VLC 3.0.7 is Biggest Security Release Due to EU Bounty Program
VLC Media Player 3.0.7 was released on Friday and contained the most security updates ever in one release of the program. The president of the VideoLan non-profit organization states that this was due to their inclusion in the EU-FOSSA bug bounty program. [...]
https://www.bleepingcomputer.com/news/software/vlc-307-is-biggest-security-release-due-to-eu-bounty-program/
VLC Media Player 3.0.7 was released on Friday and contained the most security updates ever in one release of the program. The president of the VideoLan non-profit organization states that this was due to their inclusion in the EU-FOSSA bug bounty program. [...]
https://www.bleepingcomputer.com/news/software/vlc-307-is-biggest-security-release-due-to-eu-bounty-program/
BleepingComputer
VLC 3.0.7 is Biggest Security Release Due to EU Bounty Program
VLC Media Player 3.0.7 was released on Friday and contained the most security updates ever in one release of the program. The president of the VideoLan non-profit organization states that this was due to their inclusion in the EU-FOSSA bug bounty program.
Sysmon Getting DNS Query Logging with Querying Process Name
To the delight of Windows system administrators everywhere, Microsoft has announced that a new version of Sysmon is coming out this week that will include the ability to log DNS queries performed on a monitored computer. Even better, Sysmon will also log the executable that performed the query. [...]
https://www.bleepingcomputer.com/news/microsoft/sysmon-getting-dns-query-logging-with-querying-process-name/
To the delight of Windows system administrators everywhere, Microsoft has announced that a new version of Sysmon is coming out this week that will include the ability to log DNS queries performed on a monitored computer. Even better, Sysmon will also log the executable that performed the query. [...]
https://www.bleepingcomputer.com/news/microsoft/sysmon-getting-dns-query-logging-with-querying-process-name/
BleepingComputer
Sysmon Getting DNS Query Logging with Querying Process Name
To the delight of Windows system administrators everywhere, Microsoft has announced that a new version of Sysmon is coming out this week that will include the ability to log DNS queries performed on a monitored computer. Even better, Sysmon will also log…
Gaming Site Emuparadise Suffered Data Breach of 1.1M Accounts
The Emuparadise retro gaming site has been reported to have suffered a data breach in April 2018. This breach exposed account information for approximately 1.1 million Emuparadise forum members. [...]
https://www.bleepingcomputer.com/news/security/gaming-site-emuparadise-suffered-data-breach-of-11m-accounts/
The Emuparadise retro gaming site has been reported to have suffered a data breach in April 2018. This breach exposed account information for approximately 1.1 million Emuparadise forum members. [...]
https://www.bleepingcomputer.com/news/security/gaming-site-emuparadise-suffered-data-breach-of-11m-accounts/
BleepingComputer
Gaming Site Emuparadise Suffered Data Breach of 1.1M Accounts
The Emuparadise retro gaming site has been reported to have suffered a data breach in April 2018. This breach exposed account information for approximately 1.1 million Emuparadise forum members.
MuddyWater Updates POWERSTATS Backdoor For Multi-Stage Attacks
The Iranian-backed MuddyWater cyber-espionage group is continuously upgrading and improving its tools lately, with the group's POWERSTATS backdoor being the last to receive an update. [...]
https://www.bleepingcomputer.com/news/security/muddywater-updates-powerstats-backdoor-for-multi-stage-attacks/
The Iranian-backed MuddyWater cyber-espionage group is continuously upgrading and improving its tools lately, with the group's POWERSTATS backdoor being the last to receive an update. [...]
https://www.bleepingcomputer.com/news/security/muddywater-updates-powerstats-backdoor-for-multi-stage-attacks/
BleepingComputer
MuddyWater Updates POWERSTATS Backdoor For Multi-Stage Attacks
The Iranian-backed MuddyWater cyber-espionage group is continuously upgrading and improving its tools lately, with the group's POWERSTATS backdoor being the last to receive an update.
