Flipboard Databases Hacked and User Information Exposed
The news aggregation site, Flipboard, has disclosed that their databases had been hacked and unauthorized users have potentially downloaded the data contained within them. This data included the personal account information and digital tokens for some of their over 100 million users. [...]
https://www.bleepingcomputer.com/news/security/flipboard-databases-hacked-and-user-information-exposed/
The news aggregation site, Flipboard, has disclosed that their databases had been hacked and unauthorized users have potentially downloaded the data contained within them. This data included the personal account information and digital tokens for some of their over 100 million users. [...]
https://www.bleepingcomputer.com/news/security/flipboard-databases-hacked-and-user-information-exposed/
BleepingComputer
Flipboard Databases Hacked and User Information Exposed
The news aggregation site, Flipboard, has disclosed that their databases had been hacked and unauthorized users have potentially downloaded the data contained within them. This data included the personal account information and digital tokens for some of…
Unpatched Flaw Affects All Docker Versions, Exploits Ready
All versions of Docker are currently vulnerable to a race condition that could give an attacker both read and write access to any file on the host system. Proof-of-concept code has been released. [...]
https://www.bleepingcomputer.com/news/security/unpatched-flaw-affects-all-docker-versions-exploits-ready/
All versions of Docker are currently vulnerable to a race condition that could give an attacker both read and write access to any file on the host system. Proof-of-concept code has been released. [...]
https://www.bleepingcomputer.com/news/security/unpatched-flaw-affects-all-docker-versions-exploits-ready/
BleepingComputer
Unpatched Flaw Affects All Docker Versions, Exploits Ready
All versions of Docker are currently vulnerable to a race condition that could give an attacker both read and write access to any file on the host system. Proof-of-concept code has been released.
Emotet Botnet Behind Most Email-Based Threats in Q1 2019
The multifunctional Emotet botnet malware was the most prevalent email-based threat in the first three months of the year, showing it is among the top choices for cybercriminals. [...]
https://www.bleepingcomputer.com/news/security/emotet-botnet-behind-most-email-based-threats-in-q1-2019/
The multifunctional Emotet botnet malware was the most prevalent email-based threat in the first three months of the year, showing it is among the top choices for cybercriminals. [...]
https://www.bleepingcomputer.com/news/security/emotet-botnet-behind-most-email-based-threats-in-q1-2019/
BleepingComputer
Emotet Botnet Behind Most Email-Based Threats in Q1 2019
The multifunctional Emotet botnet malware was the most prevalent email-based threat in the first three months of the year, showing it is among the top choices for cybercriminals.
Wordpress Slick Popup Plugin Contains Vulnerable Support Backdoor
Hackers subscribed to WordPress websites running Slick Popup plugin can take over the website by enabling a backdoor administrator account with hardcoded credentials. [...]
https://www.bleepingcomputer.com/news/security/wordpress-slick-popup-plugin-contains-vulnerable-support-backdoor/
Hackers subscribed to WordPress websites running Slick Popup plugin can take over the website by enabling a backdoor administrator account with hardcoded credentials. [...]
https://www.bleepingcomputer.com/news/security/wordpress-slick-popup-plugin-contains-vulnerable-support-backdoor/
BleepingComputer
Wordpress Slick Popup Plugin Contains Vulnerable Support Backdoor
Hackers subscribed to WordPress websites running Slick Popup plugin can take over the website by enabling a backdoor administrator account with hardcoded credentials.
Nansh0u Miner Attack Infects 50K MS-SQL, PHPMyAdmin Servers
More than 50,000 MS-SQL and PHPMyAdmin were compromised by Chinese hackers and used to surreptitiously mine for TurtleCoin as part of a large-scale cryptojacking campaign dubbed Nansh0u. [...]
https://www.bleepingcomputer.com/news/security/nansh0u-miner-attack-infects-50k-ms-sql-phpmyadmin-servers/
More than 50,000 MS-SQL and PHPMyAdmin were compromised by Chinese hackers and used to surreptitiously mine for TurtleCoin as part of a large-scale cryptojacking campaign dubbed Nansh0u. [...]
https://www.bleepingcomputer.com/news/security/nansh0u-miner-attack-infects-50k-ms-sql-phpmyadmin-servers/
BleepingComputer
Nansh0u Miner Attack Infects 50K MS-SQL, PHPMyAdmin Servers
More than 50,000 MS-SQL and PHPMyAdmin were compromised by Chinese hackers and used to surreptitiously mine for TurtleCoin as part of a large-scale cryptojacking campaign dubbed Nansh0u.
