MageCart Group Evolves Tactics To Better Steal Your Credit Cards

There are at least a dozen Magecart groups that try to plant their code for skimming payment card data on online stores, but not all of them are equally advanced. Group 4 has taken cybercrime activity to a professional level. [...]

https://www.bleepingcomputer.com/news/security/magecart-group-evolves-tactics-to-better-steal-your-credit-cards/

Cisco Fixes Critical RCE Vulnerability in RV110W, RV130W, and RV215W Routers

Cisco fixed a critical remote code execution vulnerability present in the web-based management interface of the RV110W Wireless-N VPN Firewall, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router. [...]

https://www.bleepingcomputer.com/news/security/cisco-fixes-critical-rce-vulnerability-in-rv110w-rv130w-and-rv215w-routers/

Microsoft Releases Windows 10 Build 18845 (20H1) With Emoji 12.0 and Fixes

Microsoft has released Windows 10 Insider Preview Build 18845 for Insiders in the Skip Ahead ring. This 20H1 build is mostly bug fixes, but does include the finalized Emoji 12.0 emojis and Microsoft has associated keywords with them so you can search for particular ones. [...]

https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-build-18845-20h1-with-emoji-120-and-fixes/

YouTube Disables Comments on Videos with Young Children

YouTube announced that comments on videos featuring young minors are being disabled all across the platform to counteract predatory behavior, with only a few exceptions where the YouTube team will closely work with the channels to actively moderate comments. [...]

https://www.bleepingcomputer.com/news/security/youtube-disables-comments-on-videos-with-young-children/

App Security Improvement Alerts Android Devs of 6 New Vulnerabilities

Google announced the addition of six extra vulnerability warnings to the Application Security Improvement (ASI) program after previously announcing updates for the Google Play Protect, the built-in malware protection for Android. [...]

https://www.bleepingcomputer.com/news/security/app-security-improvement-alerts-android-devs-of-6-new-vulnerabilities/

Wireshark 3 Released with New Npcap Windows Packet Capturing Driver

Wireshark 3.0.0 was released today, replacing the no longer maintained WinPcap packet capture library with the Npcap packet sniffing and sending library for Windows, created by Gordon Lyon the founder of the Nmap project. [...]

https://www.bleepingcomputer.com/news/software/wireshark-3-released-with-new-npcap-windows-packet-capturing-driver/

Kaspersky AV Having Certificate Conflicts with Google Chromecast

Users of Kaspersky Antivirus have been complaining since the end of January that when they open Chrome Kaspersky displays numerous alerts stating that there is a problem with a self-signed certificate. It turns out this is being caused by a conflict with a Chromecast device on their network that they may not know even existed. [...]

https://www.bleepingcomputer.com/news/security/kaspersky-av-having-certificate-conflicts-with-google-chromecast/

First Hacker Millionaire on HackerOne

At 19, Santiago Lopez is already counting earnings totaling over USD 1 million from reporting security vulnerabilities through vulnerability coordination and bug bounty program HackerOne. He's the first to make this kind of money on the platform. [...]

https://www.bleepingcomputer.com/news/security/first-hacker-millionaire-on-hackerone/

Chrome and Firefox Can Take Screenshots of Sites From the Command Line

Both Chrome and Firefox have the ability to take screenshots of web sites directly from the command line. This allows you to create scripts or scheduled tasks that automatically take screenshots of web sites at various intervals. [...]

https://www.bleepingcomputer.com/news/software/chrome-and-firefox-can-take-screenshots-of-sites-from-the-command-line/

Phisher Announces More Attacks Against Hedge Funds and Financial Firms

A new phishing campaign called "Beyond the Grave" targeted international hedge funds on January 9th, 2019. In a statement posted to BleepingComputer, the attackers have stated that they will continue to target banking and financial institutions in the future. [...]

https://www.bleepingcomputer.com/news/security/phisher-announces-more-attacks-against-hedge-funds-and-financial-firms/

Update ColdFusion Now, Critical Zero-Day Bug Exploited in the Wild

Adobe today released emergency updates that fix a critical vulnerability for the ColdFusion web app development platform. The bug can lead to arbitrary code execution and has been exploited in the wild. [...]

