Windows 10 Build 17763.107 Released to Insiders With Fixes for October Update
According to the changelog, Microsoft has finally fixed a bug where the system won't display a confirmation prompt when users extract a file from a zip archive to a location where the file with the same name exists. Microsoft recently acknowledged the issue and today's update has finally addressed it. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-build-17763107-released-to-insiders-with-fixes-for-october-update/
According to the changelog, Microsoft has finally fixed a bug where the system won't display a confirmation prompt when users extract a file from a zip archive to a location where the file with the same name exists. Microsoft recently acknowledged the issue and today's update has finally addressed it. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-build-17763107-released-to-insiders-with-fixes-for-october-update/
BleepingComputer
Windows 10 Build 17763.107 Released to Insiders With Fixes for October Update
According to the changelog, Microsoft has finally fixed a bug where the system won't display a confirmation prompt when users extract a file from a zip archive to a location where the file with the same name exists. Microsoft recently acknowledged the issue…
Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
Today Apple released updates for core products that include iOS 12.1, Safari 12.0.1, iCloud for Windows, iTunes, watchOS 5.1, tvOS 12.1, and macOS. [...]
https://www.bleepingcomputer.com/news/security/apple-fixes-creepy-facetime-vulnerability-crash-bug-in-macos-and-more/
Today Apple released updates for core products that include iOS 12.1, Safari 12.0.1, iCloud for Windows, iTunes, watchOS 5.1, tvOS 12.1, and macOS. [...]
https://www.bleepingcomputer.com/news/security/apple-fixes-creepy-facetime-vulnerability-crash-bug-in-macos-and-more/
BleepingComputer
Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
Today Apple released updates for core products that include iOS 12.1, Safari 12.0.1, iCloud for Windows, iTunes, watchOS 5.1, tvOS 12.1, and macOS.
Telegram Desktop Saves Conversations Locally in Plain Text
The desktop variant for Telegram secure messaging app fails to protect chat content locally, offering access to plain text conversations and media that otherwise travel encrypted.. [...]
https://www.bleepingcomputer.com/news/security/telegram-desktop-saves-conversations-locally-in-plain-text/
The desktop variant for Telegram secure messaging app fails to protect chat content locally, offering access to plain text conversations and media that otherwise travel encrypted.. [...]
https://www.bleepingcomputer.com/news/security/telegram-desktop-saves-conversations-locally-in-plain-text/
BleepingComputer
Telegram Desktop Saves Conversations Locally in Plain Text
The desktop variant for Telegram secure messaging app fails to protect chat content locally, offering access to plain text conversations and media that otherwise travel encrypted..
Google's reCAPTCHA v3 Promises No Break For Bot Checking
Google launched the third version of its reCAPTCHA program that sets apart humans and bots when they land on websites, with the promise of eliminating user interaction. [...]
https://www.bleepingcomputer.com/news/google/googles-recaptcha-v3-promises-no-break-for-bot-checking/
Google launched the third version of its reCAPTCHA program that sets apart humans and bots when they land on websites, with the promise of eliminating user interaction. [...]
https://www.bleepingcomputer.com/news/google/googles-recaptcha-v3-promises-no-break-for-bot-checking/
BleepingComputer
Google's reCAPTCHA v3 Promises No Break For Bot Checking
Google launched the third version of its reCAPTCHA program that sets apart humans and bots when they land on websites, with the promise of eliminating user interaction.
Emotet Trojan Begins Stealing Victim's Email Using New Module
The Emotet malware is typically used as a banking trojan and more recently for distributing other malware, but has now become more versatile via a module that allows it to steal a victim's actual emails going back six months. [...]
https://www.bleepingcomputer.com/news/security/emotet-trojan-begins-stealing-victims-email-using-new-module/
The Emotet malware is typically used as a banking trojan and more recently for distributing other malware, but has now become more versatile via a module that allows it to steal a victim's actual emails going back six months. [...]
https://www.bleepingcomputer.com/news/security/emotet-trojan-begins-stealing-victims-email-using-new-module/
BleepingComputer
Emotet Trojan Begins Stealing Victim's Email Using New Module
The Emotet malware is typically used as a banking trojan and more recently for distributing other malware, but has now become more versatile via a module that allows it to steal a victim's actual emails going back six months.
Windows 10 Build 18272 Released to Insiders With Improvements
Windows 10 19H1 preview build 18272 is rolling out to the Windows Insiders in the Fast and Skip Ahead rings. Windows 10 Build 18272 comes with several improvements and fixes but there are no major changes. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-build-18272-released-to-insiders-with-improvements/
Windows 10 19H1 preview build 18272 is rolling out to the Windows Insiders in the Fast and Skip Ahead rings. Windows 10 Build 18272 comes with several improvements and fixes but there are no major changes. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-build-18272-released-to-insiders-with-improvements/
BleepingComputer
Windows 10 Build 18272 Released to Insiders With Improvements
Windows 10 19H1 preview build 18272 is rolling out to the Windows Insiders in the Fast and Skip Ahead rings. Windows 10 Build 18272 comes with several improvements and fixes but there are no major changes.