Windows 10 Insider Build 18908 Brings Your Phone Improvements
Microsoft has released Windows 10 Insider Preview Build 18908 to Insiders in the Fast ring. This build includes numerous bug fixes as well as a lot of new features for the Your Phone app. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-insider-build-18908-brings-your-phone-improvements/
Microsoft has released Windows 10 Insider Preview Build 18908 to Insiders in the Fast ring. This build includes numerous bug fixes as well as a lot of new features for the Your Phone app. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-insider-build-18908-brings-your-phone-improvements/
BleepingComputer
Windows 10 Insider Build 18908 Brings Your Phone Improvements
Microsoft has released Windows 10 Insider Preview Build 18908 to Insiders in the Fast ring. This build includes numerous bug fixes as well as a lot of new features for the Your Phone app.
Microsoft Boosts Shadow IT Discovery for Cloud Security
Microsoft announced that the Shadow IT discovery capabilities of Microsoft Cloud App Security have been expanded to also allow monitoring of Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) resources. [...]
https://www.bleepingcomputer.com/news/security/microsoft-boosts-shadow-it-discovery-for-cloud-security/
Microsoft announced that the Shadow IT discovery capabilities of Microsoft Cloud App Security have been expanded to also allow monitoring of Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) resources. [...]
https://www.bleepingcomputer.com/news/security/microsoft-boosts-shadow-it-discovery-for-cloud-security/
BleepingComputer
Microsoft Boosts Shadow IT Discovery for Cloud Security
Microsoft announced that the Shadow IT discovery capabilities of Microsoft Cloud App Security have been expanded to also allow monitoring of Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) resources.
Google to Allow webRequest Ad Blocking for Enterprise Deployments
Google will deprecate all blocking capabilities in the webRequest API as part of future Chrome Extensions platform Manifest V3 changes, with enterprise deployments being the exception to the rule. [...]
https://www.bleepingcomputer.com/news/google/google-to-allow-webrequest-ad-blocking-for-enterprise-deployments/
Google will deprecate all blocking capabilities in the webRequest API as part of future Chrome Extensions platform Manifest V3 changes, with enterprise deployments being the exception to the rule. [...]
https://www.bleepingcomputer.com/news/google/google-to-allow-webrequest-ad-blocking-for-enterprise-deployments/
BleepingComputer
Google to Allow webRequest Ad Blocking for Enterprise Deployments
Google will deprecate all blocking capabilities in the webRequest API as part of future Chrome Extensions platform Manifest V3 changes, with enterprise deployments being the exception to the rule.
Gmail's Confidential Mode for G Suite Goes Live on June 25
Google announced today that Gmail's confidential mode will be launched for all G Suite users on June 25 after previously launching it in beta during August 2018. [...]
https://www.bleepingcomputer.com/news/google/gmails-confidential-mode-for-g-suite-goes-live-on-june-25/
Google announced today that Gmail's confidential mode will be launched for all G Suite users on June 25 after previously launching it in beta during August 2018. [...]
https://www.bleepingcomputer.com/news/google/gmails-confidential-mode-for-g-suite-goes-live-on-june-25/
BleepingComputer
Gmail's Confidential Mode for G Suite Goes Live on June 25
Google announced today that Gmail's confidential mode will be launched for all G Suite users on June 25 after previously launching it in beta during August 2018.
YouTube Cryptocurrency Videos Pushing Info-Stealing Trojan
A scam and malware campaign is underway on YouTube that uses videos to promote a "bitcoin generator" tool that promises to generate free bitcoins for its users. In reality, this scam is pushing the Qulab information-stealing and clipboard hijacking Trojan. [...]
https://www.bleepingcomputer.com/news/security/youtube-cryptocurrency-videos-pushing-info-stealing-trojan/
A scam and malware campaign is underway on YouTube that uses videos to promote a "bitcoin generator" tool that promises to generate free bitcoins for its users. In reality, this scam is pushing the Qulab information-stealing and clipboard hijacking Trojan. [...]
https://www.bleepingcomputer.com/news/security/youtube-cryptocurrency-videos-pushing-info-stealing-trojan/
BleepingComputer
YouTube Cryptocurrency Videos Pushing Info-Stealing Trojan
A scam and malware campaign is underway on YouTube that uses videos to promote a "bitcoin generator" tool that promises to generate free bitcoins for its users. In reality, this scam is pushing the Qulab information-stealing and clipboard hijacking Trojan.
Windows 10 1903 Cumulative Update KB4497935 Released With Fixes
Microsoft has started to roll out a new cumulative update for Windows 10 version 1903 that includes numerous fixes for the operating system. This update was released to Windows Insiders last week to test before being made publicly available today. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-1903-cumulative-update-kb4497935-released-with-fixes/
Microsoft has started to roll out a new cumulative update for Windows 10 version 1903 that includes numerous fixes for the operating system. This update was released to Windows Insiders last week to test before being made publicly available today. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-1903-cumulative-update-kb4497935-released-with-fixes/
BleepingComputer
Windows 10 1903 Cumulative Update KB4497935 Released With Fixes
Microsoft has started to roll out a new cumulative update for Windows 10 version 1903 that includes numerous fixes for the operating system. This update was released to Windows Insiders last week to test before being made publicly available today.
