Phishing-as-a-Service Fuels Evasion Methods, Email Scam Growth
With much of the world's corporate communication being done through email, scammers increasingly target corporate users with phishing scams that allow them to steal credentials that can be used for BEC scams, social engineering, or to steal corporate secrets. [...]
https://www.bleepingcomputer.com/news/security/phishing-as-a-service-fuels-evasion-methods-email-scam-growth/
With much of the world's corporate communication being done through email, scammers increasingly target corporate users with phishing scams that allow them to steal credentials that can be used for BEC scams, social engineering, or to steal corporate secrets. [...]
https://www.bleepingcomputer.com/news/security/phishing-as-a-service-fuels-evasion-methods-email-scam-growth/
BleepingComputer
Phishing-as-a-Service Fuels Evasion Methods, Email Scam Growth
With much of the world's corporate communication being done through email, scammers increasingly target corporate users with phishing scams that allow them to steal credentials that can be used for BEC scams, social engineering, or to steal corporate secrets.
Illegal Card Enrollment Services Hijack Online Bank Accounts
Cybercriminals are exploring all avenues to get the most out of stolen payment card information. Access to an online banking account opens the door to a new revenue stream, and services providing it have grown more attractive. [...]
https://www.bleepingcomputer.com/news/security/illegal-card-enrollment-services-hijack-online-bank-accounts/
Cybercriminals are exploring all avenues to get the most out of stolen payment card information. Access to an online banking account opens the door to a new revenue stream, and services providing it have grown more attractive. [...]
https://www.bleepingcomputer.com/news/security/illegal-card-enrollment-services-hijack-online-bank-accounts/
BleepingComputer
Illegal Card Enrollment Services Hijack Online Bank Accounts
Cybercriminals are exploring all avenues to get the most out of stolen payment card information. Access to an online banking account opens the door to a new revenue stream, and services providing it have grown more attractive.
Billions of Records Including Passwords Leaked by Smart Home Vendor
A publicly accessible ElasticSearch cluster owned by Orvibo, a Chinese smart home solutions provider, leaked more than two billion user logs containing sensitive data of customers from countries all over the world. [...]
https://www.bleepingcomputer.com/news/security/billions-of-records-including-passwords-leaked-by-smart-home-vendor/
A publicly accessible ElasticSearch cluster owned by Orvibo, a Chinese smart home solutions provider, leaked more than two billion user logs containing sensitive data of customers from countries all over the world. [...]
https://www.bleepingcomputer.com/news/security/billions-of-records-including-passwords-leaked-by-smart-home-vendor/
BleepingComputer
Billions of Records Including Passwords Leaked by Smart Home Vendor
A publicly accessible ElasticSearch cluster owned by Orvibo, a Chinese smart home solutions provider, leaked more than two billion user logs containing sensitive data of customers from countries all over the world.
OceanLotus APT Uses New Ratsnif Trojan for Network Attacks
A fairly undetected remote access trojan called Ratsnif and used in cyber-espionage campaigns from the OceanLotus group has gained new capabilities that allow it to modify web pages and SSL hijacking. [...]
https://www.bleepingcomputer.com/news/security/oceanlotus-apt-uses-new-ratsnif-trojan-for-network-attacks/
A fairly undetected remote access trojan called Ratsnif and used in cyber-espionage campaigns from the OceanLotus group has gained new capabilities that allow it to modify web pages and SSL hijacking. [...]
https://www.bleepingcomputer.com/news/security/oceanlotus-apt-uses-new-ratsnif-trojan-for-network-attacks/
BleepingComputer
OceanLotus APT Uses New Ratsnif Trojan for Network Attacks
A fairly undetected remote access trojan called Ratsnif and used in cyber-espionage campaigns from the OceanLotus group has gained new capabilities that allow it to modify web pages and SSL hijacking.
Malware Loader Goes Through Heaven's Gate to Avoid Detection
Researchers discovered a malware loader specifically designed by its developers to hide in plain sight and allow the payload to evade detection by anti-malware solutions by injecting into the memory of compromised computers. [...]
https://www.bleepingcomputer.com/news/security/malware-loader-goes-through-heavens-gate-to-avoid-detection/
Researchers discovered a malware loader specifically designed by its developers to hide in plain sight and allow the payload to evade detection by anti-malware solutions by injecting into the memory of compromised computers. [...]
https://www.bleepingcomputer.com/news/security/malware-loader-goes-through-heavens-gate-to-avoid-detection/
BleepingComputer
Malware Loader Goes Through Heaven's Gate to Avoid Detection
Researchers discovered a malware loader specifically designed by its developers to hide in plain sight and allow the payload to evade detection by anti-malware solutions by injecting into the memory of compromised computers.