Complete Works Of Shakespeare Hidden Inside Twitter Thumbnail Image
A security researcher has demonstrated how he could hide the Complete Works of Shakespeare into an image and use Twitter to distribute it using stegenography. [...]
https://www.bleepingcomputer.com/news/security/complete-works-of-shakespeare-hidden-inside-twitter-thumbnail-image/
A security researcher has demonstrated how he could hide the Complete Works of Shakespeare into an image and use Twitter to distribute it using stegenography. [...]
https://www.bleepingcomputer.com/news/security/complete-works-of-shakespeare-hidden-inside-twitter-thumbnail-image/
BleepingComputer
Complete Works Of Shakespeare Hidden Inside Twitter Thumbnail Image
A security researcher has demonstrated how he could hide the Complete Works of Shakespeare into an image and use Twitter to distribute it using Steganography.
Method to View Contact Info on a Locked iOS 12.1 Device Disclosed
The day after iOS 12.1 was released, a researcher disclosed a new passcode bypass method that allows you to easily view the phone numbers and email addresses of a device's contacts even when the device is locked. [...]
https://www.bleepingcomputer.com/news/security/method-to-view-contact-info-on-a-locked-ios-121-device-disclosed/
The day after iOS 12.1 was released, a researcher disclosed a new passcode bypass method that allows you to easily view the phone numbers and email addresses of a device's contacts even when the device is locked. [...]
https://www.bleepingcomputer.com/news/security/method-to-view-contact-info-on-a-locked-ios-121-device-disclosed/
BleepingComputer
Method to View Contact Info on a Locked iOS 12.1 Device Disclosed
The day after iOS 12.1 was released, a researcher disclosed a new passcode bypass method that allows you to easily view the phone numbers and email addresses of a device's contacts even when the device is locked.
Mozilla Firefox Adding Setting to Disable Recommended Extensions
In September we reported that Mozilla Firefox would be testing a new feature called Contextual Feature Recommender, or CFR, that recommends extensions related to sites that you are visiting. In Firefox 64, Mozilla will be adding a setting that allows you to block Firefox from making these types of recommendations. [...]
https://www.bleepingcomputer.com/news/software/mozilla-firefox-adding-setting-to-disable-recommended-extensions/
In September we reported that Mozilla Firefox would be testing a new feature called Contextual Feature Recommender, or CFR, that recommends extensions related to sites that you are visiting. In Firefox 64, Mozilla will be adding a setting that allows you to block Firefox from making these types of recommendations. [...]
https://www.bleepingcomputer.com/news/software/mozilla-firefox-adding-setting-to-disable-recommended-extensions/
BleepingComputer
Mozilla Firefox Adding Setting to Disable Recommended Extensions
In September we reported that Mozilla Firefox would be testing a new feature called Contextual Feature Recommender, or CFR, that recommends extensions related to sites that you are visiting. In Firefox 64, Mozilla will be adding a setting that allows you…
New Stuxnet Variant Allegedly Struck Iran
A malware similar in nature to Stuxnet but more aggressive and sophisticated allegedly hit the infrastructure and strategic networks in Iran. [...]
https://www.bleepingcomputer.com/news/security/new-stuxnet-variant-allegedly-struck-iran/
A malware similar in nature to Stuxnet but more aggressive and sophisticated allegedly hit the infrastructure and strategic networks in Iran. [...]
https://www.bleepingcomputer.com/news/security/new-stuxnet-variant-allegedly-struck-iran/
BleepingComputer
New Stuxnet Variant Allegedly Struck Iran
A malware similar in nature to Stuxnet but more aggressive and sophisticated allegedly hit the infrastructure and strategic networks in Iran.
Necurs Botnet Distributing Sextortion Email Scams
Two recent sextortion scam campaigns seem to rely on the Necurs botnet infrastructure to distribute the messages, security researchers have discovered. [...]
https://www.bleepingcomputer.com/news/security/necurs-botnet-distributing-sextortion-email-scams/
Two recent sextortion scam campaigns seem to rely on the Necurs botnet infrastructure to distribute the messages, security researchers have discovered. [...]
https://www.bleepingcomputer.com/news/security/necurs-botnet-distributing-sextortion-email-scams/
BleepingComputer
Necurs Botnet Distributing Sextortion Email Scams
Two recent sextortion scam campaigns seem to rely on the Necurs botnet infrastructure to distribute the messages, security researchers have discovered.
