BleepingComputer
10.5K subscribers
41 photos
24.6K links
Latest news and stories from BleepingComputer.com

From a bleeping computer to a working computer.
Download Telegram
Google Docs Says Chromium-Based Microsoft Edge Is Not Supported

When users of the Chromium-based Microsoft Edge use Google Docs, the service is stating that the browser is not supported. As the new Microsoft Edge uses the same HTML engine as Chrome and is clearly supported, some users feel that Google is playing unfairly. [...]

https://www.bleepingcomputer.com/news/microsoft/google-docs-says-chromium-based-microsoft-edge-is-not-supported/
Microsoft 365 Adds More Control Over Encrypted Emails, Increases Privacy

Microsoft announced the arrival of a number of extra Microsoft 365 options and controls for organizations designed to provide them with better and stronger data privacy and compliance practices, with control over encrypted emails shared outside an organization being the one that stands out. [...]

https://www.bleepingcomputer.com/news/microsoft/microsoft-365-adds-more-control-over-encrypted-emails-increases-privacy/
DHS Says Federal Agencies Have 15 Days to Fix Critical Flaws

The Department of Homeland Security' Cybersecurity and Infrastructure Security Agency issued the Binding Operational Directive 19-02 which requires federal agencies to remediate critical security vulnerabilities within 15 days since the initial detection. [...]

https://www.bleepingcomputer.com/news/security/dhs-says-federal-agencies-have-15-days-to-fix-critical-flaws/
Sodinokibi Ransomware Being Installed on Exploited WebLogic Servers

Attackers are exploiting a recently disclosed WebLogic vulnerability to install a new ransomware called Sodinokibi. As this vulnerability is trivial to exploit, it is important that server admins install the patch immediately in order to prevent infections or unauthorized access. [...]

https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-being-installed-on-exploited-weblogic-servers/
Sophos UTM 9.602 Released That Fixes 3 Vulnerabilities

An update for Sophos UTM has been released that resolves three vulnerabilities in the network security platform. Two of these vulnerabilities are related to bundled open source software and a third is for a component related to inbound mail processing. [...]

https://www.bleepingcomputer.com/news/security/sophos-utm-9602-released-that-fixes-3-vulnerabilities/
Polymorphic Magecart Skimmer Uses Over Fifty Payment Gateways

A novel Magecart skimmer script with support for 57 payment gateways from all over the world, ranging from the highly popular Stripe to local payment processors from Germany, Australia, Brazil, the United States, UK, and many others. [...]

https://www.bleepingcomputer.com/news/security/polymorphic-magecart-skimmer-uses-over-fifty-payment-gateways/
Windows 10 Security Feature Slows Launching of Large Programs

The Windows 10 Control Flow Guard security feature has been discovered to contain significant performance issues when launching large executables. Microsoft has since created a fix and it is ready to go for release in a few weeks. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-security-feature-slows-launching-of-large-programs/
Dell Computers Exposed to RCE Attacks by SupportAssist Flaws

Dell issued a security update to patch a SupportAssist Client software vulnerability which allows potential unauthenticated attackers on the same Network Access layer to remotely execute arbitrary executables on vulnerable computers. [...]

https://www.bleepingcomputer.com/news/security/dell-computers-exposed-to-rce-attacks-by-supportassist-flaws/
Office 365 Accounts Compromised via ATO Attacks Used in BEC Scams

Office 365 accounts are targeted and compromised in takeover attacks (ATO), accounts which cybercriminals later use for a variety of nefarious purposes ranging from spear-phishing and BEC attacks to malvertising campaigns. [...]

https://www.bleepingcomputer.com/news/security/office-365-accounts-compromised-via-ato-attacks-used-in-bec-scams/
Magecart Group 12 Targets OpenCart Websites

Gangs using malicious JavaScript code to steal payment info target multiple online shopping platforms used by thousands of small stores; more advanced ones rely on tactics to remain undetected for a longer period. [...]

https://www.bleepingcomputer.com/news/security/magecart-group-12-targets-opencart-websites/
Scammers Create Google Search Ads to Lure PayPal, Amazon Clients

Scammers are creating ads in Google search results that pretend to be customer support numbers for popular sites such as Amazon, PayPal, and eBay. When called, scammers will pretend to be from the associated company and state they need a code from a Google Play gift card before they can help. [...]

https://www.bleepingcomputer.com/news/security/scammers-create-google-search-ads-to-lure-paypal-amazon-clients/
Public 10KBLAZE Exploits May Impact 90% of SAP Production Systems

Roughly 90% out of an estimated total of 1,000,000 SAP production systems could currently be at risk of being hacked by threat actors which can use a series of publicly released critical exploits dubbed 10KBLAZE to attack misconfigured SAP installations. [...]

https://www.bleepingcomputer.com/news/security/public-10kblaze-exploits-may-impact-90-percent-of-sap-production-systems/