July Android Security Update Fixes Four Critical RCE Flaws
Three critical remote code execution (RCE) in the Media framework and another one in the Android system were fixed by Google in the Android Open Source Project (AOSP) as part of the July 2019 security patch. [...]
https://www.bleepingcomputer.com/news/security/july-android-security-update-fixes-four-critical-rce-flaws/
Three critical remote code execution (RCE) in the Media framework and another one in the Android system were fixed by Google in the Android Open Source Project (AOSP) as part of the July 2019 security patch. [...]
https://www.bleepingcomputer.com/news/security/july-android-security-update-fixes-four-critical-rce-flaws/
BleepingComputer
July Android Security Update Fixes Four Critical RCE Flaws
Three critical remote code execution (RCE) in the Media framework and another one in the Android system were fixed by Google in the Android Open Source Project (AOSP) as part of the July 2019 security patch.
Tweetdeck Is Down, Currently Experiencing Worldwide Outage
Tweetdeck, the social media dashboard web app for Twitter accounts management, is down, experiencing a worldwide outage which blocks users from logging in. [...]
https://www.bleepingcomputer.com/news/security/tweetdeck-is-down-currently-experiencing-worldwide-outage/
Tweetdeck, the social media dashboard web app for Twitter accounts management, is down, experiencing a worldwide outage which blocks users from logging in. [...]
https://www.bleepingcomputer.com/news/security/tweetdeck-is-down-currently-experiencing-worldwide-outage/
BleepingComputer
Tweetdeck Is Down, Currently Experiencing Worldwide Outage
Tweetdeck, the social media dashboard web app for Twitter accounts management, is down, experiencing a worldwide outage which blocks users from logging in.
Microsoft Starts Testing Windows 10 19H2 With Insiders
After weeks of delays, Microsoft has finally released the first Windows 10 19H2 preview update to Slow Ring Insiders. Windows 10 19H2 has been rumored to be a minor release and the first build 18362.10000 also comes in the form of a cumulative update. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-starts-testing-windows-10-19h2-with-insiders/
After weeks of delays, Microsoft has finally released the first Windows 10 19H2 preview update to Slow Ring Insiders. Windows 10 19H2 has been rumored to be a minor release and the first build 18362.10000 also comes in the form of a cumulative update. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-starts-testing-windows-10-19h2-with-insiders/
BleepingComputer
Microsoft Starts Testing Windows 10 19H2 With Insiders
After weeks of delays, Microsoft has finally released the first Windows 10 19H2 preview update to Slow Ring Insiders. Windows 10 19H2 has been rumored to be a minor release and the first build 18362.10000 also comes in the form of a cumulative update.
Android Apps with Millions of Installs Deceptively Pushed Ads
An adware campaign supported by as many as 182 mobile apps managed to push advertisements to millions of users on Google Play and third-party Android store. [...]
https://www.bleepingcomputer.com/news/security/android-apps-with-millions-of-installs-deceptively-pushed-ads/
An adware campaign supported by as many as 182 mobile apps managed to push advertisements to millions of users on Google Play and third-party Android store. [...]
https://www.bleepingcomputer.com/news/security/android-apps-with-millions-of-installs-deceptively-pushed-ads/
BleepingComputer
Android Apps with Millions of Installs Deceptively Pushed Ads
An adware campaign supported by as many as 182 mobile apps managed to push advertisements to millions of users on Google Play and third-party Android store.
Microsoft Blocks Some Macs From Updating to Windows 10 Version 1903
Microsoft says that some Macs running Windows 10 may be blocked from updating to Windows 10 version 1903 because of a compatibility block triggered by older software or hardware. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-blocks-some-macs-from-updating-to-windows-10-version-1903/
Microsoft says that some Macs running Windows 10 may be blocked from updating to Windows 10 version 1903 because of a compatibility block triggered by older software or hardware. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-blocks-some-macs-from-updating-to-windows-10-version-1903/
BleepingComputer
Microsoft Blocks Some Macs From Updating to Windows 10 Version 1903
Microsoft says that some Macs running Windows 10 may be blocked from updating to Windows 10 version 1903 because of a compatibility block triggered by older software or hardware.
Cloudflare Worldwide Outage Caused by Bad Software Deployment
Cloudfare experienced a worldwide outage today for about 30 minutes, with network performance issues that brought down a multitude of websites and web services all around the world, and triggered "502 Bad Gateway" errors. [...]
https://www.bleepingcomputer.com/news/technology/cloudflare-worldwide-outage-caused-by-bad-software-deployment/
Cloudfare experienced a worldwide outage today for about 30 minutes, with network performance issues that brought down a multitude of websites and web services all around the world, and triggered "502 Bad Gateway" errors. [...]
https://www.bleepingcomputer.com/news/technology/cloudflare-worldwide-outage-caused-by-bad-software-deployment/
BleepingComputer
Cloudflare Worldwide Outage Caused by Bad Software Deployment
Cloudflare experienced a worldwide outage today for about 30 minutes, with network performance issues that brought down a multitude of websites and web services all around the world, and triggered "502 Bad Gateway" errors.
