Palo Alto Networks patches critical vulnerability in firewall OS
Palo Alto Networks disclosed a critical vulnerability found in the operating system (PAN-OS) of all its next-generation firewalls that could allow unauthenticated network-based attackers to bypass authentication. [...]
https://www.bleepingcomputer.com/news/security/palo-alto-networks-patches-critical-vulnerability-in-firewall-os/
Palo Alto Networks disclosed a critical vulnerability found in the operating system (PAN-OS) of all its next-generation firewalls that could allow unauthenticated network-based attackers to bypass authentication. [...]
https://www.bleepingcomputer.com/news/security/palo-alto-networks-patches-critical-vulnerability-in-firewall-os/
BleepingComputer
Palo Alto Networks patches critical vulnerability in firewall OS
Palo Alto Networks disclosed a critical vulnerability found in the operating system (PAN-OS) of all its next-generation firewalls that could allow unauthenticated network-based attackers to bypass authentication.
Roblox accounts being hacked in support of Trump reelection
A hacking campaign is targeting Roblox accounts to support President Trump in the upcoming U.S. Presidential elections in November. [...]
https://www.bleepingcomputer.com/news/security/roblox-accounts-being-hacked-in-support-of-trump-reelection/
A hacking campaign is targeting Roblox accounts to support President Trump in the upcoming U.S. Presidential elections in November. [...]
https://www.bleepingcomputer.com/news/security/roblox-accounts-being-hacked-in-support-of-trump-reelection/
BleepingComputer
Roblox accounts being hacked in support of Trump reelection
A hacking campaign is targeting Roblox accounts to support President Trump in the upcoming U.S. Presidential elections in November.
UC San Francisco pays $1.14 million for ransomware decryptor
The University of California San Francisco (UCSF) says that it paid $1.14 million to the Netwalker ransomware operators who successfully breached the UCSF School of Medicine's IT network, stealing data and encrypting systems. [...]
https://www.bleepingcomputer.com/news/security/uc-san-francisco-pays-114-million-for-ransomware-decryptor/
The University of California San Francisco (UCSF) says that it paid $1.14 million to the Netwalker ransomware operators who successfully breached the UCSF School of Medicine's IT network, stealing data and encrypting systems. [...]
https://www.bleepingcomputer.com/news/security/uc-san-francisco-pays-114-million-for-ransomware-decryptor/
BleepingComputer
UC San Francisco pays $1.14 million for ransomware decryptor
The University of California San Francisco (UCSF) says that it paid $1.14 million to the Netwalker ransomware operators who successfully breached the UCSF School of Medicine's IT network, stealing data and encrypting systems.
Microsoft officially launches Windows 10 Insider channels
Microsoft today announced that the new Windows Insider Channels are rolling out to Windows 10 customers enrolled in the program as initially announced earlier this month, on June 15. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-officially-launches-windows-10-insider-channels/
Microsoft today announced that the new Windows Insider Channels are rolling out to Windows 10 customers enrolled in the program as initially announced earlier this month, on June 15. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-officially-launches-windows-10-insider-channels/
BleepingComputer
Microsoft officially launches Windows 10 Insider channels
Microsoft today announced that the new Windows Insider Channels are rolling out to Windows 10 customers enrolled in the program as initially announced earlier this month, on June 15.
Seller floods hacker forum with data stolen from 14 companies
A data breach broker is selling databases containing user records for 14 different companies he claimed were breached by hackers in 2020. [...]
https://www.bleepingcomputer.com/news/security/seller-floods-hacker-forum-with-data-stolen-from-14-companies/
A data breach broker is selling databases containing user records for 14 different companies he claimed were breached by hackers in 2020. [...]
https://www.bleepingcomputer.com/news/security/seller-floods-hacker-forum-with-data-stolen-from-14-companies/
BleepingComputer
Seller floods hacker forum with data stolen from 14 companies
A data breach broker is selling databases containing user records for 14 different companies he claimed were breached by hackers in 2020.
How public safety systems can be abused by nation state actors
Open systems, open data, and open-source software provide a means to promote greater transparency, public trust, and user participation. But what happens when adversaries can abuse the same systems? [...]
https://www.bleepingcomputer.com/news/security/how-public-safety-systems-can-be-abused-by-nation-state-actors/
Open systems, open data, and open-source software provide a means to promote greater transparency, public trust, and user participation. But what happens when adversaries can abuse the same systems? [...]
https://www.bleepingcomputer.com/news/security/how-public-safety-systems-can-be-abused-by-nation-state-actors/
BleepingComputer
How public safety systems can be abused by nation state actors
Open systems, open data, and open-source software provide a means to promote greater transparency, public trust, and user participation. But what happens when adversaries can abuse the same systems?