'jesushelpme' Password Sums Up CyberSec Agency Security State
Agents of the Information Network Security Agency (INSA) - the top-level cyber security agency in Ethiopia, used laughingly weak credentials to protect their email accounts. [...]
https://www.bleepingcomputer.com/news/security/jesushelpme-password-sums-up-cybersec-agency-security-state/
Agents of the Information Network Security Agency (INSA) - the top-level cyber security agency in Ethiopia, used laughingly weak credentials to protect their email accounts. [...]
https://www.bleepingcomputer.com/news/security/jesushelpme-password-sums-up-cybersec-agency-security-state/
BleepingComputer
'jesushelpme' Password Sums Up CyberSec Agency Security State
Agents of the Information Network Security Agency (INSA) - the top-level cyber security agency in Ethiopia, used laughingly weak credentials to protect their email accounts.
FBI Issues Warning on ‘Secure’ Websites Used For Phishing
FBI issued a public service announcement regarding TLS-secured websites being actively used by malicious actors in phishing campaigns to trick users into trusting attacker-controlled sites and handing over sensitive personal information. [...]
https://www.bleepingcomputer.com/news/security/fbi-issues-warning-on-secure-websites-used-for-phishing/
FBI issued a public service announcement regarding TLS-secured websites being actively used by malicious actors in phishing campaigns to trick users into trusting attacker-controlled sites and handing over sensitive personal information. [...]
https://www.bleepingcomputer.com/news/security/fbi-issues-warning-on-secure-websites-used-for-phishing/
BleepingComputer
FBI Issues Warning on ‘Secure’ Websites Used For Phishing
FBI issued a public service announcement regarding TLS-secured websites being actively used by malicious actors in phishing campaigns to trick users into trusting attacker-controlled sites and handing over sensitive personal information.
Microsoft is Bringing Predictive Typing to All Windows 10 Apps
A new predictive typing feature has been found hidden in the latest Windows 10 20H1 builds. This feature displays suggestions of words that Windows predicts you are going to write so that you can quickly select them. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-is-bringing-predictive-typing-to-all-windows-10-apps/
A new predictive typing feature has been found hidden in the latest Windows 10 20H1 builds. This feature displays suggestions of words that Windows predicts you are going to write so that you can quickly select them. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-is-bringing-predictive-typing-to-all-windows-10-apps/
BleepingComputer
Microsoft is Bringing Predictive Typing to All Windows 10 Apps
A new predictive typing feature has been found hidden in the latest Windows 10 20H1 builds. This feature displays suggestions of words that Windows predicts you are going to write so that you can quickly select them.
New Spam Campaign Controlled by Attackers via DNS TXT Records
A new finance spam campaign with HTML attachments has been discovered that utilizes Google's public DNS resolver to retrieve JavaScript commands embedded in a domain's TXT record. These commands will then redirect a user's browser to a aggressive trading advertisement site, which has been reported as a scam. [...]
https://www.bleepingcomputer.com/news/security/new-spam-campaign-controlled-by-attackers-via-dns-txt-records/
A new finance spam campaign with HTML attachments has been discovered that utilizes Google's public DNS resolver to retrieve JavaScript commands embedded in a domain's TXT record. These commands will then redirect a user's browser to a aggressive trading advertisement site, which has been reported as a scam. [...]
https://www.bleepingcomputer.com/news/security/new-spam-campaign-controlled-by-attackers-via-dns-txt-records/
BleepingComputer
New Spam Campaign Controlled by Attackers via DNS TXT Records
A new finance spam campaign with HTML attachments has been discovered that utilizes Google's public DNS resolver to retrieve JavaScript commands embedded in a domain's TXT record. These commands will then redirect a user's browser to a aggressive trading…
WordPress Chat Plugin Bug Lets Hackers Inject Text, Steal Logs
Admins of websites with WP Live Chat Support for Wordpress installations should immediately update the plugin to version 8.0.33 or later to patch a critical authentication bypass which can be exploited by attackers without valid credentials. [...]
https://www.bleepingcomputer.com/news/security/wordpress-chat-plugin-bug-lets-hackers-inject-text-steal-logs/
Admins of websites with WP Live Chat Support for Wordpress installations should immediately update the plugin to version 8.0.33 or later to patch a critical authentication bypass which can be exploited by attackers without valid credentials. [...]
https://www.bleepingcomputer.com/news/security/wordpress-chat-plugin-bug-lets-hackers-inject-text-steal-logs/
BleepingComputer
WordPress Chat Plugin Bug Lets Hackers Inject Text, Steal Logs
Admins of websites with WP Live Chat Support for Wordpress installations should immediately update the plugin to version 8.0.33 or later to patch a critical authentication bypass which can be exploited by attackers without valid credentials.
