Citrix Sued For Not Securing Employee Info Before Data Breach
A class action complaint was filed by an ex-employee of Citrix for damages suffered following the security breach which allowed hackers to access Citrix's internal assets for roughly six months and to steal sensitive personal information of both current and former employees. [...]
https://www.bleepingcomputer.com/news/security/citrix-sued-for-not-securing-employee-info-before-data-breach/
A class action complaint was filed by an ex-employee of Citrix for damages suffered following the security breach which allowed hackers to access Citrix's internal assets for roughly six months and to steal sensitive personal information of both current and former employees. [...]
https://www.bleepingcomputer.com/news/security/citrix-sued-for-not-securing-employee-info-before-data-breach/
BleepingComputer
Citrix Sued For Not Securing Employee Info Before Data Breach
A class action complaint was filed by an ex-employee of Citrix for damages suffered following the security breach which allowed hackers to access Citrix's internal assets for roughly six months and to steal sensitive personal information of both current and…
Sodinokibi Ransomware Pushed via Foreclosure Warning Spam
A malspam campaign targeting potential German victims is actively distributing Sodinokibi ransomware via spam emails disguised as foreclosure notifications with malicious attachments which pose as foreclosure notifications. [...]
https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-pushed-via-foreclosure-warning-spam/
A malspam campaign targeting potential German victims is actively distributing Sodinokibi ransomware via spam emails disguised as foreclosure notifications with malicious attachments which pose as foreclosure notifications. [...]
https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-pushed-via-foreclosure-warning-spam/
BleepingComputer
Sodinokibi Ransomware Pushed via Foreclosure Warning Spam
A malspam campaign targeting potential German victims is actively distributing Sodinokibi ransomware via spam emails disguised as foreclosure notifications with malicious attachments which pose as foreclosure notifications.
NVIDIA Fixes High Severity GeForce Experience Vulnerabilities
NVIDIA issued a security update for the Windows NVIDIA GeForce Experience (GFE) software to patch two vulnerabilities that could make it possible for potential local attackers to launch attacks that may lead to code execution, escalation of privileges, and denial-of-service (DoS). [...]
https://www.bleepingcomputer.com/news/security/nvidia-fixes-high-severity-geforce-experience-vulnerabilities/
NVIDIA issued a security update for the Windows NVIDIA GeForce Experience (GFE) software to patch two vulnerabilities that could make it possible for potential local attackers to launch attacks that may lead to code execution, escalation of privileges, and denial-of-service (DoS). [...]
https://www.bleepingcomputer.com/news/security/nvidia-fixes-high-severity-geforce-experience-vulnerabilities/
BleepingComputer
NVIDIA Fixes High Severity GeForce Experience Vulnerabilities
NVIDIA issued a security update for the Windows NVIDIA GeForce Experience (GFE) software to patch two vulnerabilities that could make it possible for potential local attackers to launch attacks that may lead to code execution, escalation of privileges, and…
Maze Ransomware Says Computer Type Determines Ransom Amount
A variant of the Maze Ransomware, otherwise known as the ChaCha Ransomware, has been spotted being distributed by the Fallout exploit kit. An interesting feature of this ransomware is that it says the ransom amount will be different depending on whether the victim is a home computer, server, or workstation. [...]
https://www.bleepingcomputer.com/news/security/maze-ransomware-says-computer-type-determines-ransom-amount/
A variant of the Maze Ransomware, otherwise known as the ChaCha Ransomware, has been spotted being distributed by the Fallout exploit kit. An interesting feature of this ransomware is that it says the ransom amount will be different depending on whether the victim is a home computer, server, or workstation. [...]
https://www.bleepingcomputer.com/news/security/maze-ransomware-says-computer-type-determines-ransom-amount/
BleepingComputer
Maze Ransomware Says Computer Type Determines Ransom Amount
A variant of the Maze Ransomware, otherwise known as the ChaCha Ransomware, has been spotted being distributed by the Fallout exploit kit. An interesting feature of this ransomware is that it says the ransom amount will be different depending on whether the…
The Week in Ransomware - May 31st 2019 - Maze, Sodinokibi, and More
In addition to new variants of existing ransomware, we also had the Fallout exploit kit distributing a new ransomware payload and a spam campaign pushing ransomware in Germany. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-may-31st-2019-maze-sodinokibi-and-more/
In addition to new variants of existing ransomware, we also had the Fallout exploit kit distributing a new ransomware payload and a spam campaign pushing ransomware in Germany. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-may-31st-2019-maze-sodinokibi-and-more/
BleepingComputer
The Week in Ransomware - May 31st 2019 - Maze, Sodinokibi, and More
In addition to new variants of existing ransomware, we also had the Fallout exploit kit distributing a new ransomware payload and a spam campaign pushing ransomware in Germany.