Devious Bitcoin scam uses targeted texts and celeb endorsements
A multi-stage bitcoin fraud exposed and leveraged personally identifiable information to trick users into enlisting to a dubious investment site. Researchers found close to 250,000 unique records. [...]
https://www.bleepingcomputer.com/news/security/devious-bitcoin-scam-uses-targeted-texts-and-celeb-endorsements/
A multi-stage bitcoin fraud exposed and leveraged personally identifiable information to trick users into enlisting to a dubious investment site. Researchers found close to 250,000 unique records. [...]
https://www.bleepingcomputer.com/news/security/devious-bitcoin-scam-uses-targeted-texts-and-celeb-endorsements/
BleepingComputer
Devious Bitcoin scam uses targeted texts and celeb endorsements
A multi-stage bitcoin fraud exposed and leveraged personally identifiable information to trick users into enlisting to a dubious investment site. Researchers found close to 250,000 unique records.
Firefox 78 adds WebRender support to Windows PCs with Intel GPU
Mozilla has released Firefox 78 today, June 30th, 2020, to the Stable desktop channel for Windows, macOS, and Linux with new features, bug fixes, changes, enterprise improvements, and security fixes. [...]
https://www.bleepingcomputer.com/news/software/firefox-78-adds-webrender-support-to-windows-pcs-with-intel-gpu/
Mozilla has released Firefox 78 today, June 30th, 2020, to the Stable desktop channel for Windows, macOS, and Linux with new features, bug fixes, changes, enterprise improvements, and security fixes. [...]
https://www.bleepingcomputer.com/news/software/firefox-78-adds-webrender-support-to-windows-pcs-with-intel-gpu/
BleepingComputer
Firefox 78 adds WebRender support to Windows PCs with Intel GPU
Mozilla has released Firefox 78 today, June 30th, 2020, to the Stable desktop channel for Windows, macOS, and Linux with new features, bug fixes, changes, enterprise improvements, and security fixes.
Business giant Xerox allegedly suffers Maze Ransomware attack
Maze ransomware operators have updated their list of victims adding Xerox Corporation to the roster. It appears that the encryption routine had completed on June 25. [...]
https://www.bleepingcomputer.com/news/security/business-giant-xerox-allegedly-suffers-maze-ransomware-attack/
Maze ransomware operators have updated their list of victims adding Xerox Corporation to the roster. It appears that the encryption routine had completed on June 25. [...]
https://www.bleepingcomputer.com/news/security/business-giant-xerox-allegedly-suffers-maze-ransomware-attack/
BleepingComputer
Business giant Xerox allegedly suffers Maze Ransomware attack
Maze ransomware operators have updated their list of victims adding Xerox Corporation to the roster. It appears that the encryption routine had completed on June 25.
Clever Phishing scam targets websites with free DNSSEC offer
A very clever phishing campaign targets bloggers and website owners with emails pretending to be from their hosting provider who wants to upgrade their domain to use secure DNS (DNSSEC). [...]
https://www.bleepingcomputer.com/news/security/clever-phishing-scam-targets-websites-with-free-dnssec-offer/
A very clever phishing campaign targets bloggers and website owners with emails pretending to be from their hosting provider who wants to upgrade their domain to use secure DNS (DNSSEC). [...]
https://www.bleepingcomputer.com/news/security/clever-phishing-scam-targets-websites-with-free-dnssec-offer/
BleepingComputer
Clever Phishing scam targets websites with free DNSSEC offer
A very clever phishing campaign targets bloggers and website owners with emails pretending to be from their hosting provider who wants to upgrade their domain to use secure DNS (DNSSEC).
US designates China's Huawei and ZTE as national security threats
The U.S. Federal Communications Commission (FCC) today formally designated the Huawei Technologies Company (Huawei) and ZTE Corporation (ZTE) as national security threats to the integrity of U.S. communications networks or the communications supply chain. [...]
https://www.bleepingcomputer.com/news/security/us-designates-chinas-huawei-and-zte-as-national-security-threats/
The U.S. Federal Communications Commission (FCC) today formally designated the Huawei Technologies Company (Huawei) and ZTE Corporation (ZTE) as national security threats to the integrity of U.S. communications networks or the communications supply chain. [...]
https://www.bleepingcomputer.com/news/security/us-designates-chinas-huawei-and-zte-as-national-security-threats/
BleepingComputer
US designates China's Huawei and ZTE as national security threats
The U.S. Federal Communications Commission (FCC) today formally designated the Huawei Technologies Company (Huawei) and ZTE Corporation (ZTE) as national security threats to the integrity of U.S. communications networks or the communications supply chain.