Convert Plus Plugin Flaw Lets Attackers Become a Wordpress Admin
A critical vulnerability in Convert Plus, a commercial plugin for WordPress websites estimated to have 100,000 active installations, allows an unauthenticated attacker to create accounts with administrator privileges. [...]
https://www.bleepingcomputer.com/news/security/convert-plus-plugin-flaw-lets-attackers-become-a-wordpress-admin/
A critical vulnerability in Convert Plus, a commercial plugin for WordPress websites estimated to have 100,000 active installations, allows an unauthenticated attacker to create accounts with administrator privileges. [...]
https://www.bleepingcomputer.com/news/security/convert-plus-plugin-flaw-lets-attackers-become-a-wordpress-admin/
BleepingComputer
Convert Plus Plugin Flaw Lets Attackers Become a Wordpress Admin
A critical vulnerability in Convert Plus, a commercial plugin for WordPress websites estimated to have 100,000 active installations, allows an unauthenticated attacker to create accounts with administrator privileges.
Bitcoin Blender Exits Cryptocurrency Mixing On Its Own Terms
The long run of Bitcoin Blender cryptocurrency mixing service has reached an end this week as the business quickly shut down after a short announcement on the website's front page that asked customers to withdraw their funds. [...]
https://www.bleepingcomputer.com/news/security/bitcoin-blender-exits-cryptocurrency-mixing-on-its-own-terms/
The long run of Bitcoin Blender cryptocurrency mixing service has reached an end this week as the business quickly shut down after a short announcement on the website's front page that asked customers to withdraw their funds. [...]
https://www.bleepingcomputer.com/news/security/bitcoin-blender-exits-cryptocurrency-mixing-on-its-own-terms/
BleepingComputer
Bitcoin Blender Exits Cryptocurrency Mixing On Its Own Terms
The long run of Bitcoin Blender cryptocurrency mixing service has reached an end this week as the business quickly shut down after a short announcement on the website's front page that asked customers to withdraw their funds.
POS Malware Steals Payment Info From 103 Checkers Restaurants
The Checkers and Rally's chain of double drive-thru restaurants disclosed a security breach which allowed attackers to steal payment card data from customers after infecting the point-of-sale (POS) systems in 103 locations from 20 states with malware. [...]
https://www.bleepingcomputer.com/news/security/pos-malware-steals-payment-info-from-103-checkers-restaurants/
The Checkers and Rally's chain of double drive-thru restaurants disclosed a security breach which allowed attackers to steal payment card data from customers after infecting the point-of-sale (POS) systems in 103 locations from 20 states with malware. [...]
https://www.bleepingcomputer.com/news/security/pos-malware-steals-payment-info-from-103-checkers-restaurants/
BleepingComputer
POS Malware Steals Payment Info From 103 Checkers Restaurants
The Checkers and Rally's chain of double drive-thru restaurants disclosed a security breach which allowed attackers to steal payment card data from customers after infecting the point-of-sale (POS) systems in 103 locations from 20 states with malware.
Microsoft Windows Terminal YouTube Video Removed for Copyright Claim
Oops. The launch video for Microsoft's Windows Terminal was removed from YouTube due to a copyright infringement claim from MusicBed. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-terminal-youtube-video-removed-for-copyright-claim/
Oops. The launch video for Microsoft's Windows Terminal was removed from YouTube due to a copyright infringement claim from MusicBed. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-terminal-youtube-video-removed-for-copyright-claim/
BleepingComputer
Microsoft Windows Terminal YouTube Video Removed for Copyright Claim
Oops. The launch video for Microsoft's Windows Terminal was removed from YouTube due to a copyright infringement claim from MusicBed.
WordPress Plugin Flaw Used for Malicious Redirects and Pop-Ups
Hackers are currently attacking WordPress websites with outdated versions of the WP Live Chat Support plugin to redirect visitors to malicious locations or expose them to unwanted popups and fake subscriptions. [...]
https://www.bleepingcomputer.com/news/security/wordpress-plugin-flaw-used-for-malicious-redirects-and-pop-ups/
Hackers are currently attacking WordPress websites with outdated versions of the WP Live Chat Support plugin to redirect visitors to malicious locations or expose them to unwanted popups and fake subscriptions. [...]
https://www.bleepingcomputer.com/news/security/wordpress-plugin-flaw-used-for-malicious-redirects-and-pop-ups/
BleepingComputer
WordPress Plugin Flaw Used for Malicious Redirects and Pop-Ups
Hackers are currently attacking WordPress websites with outdated versions of the WP Live Chat Support plugin to redirect visitors to malicious locations or expose them to unwanted popups and fake subscriptions.