New BLEEDINGBIT Vulnerabilities Affect Widely-Used Bluetooth Chips
Two vulnerabilities in the Bluetooth chips typically found in access points used to provide WiFi service in enterprises allow attackers to take control of the devices without authentication or breach the network. [...]
https://www.bleepingcomputer.com/news/security/new-bleedingbit-vulnerabilities-affect-widely-used-bluetooth-chips/
Two vulnerabilities in the Bluetooth chips typically found in access points used to provide WiFi service in enterprises allow attackers to take control of the devices without authentication or breach the network. [...]
https://www.bleepingcomputer.com/news/security/new-bleedingbit-vulnerabilities-affect-widely-used-bluetooth-chips/
BleepingComputer
New BLEEDINGBIT Vulnerabilities Affect Widely-Used Bluetooth Chips
Two vulnerabilities in the Bluetooth chips typically found in access points used to provide WiFi service in enterprises allow attackers to take control of the devices without authentication or breach the network.
Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
Last week Microsoft announced that users can enable a feature that adds Windows Defender to a sandbox, which protects the computer from vulnerabilities found in Defender. A bug was discovered, though, that may cause you to think that this sandbox feature is enabled, when it really isn't. [...]
https://www.bleepingcomputer.com/news/security/windows-defender-bug-needs-a-restart-not-shutdown-to-enable-sandbox/
Last week Microsoft announced that users can enable a feature that adds Windows Defender to a sandbox, which protects the computer from vulnerabilities found in Defender. A bug was discovered, though, that may cause you to think that this sandbox feature is enabled, when it really isn't. [...]
https://www.bleepingcomputer.com/news/security/windows-defender-bug-needs-a-restart-not-shutdown-to-enable-sandbox/
BleepingComputer
Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
Last week Microsoft announced that users can enable a feature that adds Windows Defender to a sandbox, which protects the computer from vulnerabilities found in Defender. A bug was discovered, though, that may cause you to think that this sandbox feature…
Microsoft Will Soon Send Your Office 365 Users Tips and Training Emails
Microsoft has announced that they will automatically enable the emailing of tips and training information to all Office 365 and Microsoft 365 users starting on November 29th 2018. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-will-soon-send-your-office-365-users-tips-and-training-emails/
Microsoft has announced that they will automatically enable the emailing of tips and training information to all Office 365 and Microsoft 365 users starting on November 29th 2018. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-will-soon-send-your-office-365-users-tips-and-training-emails/
BleepingComputer
Microsoft Will Soon Send Your Office 365 Users Tips and Training Emails
Microsoft has announced that they will automatically enable the emailing of tips and training information to all Office 365 and Microsoft 365 users starting on November 29th 2018.
Attackers Use Zero-Day That Can Restart Cisco Security Appliances
Unknown attackers have exploited a vulnerability in software running on security hardware products from Cisco that could trigger a restart of the affected devices, the equivalent of a denial-of-service (DoS) condition. [...]
https://www.bleepingcomputer.com/news/security/attackers-use-zero-day-that-can-restart-cisco-security-appliances/
Unknown attackers have exploited a vulnerability in software running on security hardware products from Cisco that could trigger a restart of the affected devices, the equivalent of a denial-of-service (DoS) condition. [...]
https://www.bleepingcomputer.com/news/security/attackers-use-zero-day-that-can-restart-cisco-security-appliances/
BleepingComputer
Attackers Use Zero-Day That Can Restart Cisco Security Appliances
Unknown attackers have exploited a vulnerability in software running on security hardware products from Cisco that could trigger a restart of the affected devices, the equivalent of a denial-of-service (DoS) condition.
Private Messages for 81k Hacked Facebook Accounts Being Sold Online
A seller has posted on underground criminal forums about having access to the information of 120 million Facebook users as well as access to the private messages of 81,000 profiles. These accounts are being sold for 10 cents each. [...]
https://www.bleepingcomputer.com/news/security/private-messages-for-81k-hacked-facebook-accounts-being-sold-online/
A seller has posted on underground criminal forums about having access to the information of 120 million Facebook users as well as access to the private messages of 81,000 profiles. These accounts are being sold for 10 cents each. [...]
https://www.bleepingcomputer.com/news/security/private-messages-for-81k-hacked-facebook-accounts-being-sold-online/
BleepingComputer
Private Messages for 81k Hacked Facebook Accounts Being Sold Online
A seller has posted on underground criminal forums about having access to the information of 120 million Facebook users as well as access to the private messages of 81,000 profiles. These accounts are being sold for 10 cents each.