New AMD drivers enhance Windows 10 on 5600M MacBook Pros
On June 29, AMD published new Boot Camp drivers for the MacBook Pro with Radeon 5600M. These new drivers released by AMD can be used in Boot Camp when booting into Windows 10 on the new MacBook Pro. [...]
https://www.bleepingcomputer.com/news/hardware/new-amd-drivers-enhance-windows-10-on-5600m-macbook-pros/
On June 29, AMD published new Boot Camp drivers for the MacBook Pro with Radeon 5600M. These new drivers released by AMD can be used in Boot Camp when booting into Windows 10 on the new MacBook Pro. [...]
https://www.bleepingcomputer.com/news/hardware/new-amd-drivers-enhance-windows-10-on-5600m-macbook-pros/
BleepingComputer
New AMD drivers enhance Windows 10 on 5600M MacBook Pros
On June 29, AMD published new Boot Camp drivers for the MacBook Pro with Radeon 5600M. These new drivers released by AMD can be used in Boot Camp when booting into Windows 10 on the new MacBook Pro.
Microsoft releases OOB security updates for Windows 10 RCE bugs
Microsoft has released two out-of-band security updates to address remote code execution security vulnerabilities affecting the Microsoft Windows Codecs Library on several Windows 10 and Windows Server versions. [...]
https://www.bleepingcomputer.com/news/security/microsoft-releases-oob-security-updates-for-windows-10-rce-bugs/
Microsoft has released two out-of-band security updates to address remote code execution security vulnerabilities affecting the Microsoft Windows Codecs Library on several Windows 10 and Windows Server versions. [...]
https://www.bleepingcomputer.com/news/security/microsoft-releases-oob-security-updates-for-windows-10-rce-bugs/
BleepingComputer
Microsoft releases urgent security updates for Windows 10 Codecs bugs
Microsoft has released two out-of-band security updates to address remote code execution security vulnerabilities affecting the Microsoft Windows Codecs Library on several Windows 10 and Windows Server versions.
EvilQuest wiper uses ransomware cover to steal files from Macs
A new info-stealer called EvilQuest is using ransomware as a decoy to steal files from macOS users. The victims get infected after downloading trojanized installers of popular apps from torrent trackers. [...]
https://www.bleepingcomputer.com/news/security/evilquest-wiper-uses-ransomware-cover-to-steal-files-from-macs/
A new info-stealer called EvilQuest is using ransomware as a decoy to steal files from macOS users. The victims get infected after downloading trojanized installers of popular apps from torrent trackers. [...]
https://www.bleepingcomputer.com/news/security/evilquest-wiper-uses-ransomware-cover-to-steal-files-from-macs/
BleepingComputer
ThiefQuest ransomware is a file-stealing Mac wiper in disguise
A new data wiper and info-stealer called EvilQuest is using ransomware as a decoy to steal files from macOS users. The victims get infected after downloading trojanized installers of popular apps from torrent trackers.
Microsoft lifts Windows 10 2004 update block on Surface devices
Microsoft removed a Windows 10 2004 safeguard hold applied to block customers from experiencing sporadic shutdowns and restarts on some Microsoft Surface devices after applying the Windows 10 May 2020 Update. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-lifts-windows-10-2004-update-block-on-surface-devices/
Microsoft removed a Windows 10 2004 safeguard hold applied to block customers from experiencing sporadic shutdowns and restarts on some Microsoft Surface devices after applying the Windows 10 May 2020 Update. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-lifts-windows-10-2004-update-block-on-surface-devices/
BleepingComputer
Microsoft lifts Windows 10 2004 update block on Surface devices
Microsoft removed a Windows 10 2004 safeguard hold applied to block customers from experiencing sporadic shutdowns and restarts on some Microsoft Surface devices after applying the Windows 10 May 2020 Update.
Mozilla rolls out emergency Firefox update to fix search issues
After releasing Firefox 78 yesterday, Mozilla quickly halted its rollout via automatic updates due to problems discovered with the built-in search functionality. Today, Mozilla has released a new version 78.0.1 to fix these issues and has resumed auto-updates. [...]
https://www.bleepingcomputer.com/news/software/mozilla-rolls-out-emergency-firefox-update-to-fix-search-issues/
After releasing Firefox 78 yesterday, Mozilla quickly halted its rollout via automatic updates due to problems discovered with the built-in search functionality. Today, Mozilla has released a new version 78.0.1 to fix these issues and has resumed auto-updates. [...]
https://www.bleepingcomputer.com/news/software/mozilla-rolls-out-emergency-firefox-update-to-fix-search-issues/
BleepingComputer
Mozilla rolls out emergency Firefox update to fix search issues
After releasing Firefox 78 yesterday, Mozilla quickly halted its rollout via automatic updates due to problems discovered with the built-in search functionality. Today, Mozilla has released a new version 78.0.1 to fix these issues and has resumed auto-updates.