https://www.bleepingcomputer.com/news/security/update-coldfusion-now-critical-zero-day-bug-exploited-in-the-wild/

The Week in Ransomware - March 1st 2019 - Cr1ptT0r, B0r0nt0K, and More

Over the past two weeks, there has been some interesting ransomware news regarding a new GandCrab decryptor and two new ransomware infections. [...]

https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-march-1st-2019-cr1ptt0r-b0r0nt0k-and-more/

Ransomware Pretends to Be Proton Security Team Securing Data From Hackers

A recent variant of the GarrantyDecrypt ransomware has been found that pretends to be from the security team for Proton Technologies, the company behind ProtonMail and ProtonVPN. [...]

https://www.bleepingcomputer.com/news/security/ransomware-pretends-to-be-proton-security-team-securing-data-from-hackers/

Windows 10 Update KB4482887 Released With Performance Fix for Spectre Bug

Microsoft has released the Windows 10 KB4482887 cumulative update for build 1809 that includes numerous fixes including Retpoline Spectre mitigation, a fix for an annoying Action Center bug, and numerous other bug fixes. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-update-kb4482887-released-with-performance-fix-for-spectre-bug/

Op 'Sharpshooter' Connected to North Korea's Lazarus Group

After analyzing a command and control (C2) server used in the global cyber-espionage campaign dubbed 'Sharpshooter', security researcher found more evidence linking it to North Korea's Lazarus threat actor. [...]

https://www.bleepingcomputer.com/news/security/op-sharpshooter-connected-to-north-koreas-lazarus-group/

Open MongoDB Databases Expose Chinese Surveillance Data

18 MongoDB databases with information generated by accounts on several online social services in China have been sitting on the web ready for plucking by anyone knowing where to look. [...]

https://www.bleepingcomputer.com/news/security/open-mongodb-databases-expose-chinese-surveillance-data/

Windows Exploit Suggester Lists Known Exploits for Your Windows Install

A program called Windows Exploit Suggester - Next Generation, or WES-NG, has been released that will list the known vulnerabilities affecting a Windows installation, any exploits that are available, and what security updates are needed to patch the bugs. [...]

https://www.bleepingcomputer.com/news/security/windows-exploit-suggester-lists-known-exploits-for-your-windows-install/

Windows 10 IoT Core Test Interface Lets Attackers Take Over Devices

Embedded and IoT cable-connected devices running Microsoft's Windows 10 IoT Core are exposed to remote command execution attacks with SYSTEM privileges that require no authentication, with the help of an open source RAT tool released on GitHub. [...]

https://www.bleepingcomputer.com/news/security/windows-10-iot-core-test-interface-lets-attackers-take-over-devices/

Alphabet's Backstory Helps Enterprises Hunt Down Security Threats

Alphabet company Chronicle announced the release of Backstory, a cloud-powered data analysis platform designed to allow security professionals to analyze their enterprise's internal telemetry data to detect potential cyber threats. [...]

https://www.bleepingcomputer.com/news/security/alphabets-backstory-helps-enterprises-hunt-down-security-threats/

#OpJerusalem Targeted Israeli Windows Users with JCry Ransomware

Over the weekend, hundreds of popular Israeli sites were targeted by an attack called #OpJerusalem whose goal was to infect Windows users with the JCry ransomware. Thankfully, a mistake in the attacker's code caused the page to show a defacement rather than causing the ransomware to be distributed. [...]

https://www.bleepingcomputer.com/news/security/opjerusalem-targeted-israeli-windows-users-with-jcry-ransomware/

Microsoft Sees 250% Phishing Increase, Malware Decline by 34%

Phishing attacks have seen an impressive 250% increase between January and December 2018, with attackers moving to multiple points of attacks during the same campaign, switching between malicious URLs, domains, and malware ridden attachments. [...]

https://www.bleepingcomputer.com/news/security/microsoft-sees-250-percent-phishing-increase-malware-decline-by-34-percent/