Google AdSense Warns That Chrome to Block Abusive Ads on July 9
In 2018, Google Chrome started blocking abusive ad experiences on some sites in North America and Europe. Starting July 9, Google will be expanding Chrome's built-in ad blocking efforts to all other regions and ads will be blocked on sites that have performed abusive behavior. [...]
https://www.bleepingcomputer.com/news/google/google-adsense-warns-that-chrome-to-block-abusive-ads-on-july-9/
In 2018, Google Chrome started blocking abusive ad experiences on some sites in North America and Europe. Starting July 9, Google will be expanding Chrome's built-in ad blocking efforts to all other regions and ads will be blocked on sites that have performed abusive behavior. [...]
https://www.bleepingcomputer.com/news/google/google-adsense-warns-that-chrome-to-block-abusive-ads-on-july-9/
BleepingComputer
Google AdSense Warns That Chrome to Block Abusive Ads on July 9
In 2018, Google Chrome started blocking abusive ad experiences on some sites in North America and Europe. Starting July 9, Google will be expanding Chrome's built-in ad blocking efforts to all other regions and ads will be blocked on sites that have performed…
D-Link Settles FTC Lawsuit, Promises to Enhance Device Security
Taiwanese networking equipment manufacturer D-Link today settled a Federal Trade Commission (FTC) lawsuit originating from a 2017 complaint saying that it failed to properly secure its Internet-connected cameras and wireless routers. [...]
https://www.bleepingcomputer.com/news/security/d-link-settles-ftc-lawsuit-promises-to-enhance-device-security/
Taiwanese networking equipment manufacturer D-Link today settled a Federal Trade Commission (FTC) lawsuit originating from a 2017 complaint saying that it failed to properly secure its Internet-connected cameras and wireless routers. [...]
https://www.bleepingcomputer.com/news/security/d-link-settles-ftc-lawsuit-promises-to-enhance-device-security/
BleepingComputer
D-Link Settles FTC Lawsuit, Promises to Enhance Device Security
Taiwanese networking equipment manufacturer D-Link today settled a Federal Trade Commission (FTC) lawsuit originating from a 2017 complaint saying that it failed to properly secure its Internet-connected cameras and wireless routers.
Microsoft Issues July 2019 Office Updates With Fixes, Improvements
Microsoft released the July 2019 non-security Microsoft Office updates with improvements and fixes for the Windows Installer (MSI) editions of Office 2010, Office 2013, and Office 2016. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-issues-july-2019-office-updates-with-fixes-improvements/
Microsoft released the July 2019 non-security Microsoft Office updates with improvements and fixes for the Windows Installer (MSI) editions of Office 2010, Office 2013, and Office 2016. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-issues-july-2019-office-updates-with-fixes-improvements/
BleepingComputer
Microsoft Issues July 2019 Office Updates With Fixes, Improvements
Microsoft released the July 2019 non-security Microsoft Office updates with improvements and fixes for the Windows Installer (MSI) editions of Office 2010, Office 2013, and Office 2016.
Public Certificate Poisoning Can Break Some OpenPGP Implementations
OpenPGP installations can grind to a halt and fail to verify the authenticity of downloaded packages as the keyserver network has been flooded with bogus extra signatures attesting ownership of a certificate. [...]
https://www.bleepingcomputer.com/news/security/public-certificate-poisoning-can-break-some-openpgp-implementations/
OpenPGP installations can grind to a halt and fail to verify the authenticity of downloaded packages as the keyserver network has been flooded with bogus extra signatures attesting ownership of a certificate. [...]
https://www.bleepingcomputer.com/news/security/public-certificate-poisoning-can-break-some-openpgp-implementations/
BleepingComputer
Public Certificate Poisoning Can Break Some OpenPGP Implementations
OpenPGP installations can grind to a halt and fail to verify the authenticity of downloaded packages as the keyserver network has been flooded with bogus extra signatures attesting ownership of a certificate.
Trickbot Trojan Now Has a Separate Cookie Stealing Module
Trickbot trojan now comes with a separate module for stealing browser cookies, threat researchers found on Tuesday, marking new progress in the malware's development. [...]
https://www.bleepingcomputer.com/news/security/trickbot-trojan-now-has-a-separate-cookie-stealing-module/
Trickbot trojan now comes with a separate module for stealing browser cookies, threat researchers found on Tuesday, marking new progress in the malware's development. [...]
https://www.bleepingcomputer.com/news/security/trickbot-trojan-now-has-a-separate-cookie-stealing-module/
BleepingComputer
Trickbot Trojan Now Has a Separate Cookie Stealing Module
Trickbot trojan now comes with a separate module for stealing browser cookies, threat researchers found on Tuesday, marking new progress in the malware's development.