The Facebook CTF 2019 Event is Starting in 30 Minutes
Tonight at 8 PM EST, Facebook will be kicking off their 2019 Capture the Flag event where security researchers, professionals, and enthusiasts compete to be the fastest to solve the most puzzles in order to win cash prizes and prestige. [...]
https://www.bleepingcomputer.com/news/security/the-facebook-ctf-2019-event-is-starting-in-30-minutes/
Tonight at 8 PM EST, Facebook will be kicking off their 2019 Capture the Flag event where security researchers, professionals, and enthusiasts compete to be the fastest to solve the most puzzles in order to win cash prizes and prestige. [...]
https://www.bleepingcomputer.com/news/security/the-facebook-ctf-2019-event-is-starting-in-30-minutes/
BleepingComputer
The Facebook CTF 2019 Event is Starting in 30 Minutes
Tonight at 8 PM EST, Facebook will be kicking off their 2019 Capture the Flag event where security researchers, professionals, and enthusiasts compete to be the fastest to solve the most puzzles in order to win cash prizes and prestige.
GandCrab Ransomware Shutting Down After Claiming to Earn $2.5 Billion
After almost a year and a half, the operators behind the GandCrab Ransomware are shutting down their operation and affiliates are being told to stop distributing the ransomware. [...]
https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-shutting-down-after-claiming-to-earn-25-billion/
After almost a year and a half, the operators behind the GandCrab Ransomware are shutting down their operation and affiliates are being told to stop distributing the ransomware. [...]
https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-shutting-down-after-claiming-to-earn-25-billion/
BleepingComputer
GandCrab Ransomware Shutting Down After Claiming to Earn $2.5 Billion
After almost a year and a half, the operators behind the GandCrab Ransomware are shutting down their operation and affiliates are being told to stop distributing the ransomware.
Microsoft Azure Being Used to Host Malware and C2 Servers
Microsoft's Azure cloud services have become an attractive option for cybercriminals to store malicious content. From phishing templates to malware and command and control services, it seems that crooks found a new place for them. [...]
https://www.bleepingcomputer.com/news/security/microsoft-azure-being-used-to-host-malware-and-c2-servers/
Microsoft's Azure cloud services have become an attractive option for cybercriminals to store malicious content. From phishing templates to malware and command and control services, it seems that crooks found a new place for them. [...]
https://www.bleepingcomputer.com/news/security/microsoft-azure-being-used-to-host-malware-and-c2-servers/
BleepingComputer
Microsoft Azure Being Used to Host Malware and C2 Servers
Microsoft's Azure cloud services have become an attractive option for cybercriminals to store malicious content. From phishing templates to malware and command and control services, it seems that crooks found a new place for them.
Chrome Ad Blockers To Get Full API Access via Free Enterprise Policies
Google says that it will allow enterprise admins to use the fully-featured webRequest ad blocking API for free even after the Manifest V3 Chrome Extensions platform changes will take effect. [...]
https://www.bleepingcomputer.com/news/google/chrome-ad-blockers-to-get-full-api-access-via-free-enterprise-policies/
Google says that it will allow enterprise admins to use the fully-featured webRequest ad blocking API for free even after the Manifest V3 Chrome Extensions platform changes will take effect. [...]
https://www.bleepingcomputer.com/news/google/chrome-ad-blockers-to-get-full-api-access-via-free-enterprise-policies/
BleepingComputer
Chrome Ad Blockers To Get Full API Access via Free Enterprise Policies
Google says that it will allow enterprise admins to use the fully-featured webRequest ad blocking API for free even after the Manifest V3 Chrome Extensions platform changes will take effect.
New Phishing Scam Asks You to Manage Your Undelivered Email
A new phishing campaign is underway that pretends to be a list undelivered email being held for you on your Outlook Web Mail service. Users are then prompted to decide what they wish to do with each mail, with the respective links leading to a fake login form. [...]
https://www.bleepingcomputer.com/news/security/new-phishing-scam-asks-you-to-manage-your-undelivered-email/
A new phishing campaign is underway that pretends to be a list undelivered email being held for you on your Outlook Web Mail service. Users are then prompted to decide what they wish to do with each mail, with the respective links leading to a fake login form. [...]