Food Bank Hit By Ransomware, Needs Your Charity to Rebuild
Ransomware attacks hit indiscriminately and sometimes they may affect charitable organizations that can't afford to surrender to the demand. Auburn Food Bank in King County, Washington, fell victim to a ransomware strain known as GlobeImposter 2.0, which encrypted all computers on their network. [...]
https://www.bleepingcomputer.com/news/security/food-bank-hit-by-ransomware-needs-your-charity-to-rebuild/
Ransomware attacks hit indiscriminately and sometimes they may affect charitable organizations that can't afford to surrender to the demand. Auburn Food Bank in King County, Washington, fell victim to a ransomware strain known as GlobeImposter 2.0, which encrypted all computers on their network. [...]
https://www.bleepingcomputer.com/news/security/food-bank-hit-by-ransomware-needs-your-charity-to-rebuild/
BleepingComputer
Food Bank Hit By Ransomware, Needs Your Charity to Rebuild
Ransomware attacks hit indiscriminately and sometimes they may affect charitable organizations that can't afford to surrender to the demand. Auburn Food Bank in King County, Washington, fell victim to a ransomware strain known as GlobeImposter 2.0, which…
Finding Windows Systems Affected by BlueKeep Remote Desktop Bug
Researchers have created tools and scripts that can be used to find Windows machines vulnerable to the BlueKeep vulnerability so that they can be patched. In this article we discuss two of these tools. [...]
https://www.bleepingcomputer.com/news/security/finding-windows-systems-affected-by-bluekeep-remote-desktop-bug/
Researchers have created tools and scripts that can be used to find Windows machines vulnerable to the BlueKeep vulnerability so that they can be patched. In this article we discuss two of these tools. [...]
https://www.bleepingcomputer.com/news/security/finding-windows-systems-affected-by-bluekeep-remote-desktop-bug/
BleepingComputer
Finding Windows Systems Affected by BlueKeep Remote Desktop Bug
Researchers have created tools and scripts that can be used to find Windows machines vulnerable to the BlueKeep vulnerability so that they can be patched. In this article we discuss two of these tools.
Mozilla Makes Firefox its Own Brand Name, Releases New Logos
Mozilla has announced that "Firefox" is becoming its own brand name that encompasses the Firefox Browser, Firefox Send, Firefox Lockwise, and Firefox Monitor products. Along with this new umbrella name, Mozilla has released redesigned icons that represent the future of this brand. [...]
https://www.bleepingcomputer.com/news/software/mozilla-makes-firefox-its-own-brand-name-releases-new-logos/
Mozilla has announced that "Firefox" is becoming its own brand name that encompasses the Firefox Browser, Firefox Send, Firefox Lockwise, and Firefox Monitor products. Along with this new umbrella name, Mozilla has released redesigned icons that represent the future of this brand. [...]
https://www.bleepingcomputer.com/news/software/mozilla-makes-firefox-its-own-brand-name-releases-new-logos/
BleepingComputer
Mozilla Makes Firefox its Own Brand Name, Releases New Logos
Mozilla has announced that "Firefox" is becoming its own brand name that encompasses the Firefox Browser, Firefox Send, Firefox Lockwise, and Firefox Monitor products. Along with this new umbrella name, Mozilla has released redesigned icons that represent…
Radiohead Releases OK Computer Sessions After Hack, Won't Pay Ransom
Alternative rock band Radiohead released 18 tracks of OK Computer sessions after hackers stole several archived mini discs from Thom Yorke, the band's lead singer and main songwriter. [...]
https://www.bleepingcomputer.com/news/security/radiohead-releases-ok-computer-sessions-after-hack-wont-pay-ransom/
Alternative rock band Radiohead released 18 tracks of OK Computer sessions after hackers stole several archived mini discs from Thom Yorke, the band's lead singer and main songwriter. [...]
https://www.bleepingcomputer.com/news/security/radiohead-releases-ok-computer-sessions-after-hack-wont-pay-ransom/
BleepingComputer
Radiohead Releases OK Computer Sessions After Hack, Won't Pay Ransom
Alternative rock band Radiohead released 18 tracks of OK Computer sessions after hackers stole several archived mini discs from Thom Yorke, the band's lead singer and main songwriter.
