BleepingComputer
10.6K subscribers
41 photos
24.7K links
Latest news and stories from BleepingComputer.com

From a bleeping computer to a working computer.
Download Telegram
OnePlus Exposed Customer Order Information in Data Breach

Chinese smartphone maker OnePlus announced a data breach leading to some of its customers' order information including names, contact numbers, emails, and shipping addresses being accessed by a third-party without authorization. [...]

https://www.bleepingcomputer.com/news/security/oneplus-exposed-customer-order-information-in-data-breach/
TrickBot Trojan Getting Ready to Steal OpenSSH and OpenVPN Keys

The Trickbot banking trojan keeps evolving according to researchers who spotted this week an updated password grabber module that could be used to steal OpenSSH private keys and OpenVPN passwords and configuration files. [...]

https://www.bleepingcomputer.com/news/security/trickbot-trojan-getting-ready-to-steal-openssh-and-openvpn-keys/
Catch Restaurants Disclose Credit Card Stealing Malware Incident

Catch Hospitality Group has disclosed that point-of-sale systems (POS) at NYC hotspots Catch NYC, Catch Rooftop, and Catch Steak were infected with malware that allowed attackers to steal credit card information from customers. [...]

https://www.bleepingcomputer.com/news/security/catch-restaurants-disclose-credit-card-stealing-malware-incident/
Windows 10 Upgrades Blocked if Using Old Versions of AVG, Avast

If you are using older versions of Avast or AVG Antivirus, Microsoft has placed a compatibility hold that will prevent you from upgrading to Windows 10 1903 or Windows 10 1909 until you upgrade to a newer version of the antivirus software. [...]

https://www.bleepingcomputer.com/news/microsoft/windows-10-upgrades-blocked-if-using-old-versions-of-avg-avast/
Livingston School District in New Jersey Hit With Ransomware

Students at the Livingston public school district in New Jersey are undoubtedly happy for a two hour delayed opening tomorrow. Unfortunately, this delay is not being caused by snow, but rather by a ransomware attack that the district is still recovering from. [...]

https://www.bleepingcomputer.com/news/security/livingston-school-district-in-new-jersey-hit-with-ransomware/
FortiGuard Used Hardcoded Key, XOR to Encrypt Communications

Security researchers found that multiple security products from Fortinet use weak encryption and static keys to communicate with FortiGuard services in the cloud, such as AntiSpam, AntiVirus, and Web Filter. [...]

https://www.bleepingcomputer.com/news/security/fortiguard-used-hardcoded-key-xor-to-encrypt-communications/
Splunk Faces Y2K Bug-Like Problem Unless Patched

Remember the Y2K bug that threatened computer programs to go crazy on January 1, 2000? A similar timestamp recognition problem is affecting Splunk platform instances neglected by their administrators before 2020. [...]

https://www.bleepingcomputer.com/news/security/splunk-faces-y2k-bug-like-problem-unless-patched/
Phishers Create Fake Sites as Bait for Holiday Shopping Deals

While most users are familiar with phishing scams that attempt to steal a user's login credentials, phishers also use emails to lure consumers to fake retail sites in order to steal their money or sell cheap knockoffs. [...]

https://www.bleepingcomputer.com/news/security/phishers-create-fake-sites-as-bait-for-holiday-shopping-deals/
Dexphot Polymorphic Malware Shows Complexity of Everyday Threats

Ordinary malware can be a real nuisance to detect due to complex methods that allowed it to slip past security solutions. Dexphot is one such strain that managed to run attack routines on close to 80,000 machines earlier this year. [...]

https://www.bleepingcomputer.com/news/security/dexphot-polymorphic-malware-shows-complexity-of-everyday-threats/
Almost 60% Of Malicious Ads Come from Three Ad Providers

In Confiant's "Demand Quality Report for Q3 2019", the ad fraud and security company analyzed 120 billion ad impressions between January 1st and September 20th that flowed through their systems in order to provide a breakdown of different malicious ad campaigns. [...]

https://www.bleepingcomputer.com/news/security/almost-60-percent-of-malicious-ads-come-from-three-ad-providers/