making the rounds, according to Proofpoint security researchers, who say they've identified at last three campaigns spreading a revamped version of this old trojan that had its heyday back in 2014.
Chrome Extensions, Android and iOS Apps Caught Collecting Browsing Data
An investigation by AdGuard, an ad-blocking platform, has revealed a common link between several Chrome and Firefox extensions and Android & iOS apps that were caught collecting highly personal user data through various shady tactics. [...]
https://www.bleepingcomputer.com/news/security/chrome-extensions-android-and-ios-apps-caught-collecting-browsing-data/
An investigation by AdGuard, an ad-blocking platform, has revealed a common link between several Chrome and Firefox extensions and Android & iOS apps that were caught collecting highly personal user data through various shady tactics. [...]
https://www.bleepingcomputer.com/news/security/chrome-extensions-android-and-ios-apps-caught-collecting-browsing-data/
BleepingComputer
Chrome Extensions, Android and iOS Apps Caught Collecting Browsing Data
An investigation by AdGuard, an ad-blocking platform, has revealed a common link between several Chrome and Firefox extensions and Android & iOS apps that were caught collecting highly personal user data through various shady tactics.