Adobe Releases Security Updates for Flash Player, ColdFusion, and Campaign
Adobe has published their monthly Patch Tuesday updates for the month of June 2019. These updates includes fixes for vulnerabilities in Adobe ColdFusion, Adobe Campaign, and Adobe Flash Player. [...]
https://www.bleepingcomputer.com/news/security/adobe-releases-security-updates-for-flash-player-coldfusion-and-campaign/
Adobe has published their monthly Patch Tuesday updates for the month of June 2019. These updates includes fixes for vulnerabilities in Adobe ColdFusion, Adobe Campaign, and Adobe Flash Player. [...]
https://www.bleepingcomputer.com/news/security/adobe-releases-security-updates-for-flash-player-coldfusion-and-campaign/
BleepingComputer
Adobe Releases Security Updates for Flash Player, ColdFusion, and Campaign
Adobe has published their monthly Patch Tuesday updates for the month of June 2019. These updates includes fixes for vulnerabilities in Adobe ColdFusion, Adobe Campaign, and Adobe Flash Player.
RAMBleed Attack Can Steal Sensitive Data From Computer Memory
Researchers found a new method to impact the confidentiality of the data stored in the computer memory, successfully extracting a signing key from an OpenSSH server with nothing by normal user permissions. [...]
https://www.bleepingcomputer.com/news/security/rambleed-attack-can-steal-sensitive-data-from-computer-memory/
Researchers found a new method to impact the confidentiality of the data stored in the computer memory, successfully extracting a signing key from an OpenSSH server with nothing by normal user permissions. [...]
https://www.bleepingcomputer.com/news/security/rambleed-attack-can-steal-sensitive-data-from-computer-memory/
BleepingComputer
RAMBleed Attack Can Steal Sensitive Data From Computer Memory
Researchers found a new method to impact the confidentiality of the data stored in the computer memory, successfully extracting a signing key from an OpenSSH server with nothing by normal user permissions.
Microsoft NTLM Flaws Expose All Windows Machines to RCE Attacks
Two critical vulnerabilities in Microsoft's NTLM authentication protocol consisting of three logical flaws make it possible for attackers to run remote code and authenticate on machines running any Windows version. [...]
https://www.bleepingcomputer.com/news/security/microsoft-ntlm-flaws-expose-all-windows-machines-to-rce-attacks/
Two critical vulnerabilities in Microsoft's NTLM authentication protocol consisting of three logical flaws make it possible for attackers to run remote code and authenticate on machines running any Windows version. [...]
https://www.bleepingcomputer.com/news/security/microsoft-ntlm-flaws-expose-all-windows-machines-to-rce-attacks/
BleepingComputer
Microsoft NTLM Flaws Expose All Windows Machines to RCE Attacks
Two critical vulnerabilities in Microsoft's NTLM authentication protocol consisting of three logical flaws make it possible for attackers to run remote code and authenticate on machines running any Windows version.
Microsoft Blocks Some Bluetooth Devices Due to Security Risks
Microsoft says that certain Bluetooth devices might start experiencing pairing and connectivity issues after Windows users apply cumulative, security, or monthly rollup updates released today. [...]
https://www.bleepingcomputer.com/news/security/microsoft-blocks-some-bluetooth-devices-due-to-security-risks/
Microsoft says that certain Bluetooth devices might start experiencing pairing and connectivity issues after Windows users apply cumulative, security, or monthly rollup updates released today. [...]
https://www.bleepingcomputer.com/news/security/microsoft-blocks-some-bluetooth-devices-due-to-security-risks/
BleepingComputer
Microsoft Blocks Some Bluetooth Devices Due to Security Risks
Microsoft says that certain Bluetooth devices might start experiencing pairing and connectivity issues after Windows users apply cumulative, security, or monthly rollup updates released today.