New Ransomware using DiskCryptor With Custom Ransom Message
A new ransomware has been discovered that installs DiskCryptor on the infected computer and reboots your computer. On reboot, victims will be greeted with a custom ransom note that explains that their disk has been encrypted and how to pay the ransom. [...]
https://www.bleepingcomputer.com/news/security/new-ransomware-using-diskcryptor-with-custom-ransom-message/
A new ransomware has been discovered that installs DiskCryptor on the infected computer and reboots your computer. On reboot, victims will be greeted with a custom ransom note that explains that their disk has been encrypted and how to pay the ransom. [...]
https://www.bleepingcomputer.com/news/security/new-ransomware-using-diskcryptor-with-custom-ransom-message/
BleepingComputer
New Ransomware using DiskCryptor With Custom Ransom Message
A new ransomware has been discovered that installs DiskCryptor on the infected computer and reboots your computer. On reboot, victims will be greeted with a custom ransom note that explains that their disk has been encrypted and how to pay the ransom.
Mozilla Added WebP Image Support to Firefox 65
Mozilla is bringing support for Google's WebP image format to Firefox 65. The WebP image format was created by Google as a modern format designed for displaying images on the web. [...]
https://www.bleepingcomputer.com/news/software/mozilla-added-webp-image-support-to-firefox-65/
Mozilla is bringing support for Google's WebP image format to Firefox 65. The WebP image format was created by Google as a modern format designed for displaying images on the web. [...]
https://www.bleepingcomputer.com/news/software/mozilla-added-webp-image-support-to-firefox-65/
BleepingComputer
Mozilla Added WebP Image Support to Firefox 65
Mozilla is bringing support for Google's WebP image format to Firefox 65. The WebP image format was created by Google as a modern format designed for displaying images on the web.
The Week in Ransomware - November 2nd 2018 - RaaS, DiskCryptor, & More
This week we saw a new RaaS called CommonRansom, a new DiskCryptor variant, and numerous Dharma variant released. Otherwise, it has been a fairly light news week for ransomware. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-2nd-2018-raas-diskcryptor-and-more/
This week we saw a new RaaS called CommonRansom, a new DiskCryptor variant, and numerous Dharma variant released. Otherwise, it has been a fairly light news week for ransomware. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-2nd-2018-raas-diskcryptor-and-more/
BleepingComputer
The Week in Ransomware - November 2nd 2018 - RaaS, DiskCryptor, & More
This week we saw a new RaaS called CommonRansom, a new DiskCryptor variant, and numerous Dharma variant released. Otherwise, it has been a fairly light news week for ransomware.
New PortSmash Hyper-Threading CPU Vuln Can Steal Decryption Keys
A new side-channel vulnerability has been discovered called PortSmash that uses a timing attack that to steal information from other processes running on the same SMT/hyper-threading enabled CPU core. Utilizing this attack, researchers were able to steal the private decryption key from an OpenSSL thread running in the same core. [...]
https://www.bleepingcomputer.com/news/security/new-portsmash-hyper-threading-cpu-vuln-can-steal-decryption-keys/
A new side-channel vulnerability has been discovered called PortSmash that uses a timing attack that to steal information from other processes running on the same SMT/hyper-threading enabled CPU core. Utilizing this attack, researchers were able to steal the private decryption key from an OpenSSL thread running in the same core. [...]
https://www.bleepingcomputer.com/news/security/new-portsmash-hyper-threading-cpu-vuln-can-steal-decryption-keys/
BleepingComputer
New PortSmash Hyper-Threading CPU Vuln Can Steal Decryption Keys
A new side-channel vulnerability has been discovered called PortSmash that uses a timing attack that to steal information from other processes running on the same SMT/hyper-threading enabled CPU core. Utilizing this attack, researchers were able to steal…
New Microsoft Edge Browser Zero-Day RCE Exploit in the Works
Details are about to emerge about a zero-day remote code execution vulnerability in the Microsoft Edge web browser, as two researchers plan to reveal a proof-of-concept and publish a general write up. Microsoft has not been told the details of this vulnerability. [...]
https://www.bleepingcomputer.com/news/security/new-microsoft-edge-browser-zero-day-rce-exploit-in-the-works/
Details are about to emerge about a zero-day remote code execution vulnerability in the Microsoft Edge web browser, as two researchers plan to reveal a proof-of-concept and publish a general write up. Microsoft has not been told the details of this vulnerability. [...]
https://www.bleepingcomputer.com/news/security/new-microsoft-edge-browser-zero-day-rce-exploit-in-the-works/
BleepingComputer
New Microsoft Edge Browser Zero-Day RCE Exploit in the Works
Details are about to emerge about a zero-day remote code execution vulnerability in the Microsoft Edge web browser, as two researchers plan to reveal a proof-of-concept and publish a general write up. Microsoft has not been told the details of this vulnerability.