BleepingComputer
10.4K subscribers
41 photos
24.5K links
Latest news and stories from BleepingComputer.com

From a bleeping computer to a working computer.
Download Telegram
Uber Fined for Covering Up 2016 Data Breach

The time has come for Uber to pay the piper for the data breach two years ago that leaked personal details of 57 million users and drivers as two data protection offices in Europe set fines that collectively amount to over 1 million euros. [...]

https://www.bleepingcomputer.com/news/security/uber-fined-for-covering-up-2016-data-breach/
Windows 10 Cumulative Updates Released With Fix For File Association Bug

Microsoft has released another cumulative update for Windows 10 with some fixes. The update is not available for Windows 10 October 2018 Update and you will see it only if you've Windows 10 April 2018 Update and Fall Creators Update installed. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-cumulative-updates-released-with-fix-for-file-association-bug/
3ve Ad-Fraud Botnet with Billions of Daily Ad Requests Shut Down

A massive ad-fraud operation that caused tens of millions of dollars in losses has been dismantled. The illegal business at one point controlled more than one million compromised IP addresses in North America and Europe. [...]

https://www.bleepingcomputer.com/news/security/3ve-ad-fraud-botnet-with-billions-of-daily-ad-requests-shut-down/
Sennheiser Headset Software Could Allow Man-in-the-Middle SSL Attacks

When users have been installing Sennheiser's HeadSetup software, little did they know that they were also installing a root certificate into the Trusted Root CA Certificate store.  To make matters worse, the software was also installing an encrypted version of the certificate's private key that was not as secure as they thought. [...]

https://www.bleepingcomputer.com/news/security/sennheiser-headset-software-could-allow-man-in-the-middle-ssl-attacks/
Tech Support Scams Using Multiple Obfuscation Methods to Bypass Detection

You have probably run into a web site that pretends to be Microsoft stating that something is wrong with your computer and telling you to call their phone number for help. While most antivirus software will detect these types of tech support scams, new tactics are being used by their creators to make them more difficult to detect. [...]

https://www.bleepingcomputer.com/news/security/tech-support-scams-using-multiple-obfuscation-methods-to-bypass-detection/
The One Planet York Data Breach That Was a Data Leak

A data breach notification from the City of York has gone awry as new details shed light over the incident, revealing a completely inappropriate response to a responsible disclosure of a vulnerability potentially affecting thousands of users. [...]

https://www.bleepingcomputer.com/news/security/the-one-planet-york-data-breach-that-was-a-data-leak/
Windows 10 October 2018 Update Build 17763.167 Released to Insiders With Fixes

Today, Microsoft shared more details about Build 17763.167 for Windows 10 version 1809, revealing that they have fixed tons of bugs in this release. It's likely that the same fixes will be released to the general public next month on Patch Tuesday or before. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-october-2018-update-build-17763167-released-to-insiders-with-fixes/
Dell Systems Hacked to Steal Customer Information

Dell announced today that they detected attackers in their systems on November 9th 2018 who were attempting to extract customer information from the Dell.com, Premier, Global Portal and support.dell.com site. As part of their response, they forced all accounts to perform a mandatory reset on the next login, but didn't disclose this b [...]

https://www.bleepingcomputer.com/news/security/dell-systems-hacked-to-steal-customer-information/
Mozilla Firefox Expands DNS-over-HTTPS (DoH) Test to Release Channel

In June, Mozilla had announced that they were performing a limited Shield study for their Nightly users to monitor the performance of DNS-over-HTTPS (DoH) in Firefox. This study uses Cloudflare's DNS service to encrypt both the requests and responses to any DNS queries in order to increase a user's privacy. [...]

https://www.bleepingcomputer.com/news/software/mozilla-firefox-expands-dns-over-https-doh-test-to-release-channel/
New KingMiner Threat Shows Cryptominer Evolution

A recently discovered cryptomining operation forces access to Windows servers to use their CPU cycles for minting Monero coins. Detected six months ago, the activity went through multiple stages of evolution. [...]

https://www.bleepingcomputer.com/news/security/new-kingminer-threat-shows-cryptominer-evolution/
Moscow's New Cable Car System Infected with Ransomware the Day After it Opens

Moscow recently opened its first cable-car service and promised free rides for the first month. Unfortunately, only two days after after the service was made available, attackers reportedly hacked into the cable car systems and infected them with ransomware. [...]

https://www.bleepingcomputer.com/news/security/moscows-new-cable-car-system-infected-with-ransomware-the-day-after-it-opens/