Google Targeting Deceptive Install Tactics for Chrome Extensions
Google has announced that they will be removing extensions from the Chrome Web Store that are installed using misleading and deceptive installation tactics. This is being done to further protect Chrome users from the unending barrage of unwanted extensions being promoted online. [...]
https://www.bleepingcomputer.com/news/google/google-targeting-deceptive-install-tactics-for-chrome-extensions/
Google has announced that they will be removing extensions from the Chrome Web Store that are installed using misleading and deceptive installation tactics. This is being done to further protect Chrome users from the unending barrage of unwanted extensions being promoted online. [...]
https://www.bleepingcomputer.com/news/google/google-targeting-deceptive-install-tactics-for-chrome-extensions/
BleepingComputer
Google Targeting Deceptive Install Tactics for Chrome Extensions
Google has announced that they will be removing extensions from the Chrome Web Store that are installed using misleading and deceptive installation tactics. This is being done to further protect Chrome users from the unending barrage of unwanted extensions…
Compromised Docker Hosts Use Shodan to Infect More Victims
Hackers are scanning for Docker hosts with exposed APIs to use them for cryptocurrency mining by deploying malicious self-propagating Docker images infected with Monero miners and scripts that make use of Shodan to find other vulnerable targets. [...]
https://www.bleepingcomputer.com/news/security/compromised-docker-hosts-use-shodan-to-infect-more-victims/
Hackers are scanning for Docker hosts with exposed APIs to use them for cryptocurrency mining by deploying malicious self-propagating Docker images infected with Monero miners and scripts that make use of Shodan to find other vulnerable targets. [...]
https://www.bleepingcomputer.com/news/security/compromised-docker-hosts-use-shodan-to-infect-more-victims/
BleepingComputer
Compromised Docker Hosts Use Shodan to Infect More Victims
Hackers are scanning for Docker hosts with exposed APIs to use them for cryptocurrency mining by deploying malicious self-propagating Docker images infected with Monero miners and scripts that make use of Shodan to find other vulnerable targets.
Windows 10 v1903 Upgrade Blocked Due to Some Intel Drivers
Installing the Windows 10 May 2019 Update is blocked on some computers with Intel display and display audio drivers after Microsoft and Intel discovered driver compatibility issues with the Windows 10 version 1903 release. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-v1903-upgrade-blocked-due-to-some-intel-drivers/
Installing the Windows 10 May 2019 Update is blocked on some computers with Intel display and display audio drivers after Microsoft and Intel discovered driver compatibility issues with the Windows 10 version 1903 release. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-v1903-upgrade-blocked-due-to-some-intel-drivers/
BleepingComputer
Windows 10 v1903 Upgrade Blocked Due to Some Intel Drivers
Installing the Windows 10 May 2019 Update is blocked on some computers with Intel display and display audio drivers after Microsoft and Intel discovered driver compatibility issues with the Windows 10 version 1903 release.
Phishing Email States Your Office 365 Account Will Be Deleted
A new phishing campaign is underway that pretends to be from the "Office 365 Team" warning you that your email account cancellation has been approved and that all your email will be deleted unless you cancel the request within the hour. [...]
https://www.bleepingcomputer.com/news/security/phishing-email-states-your-office-365-account-will-be-deleted/
A new phishing campaign is underway that pretends to be from the "Office 365 Team" warning you that your email account cancellation has been approved and that all your email will be deleted unless you cancel the request within the hour. [...]
https://www.bleepingcomputer.com/news/security/phishing-email-states-your-office-365-account-will-be-deleted/
BleepingComputer
Phishing Email States Your Office 365 Account Will Be Deleted
A new phishing campaign is underway that pretends to be from the "Office 365 Team" warning you that your email account cancellation has been approved and that all your email will be deleted unless you cancel the request within the hour.
Microsoft Warns Users Again to Patch Wormable BlueKeep Flaw
Microsoft issued a second warning for users of older Windows releases to patch their systems to block potential attackers from abusing the critical Remote Desktop Services (RDS) remote code execution vulnerability dubbed BlueKeep. [...]
https://www.bleepingcomputer.com/news/security/microsoft-warns-users-again-to-patch-wormable-bluekeep-flaw/
Microsoft issued a second warning for users of older Windows releases to patch their systems to block potential attackers from abusing the critical Remote Desktop Services (RDS) remote code execution vulnerability dubbed BlueKeep. [...]
https://www.bleepingcomputer.com/news/security/microsoft-warns-users-again-to-patch-wormable-bluekeep-flaw/
BleepingComputer
Microsoft Warns Users Again to Patch Wormable BlueKeep Flaw
Microsoft issued a second warning for users of older Windows releases to patch their systems to block potential attackers from abusing the critical Remote Desktop Services (RDS) remote code execution vulnerability dubbed BlueKeep.