Microsoft's June 2019 Patch Tuesday Fixes 88 Vulnerabilities
Today is Microsoft's June 2019 Patch Tuesday, which means that Windows admins are pulling their hair out as they get ready to test or install the latest patches and security updates released by Microsoft. Included in this month's updates are fixes for four publicly disclosed vulnerabilities. [...]
https://www.bleepingcomputer.com/news/microsoft/microsofts-june-2019-patch-tuesday-fixes-88-vulnerabilities/
Today is Microsoft's June 2019 Patch Tuesday, which means that Windows admins are pulling their hair out as they get ready to test or install the latest patches and security updates released by Microsoft. Included in this month's updates are fixes for four publicly disclosed vulnerabilities. [...]
https://www.bleepingcomputer.com/news/microsoft/microsofts-june-2019-patch-tuesday-fixes-88-vulnerabilities/
BleepingComputer
Microsoft's June 2019 Patch Tuesday Fixes 88 Vulnerabilities
Today is Microsoft's June 2019 Patch Tuesday, which means that Windows admins are pulling their hair out as they get ready to test or install the latest patches and security updates released by Microsoft. Included in this month's updates are fixes for four…
VIP WordPress Sites Currently Experiencing Availability Issues
Websites hosted on WordPress.com's VIP GO platform are currently experiencing various issues from 503 "Service Unavailable" errors and displaying content with a default theme to showing their visitors a blank page. [...]
https://www.bleepingcomputer.com/news/technology/vip-wordpress-sites-currently-experiencing-availability-issues/
Websites hosted on WordPress.com's VIP GO platform are currently experiencing various issues from 503 "Service Unavailable" errors and displaying content with a default theme to showing their visitors a blank page. [...]
https://www.bleepingcomputer.com/news/technology/vip-wordpress-sites-currently-experiencing-availability-issues/
BleepingComputer
VIP WordPress Sites Currently Experiencing Availability Issues
Websites hosted on WordPress.com's VIP GO platform are currently experiencing various issues from 503 "Service Unavailable" errors and displaying content with a default theme to showing their visitors a blank page.
Windows 10 June 2019 Cumulative Updates Released With Fixes
Microsoft has released the first June 2019 cumulative updates for compatible Windows 10 versions, including May 2019 Update. Windows 10 May 2019 Update, Windows 10 October 2018 Update and April 2018 Update are also receiving new cumulative updates today. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-june-2019-cumulative-updates-released-with-fixes/
Microsoft has released the first June 2019 cumulative updates for compatible Windows 10 versions, including May 2019 Update. Windows 10 May 2019 Update, Windows 10 October 2018 Update and April 2018 Update are also receiving new cumulative updates today. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-june-2019-cumulative-updates-released-with-fixes/
BleepingComputer
Windows 10 June 2019 Cumulative Updates Released With Fixes
Microsoft has released the first June 2019 cumulative updates for compatible Windows 10 versions, including May 2019 Update. Windows 10 May 2019 Update, Windows 10 October 2018 Update and April 2018 Update are also receiving new cumulative updates today.
Microsoft Releases Windows 7 & 8.1 Cumulative Updates KB4503292 & KB4503276
The June 2019 updates are also available for Windows 7 and 8.1 devices. Microsoft is pushing the latest cumulative updates to Windows 7 and 8.1 devices through Windows Update and Microsoft Update Catalog. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-7-and-81-cumulative-updates-kb4503292-and-kb4503276/
The June 2019 updates are also available for Windows 7 and 8.1 devices. Microsoft is pushing the latest cumulative updates to Windows 7 and 8.1 devices through Windows Update and Microsoft Update Catalog. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-7-and-81-cumulative-updates-kb4503292-and-kb4503276/
BleepingComputer
Microsoft Releases Windows 7 & 8.1 Cumulative Updates KB4503292 & KB4503276
The June 2019 updates are also available for Windows 7 and 8.1 devices. Microsoft is pushing the latest cumulative updates to Windows 7 and 8.1 devices through Windows Update and Microsoft Update Catalog.