Dozens of US news sites hacked in WastedLocker ransomware attacks
The Evil Corp gang hacked into dozens of US newspaper websites owned by the same company to infect the employees of over 30 major US private firms using fake software update alerts displayed by the malicious SocGholish JavaScript-based framework. [...]
https://www.bleepingcomputer.com/news/security/dozens-of-us-news-sites-hacked-in-wastedlocker-ransomware-attacks/
The Evil Corp gang hacked into dozens of US newspaper websites owned by the same company to infect the employees of over 30 major US private firms using fake software update alerts displayed by the malicious SocGholish JavaScript-based framework. [...]
https://www.bleepingcomputer.com/news/security/dozens-of-us-news-sites-hacked-in-wastedlocker-ransomware-attacks/
BleepingComputer
Dozens of US news sites hacked in WastedLocker ransomware attacks
The Evil Corp gang hacked into dozens of US newspaper websites owned by the same company to infect the employees of over 30 major US private firms using fake software update alerts displayed by the malicious SocGholish JavaScript-based framework.
Windows 10 PowerToys 0.19 released in huge stability bug fix
Microsoft has released PowerToys 0.19 in a huge bug fix that aims to increase performance and stability in the tools. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-powertoys-019-released-in-huge-stability-bug-fix/
Microsoft has released PowerToys 0.19 in a huge bug fix that aims to increase performance and stability in the tools. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-powertoys-019-released-in-huge-stability-bug-fix/
BleepingComputer
Windows 10 PowerToys 0.19 released in huge stability bug fix
Microsoft has released PowerToys 0.19 in a huge bug fix that aims to increase performance and stability in the tools.
US Govt shares tips on defending against cyberattacks via Tor
The Cybersecurity and Infrastructure Security Agency (CISA) today issued guidance on how to protect against cyberattacks launched from the activity originating from or routed through the Tor anonymity network. [...]
https://www.bleepingcomputer.com/news/security/us-govt-shares-tips-on-defending-against-cyberattacks-via-tor/
The Cybersecurity and Infrastructure Security Agency (CISA) today issued guidance on how to protect against cyberattacks launched from the activity originating from or routed through the Tor anonymity network. [...]
https://www.bleepingcomputer.com/news/security/us-govt-shares-tips-on-defending-against-cyberattacks-via-tor/
BleepingComputer
US Govt shares tips on defending against cyberattacks via Tor
The Cybersecurity and Infrastructure Security Agency (CISA) today issued guidance on how to protect against cyberattacks launched from the activity originating from or routed through the Tor anonymity network.
Windows POS malware uses DNS to smuggle stolen credit cards
A Windows Point-of-Sale (POS) malware has been discovered using the DNS protocol to smuggle stolen credit cards to a remote server under attacker's control. [...]
https://www.bleepingcomputer.com/news/security/windows-pos-malware-uses-dns-to-smuggle-stolen-credit-cards/
A Windows Point-of-Sale (POS) malware has been discovered using the DNS protocol to smuggle stolen credit cards to a remote server under attacker's control. [...]
https://www.bleepingcomputer.com/news/security/windows-pos-malware-uses-dns-to-smuggle-stolen-credit-cards/
BleepingComputer
Windows POS malware uses DNS to smuggle stolen credit cards
A Windows Point-of-Sale (POS) malware has been discovered using the DNS protocol to smuggle stolen credit cards to a remote server under attacker's control.
TrickBot malware now checks screen resolution to evade analysis
The infamous TrickBot trojan has started to check the screen resolutions of victims to detect whether the malware is running in a virtual machine. [...]
https://www.bleepingcomputer.com/news/security/trickbot-malware-now-checks-screen-resolution-to-evade-analysis/
The infamous TrickBot trojan has started to check the screen resolutions of victims to detect whether the malware is running in a virtual machine. [...]
https://www.bleepingcomputer.com/news/security/trickbot-malware-now-checks-screen-resolution-to-evade-analysis/
BleepingComputer
TrickBot malware now checks screen resolution to evade analysis
The infamous TrickBot trojan has started to check the screen resolutions of victims to detect whether the malware is running in a virtual machine.