https://www.bleepingcomputer.com/news/security/new-phishing-scam-asks-you-to-manage-your-undelivered-email/
BleepingComputer
New Phishing Scam Asks You to Manage Your Undelivered Email
A new phishing campaign is underway that pretends to be a list undelivered email being held for you on your Outlook Web Mail service. Users are then prompted to decide what they wish to do with each mail, with the respective links leading to a fake login…
How to Download a Windows 10 ISO By Impersonating Other Devices
Microsoft allows you to download the latest Windows 10 ISOs from their site, but only if you are using a non-Windows browser user agent. This article will explain how to change your user agent in Chrome and Edge so you can download an ISO instead of using the Windows 10 Media Creation Tool. [...]
https://www.bleepingcomputer.com/news/microsoft/how-to-download-a-windows-10-iso-by-impersonating-other-devices/
Microsoft allows you to download the latest Windows 10 ISOs from their site, but only if you are using a non-Windows browser user agent. This article will explain how to change your user agent in Chrome and Edge so you can download an ISO instead of using the Windows 10 Media Creation Tool. [...]
https://www.bleepingcomputer.com/news/microsoft/how-to-download-a-windows-10-iso-by-impersonating-other-devices/
BleepingComputer
How to Download a Windows 10 ISO By Impersonating Other Devices
Microsoft allows you to download the latest Windows 10 ISOs from their site, but only if you are using a non-Windows browser user agent. This article will explain how to change your user agent in Chrome and Edge so you can download an ISO instead of using…
Google Outage in Eastern U.S. Affecting Gmail, YouTube, and More
Network issues in the eastern part of the United State are causing outages in Google Cloud and the Google Compute Engine and the services that rely on them. This is causing problems connecting and using G Suite, Gmail, YouTube, and even third-party services such as Snapchat and Discord. [...]
https://www.bleepingcomputer.com/news/google/google-outage-in-eastern-us-affecting-gmail-youtube-and-more/
Network issues in the eastern part of the United State are causing outages in Google Cloud and the Google Compute Engine and the services that rely on them. This is causing problems connecting and using G Suite, Gmail, YouTube, and even third-party services such as Snapchat and Discord. [...]
https://www.bleepingcomputer.com/news/google/google-outage-in-eastern-us-affecting-gmail-youtube-and-more/
Microsoft Outlines Their Vision of a Modern Operating System
Microsoft detailed its vision for a future operating system and highlighted the path forward for the operating system that could be Windows or something entirely new. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-outlines-their-vision-of-a-modern-operating-system/
Microsoft detailed its vision for a future operating system and highlighted the path forward for the operating system that could be Windows or something entirely new. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-outlines-their-vision-of-a-modern-operating-system/
BleepingComputer
Microsoft Outlines Their Vision of a Modern Operating System
Microsoft detailed its vision for a future operating system and highlighted the path forward for the operating system that could be Windows or something entirely new.
Billing Details for 11.9M Quest Diagnostics Clients Exposed
Quest Diagnostics Incorporated, a Fortune 500 diagnostic services provider, says that approximately 12 million of its clients may have been impacted by a data breach reported by one of its billing providers. [...]
https://www.bleepingcomputer.com/news/security/billing-details-for-119m-quest-diagnostics-clients-exposed/
Quest Diagnostics Incorporated, a Fortune 500 diagnostic services provider, says that approximately 12 million of its clients may have been impacted by a data breach reported by one of its billing providers. [...]
https://www.bleepingcomputer.com/news/security/billing-details-for-119m-quest-diagnostics-clients-exposed/
BleepingComputer
Billing Details for 11.9M Quest Diagnostics Clients Exposed
Quest Diagnostics Incorporated, a Fortune 500 diagnostic services provider, says that approximately 12 million of its clients may have been impacted by a data breach reported by one of its billing providers.
Windows 10 Apps Hit by Malicious Ads that Blockers Won't Stop
Windows 10 users in Germany are reporting that while using their computer, their default browser would suddenly open to malicious and scam advertisements. These advertisements are being shown by malvertising campaigns on the Microsoft Advertising network that are being displayed in ad supported apps. [...]
https://www.bleepingcomputer.com/news/security/windows-10-apps-hit-by-malicious-ads-that-blockers-wont-stop/
Windows 10 users in Germany are reporting that while using their computer, their default browser would suddenly open to malicious and scam advertisements. These advertisements are being shown by malvertising campaigns on the Microsoft Advertising network that are being displayed in ad supported apps. [...]
https://www.bleepingcomputer.com/news/security/windows-10-apps-hit-by-malicious-ads-that-blockers-wont-stop/
BleepingComputer
Windows 10 Apps Hit by Malicious Ads that Blockers Won't Stop
Windows 10 users in Germany are reporting that while using their computer, their default browser would suddenly open to malicious and scam advertisements. These advertisements are being shown by malvertising campaigns on the Microsoft Advertising network…
Improper App Check Revives the Synthetic Clicks Issue in macOS Mojave
An unpatched flaw in the app verification process on macOS Mojave allows trusted apps to load and execute unverified content on the machine. The bug is easy to exploit and can be used to generate synthetic clicks that allow malicious actions. [...]