Silence Group Likely Behind Recent $3M Bangladesh Bank Heist
Attacks on banks in Bangladesh that caused losses of at least $3 million may be the work of the Silence hacker outfit, a relatively new, financially-motivated group. [...]
https://www.bleepingcomputer.com/news/security/silence-group-likely-behind-recent-3m-bangladesh-bank-heist/
Attacks on banks in Bangladesh that caused losses of at least $3 million may be the work of the Silence hacker outfit, a relatively new, financially-motivated group. [...]
https://www.bleepingcomputer.com/news/security/silence-group-likely-behind-recent-3m-bangladesh-bank-heist/
BleepingComputer
Silence Group Likely Behind Recent $3M Bangladesh Bank Heist
Attacks on banks in Bangladesh that caused losses of at least $3 million may be the work of the Silence hacker outfit, a relatively new, financially-motivated group.
New Godlua Malware Evades Traffic Monitoring via DNS over HTTPS
A Lua-based backdoor malware capable of targeting both Linux and Windows users while securing its communication channels via DNS over HTTPS (DoH) was discovered by researchers at Network Security Research Lab of Qihoo 360. [...]
https://www.bleepingcomputer.com/news/security/new-godlua-malware-evades-traffic-monitoring-via-dns-over-https/
A Lua-based backdoor malware capable of targeting both Linux and Windows users while securing its communication channels via DNS over HTTPS (DoH) was discovered by researchers at Network Security Research Lab of Qihoo 360. [...]
https://www.bleepingcomputer.com/news/security/new-godlua-malware-evades-traffic-monitoring-via-dns-over-https/
BleepingComputer
New Godlua Malware Evades Traffic Monitoring via DNS over HTTPS
A Lua-based backdoor malware capable of targeting both Linux and Windows users while securing its communication channels via DNS over HTTPS (DoH) was discovered by researchers at Network Security Research Lab of Qihoo 360.
Windows 10 20H1 Build 18932 Released With Improvements
Microsoft is rolling out Windows 10 20H1 Build 18932 to Insiders in the Fast ring. Windows 10 Insider Preview Build 18932 includes improvements for the notifications settings, Eye Control and as well as general bug fixes. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-20h1-build-18932-released-with-improvements/
Microsoft is rolling out Windows 10 20H1 Build 18932 to Insiders in the Fast ring. Windows 10 Insider Preview Build 18932 includes improvements for the notifications settings, Eye Control and as well as general bug fixes. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-20h1-build-18932-released-with-improvements/
BleepingComputer
Windows 10 20H1 Build 18932 Released With Improvements
Microsoft is rolling out Windows 10 20H1 Build 18932 to Insiders in the Fast ring. Windows 10 Insider Preview Build 18932 includes improvements for the notifications settings, Eye Control and as well as general bug fixes.
Outlook Flaw Exploited by Iranian APT33, US CyberCom Issues Alert
US Cyber Command issued a malware alert on Twitter regarding the active exploitation of the CVE-2017-11774 Outlook vulnerability to attack US government agencies, allowing the attackers to execute arbitrary commands on compromised systems. [...]
https://www.bleepingcomputer.com/news/security/outlook-flaw-exploited-by-iranian-apt33-us-cybercom-issues-alert/
US Cyber Command issued a malware alert on Twitter regarding the active exploitation of the CVE-2017-11774 Outlook vulnerability to attack US government agencies, allowing the attackers to execute arbitrary commands on compromised systems. [...]
https://www.bleepingcomputer.com/news/security/outlook-flaw-exploited-by-iranian-apt33-us-cybercom-issues-alert/
BleepingComputer
Outlook Flaw Exploited by Iranian APT33, US CyberCom Issues Alert
US Cyber Command issued a malware alert on Twitter regarding the active exploitation of the CVE-2017-11774 Outlook vulnerability to attack US government agencies, allowing the attackers to execute arbitrary commands on compromised systems.
Microsoft Rolls Out Android Remote Control for Windows 10
Microsoft added several improvements and features to the Your Phone app with the rollout of Windows 10 20H1 Build 18932 to Insiders in the Fast ring, the addition of remote control for Android devices from touch-enabled PCs being the highlight of the release. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-android-remote-control-for-windows-10/
Microsoft added several improvements and features to the Your Phone app with the rollout of Windows 10 20H1 Build 18932 to Insiders in the Fast ring, the addition of remote control for Android devices from touch-enabled PCs being the highlight of the release. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-android-remote-control-for-windows-10/
BleepingComputer
Microsoft Rolls Out Android Remote Control for Windows 10
Microsoft added several improvements and features to the Your Phone app with the rollout of Windows 10 20H1 Build 18932 to Insiders in the Fast ring, the addition of remote control for Android devices from touch-enabled PCs being the highlight of the release.