https://www.bleepingcomputer.com/news/security/improper-app-check-revives-the-synthetic-clicks-issue-in-macos-mojave/
An unpatched flaw in the app verification process on macOS Mojave allows trusted apps to load and execute unverified content on the machine. The bug is easy to exploit and can be used to generate synthetic clicks that allow malicious actions. [...]
https://www.bleepingcomputer.com/news/security/improper-app-check-revives-the-synthetic-clicks-issue-in-macos-mojave/
BleepingComputer
Improper App Check Revives the Synthetic Clicks Issue in macOS Mojave
An unpatched flaw in the app verification process on macOS Mojave allows trusted apps to load and execute unverified content on the machine. The bug is easy to exploit and can be used to generate synthetic clicks that allow malicious actions.
Headhunting Firm Leaks Millions of Resumes, Client Private Data
A misconfigured and publicly accessible ElasticSearch cluster owned by FMC Consulting, a Chinese headhunting company, leaked millions of resumes and company records, as well as customers and employees PII data. [...]
https://www.bleepingcomputer.com/news/security/headhunting-firm-leaks-millions-of-resumes-client-private-data/
A misconfigured and publicly accessible ElasticSearch cluster owned by FMC Consulting, a Chinese headhunting company, leaked millions of resumes and company records, as well as customers and employees PII data. [...]
https://www.bleepingcomputer.com/news/security/headhunting-firm-leaks-millions-of-resumes-client-private-data/
BleepingComputer
Headhunting Firm Leaks Millions of Resumes, Client Private Data
A misconfigured and publicly accessible ElasticSearch cluster owned by FMC Consulting, a Chinese headhunting company, leaked millions of resumes and company records, as well as customers and employees PII data.
New Email Hacking Tool from OilRig APT Group Leaked Online
A tool for hijacking Microsoft Exchange email accounts allegedly used by the OilRig hacker group has been leaked online. The utility is called Jason and it is not detected by antivirus engines on VirusTotal. [...]
https://www.bleepingcomputer.com/news/security/new-email-hacking-tool-from-oilrig-apt-group-leaked-online/
A tool for hijacking Microsoft Exchange email accounts allegedly used by the OilRig hacker group has been leaked online. The utility is called Jason and it is not detected by antivirus engines on VirusTotal. [...]
https://www.bleepingcomputer.com/news/security/new-email-hacking-tool-from-oilrig-apt-group-leaked-online/
BleepingComputer
New Email Hacking Tool from OilRig APT Group Leaked Online
A tool for hijacking Microsoft Exchange email accounts allegedly used by the OilRig hacker group has been leaked online. The utility is called Jason and it is not detected by antivirus engines on VirusTotal.
Windows 10 to Require 32GB of Storage Only on New OEM PCs
In an updated support document, Microsoft has stated that the 32 GB storage requirement for Windows 10 version 1903 only applies to OEMs when manufacturing new PCs. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-to-require-32gb-of-storage-only-on-new-oem-pcs/
In an updated support document, Microsoft has stated that the 32 GB storage requirement for Windows 10 version 1903 only applies to OEMs when manufacturing new PCs. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-to-require-32gb-of-storage-only-on-new-oem-pcs/
BleepingComputer
Windows 10 to Require 32GB of Storage Only on New OEM PCs
In an updated support document, Microsoft has stated that the 32 GB storage requirement for Windows 10 version 1903 only applies to OEMs when manufacturing new PCs.
Older Windows 10 Versions Get Intel Microcode Updates for MDS Vulns
Microsoft has released Intel Microcode update that resolve MDS speculative side channel execution vulnerabilities in older versions of Windows 10 and Windows server. [...]
https://www.bleepingcomputer.com/news/microsoft/older-windows-10-versions-get-intel-microcode-updates-for-mds-vulns/
Microsoft has released Intel Microcode update that resolve MDS speculative side channel execution vulnerabilities in older versions of Windows 10 and Windows server. [...]
https://www.bleepingcomputer.com/news/microsoft/older-windows-10-versions-get-intel-microcode-updates-for-mds-vulns/
BleepingComputer
Older Windows 10 Versions Get Intel Microcode Updates for MDS Vulns
Microsoft has released Intel Microcode update that resolve MDS speculative side channel execution vulnerabilities in older versions of Windows 10 and Windows server.