Microsoft fixes Word, Skype hangs in July Office 2020 updates
Microsoft released the July 2020 non-security Microsoft Office updates with improvements and fixes for issues impacting Windows Installer (MSI) editions of Office 2016 and Office 2013 products. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-word-skype-hangs-in-july-office-2020-updates/
Microsoft released the July 2020 non-security Microsoft Office updates with improvements and fixes for issues impacting Windows Installer (MSI) editions of Office 2016 and Office 2013 products. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-word-skype-hangs-in-july-office-2020-updates/
BleepingComputer
Microsoft fixes Word, Skype hangs in July Office 2020 updates
Microsoft released the July 2020 non-security Microsoft Office updates with improvements and fixes for issues impacting Windows Installer (MSI) editions of Office 2016 and Office 2013 products.
NVIDIA fixes code execution bug in GeForce Experience software
NVIDIA has addressed a vulnerability in the Windows NVIDIA GeForce Experience (GFE) software that could allow local attackers to execute arbitrary code, trigger a denial of service (DoS) state, or access privileged information on unpatched systems. [...]
https://www.bleepingcomputer.com/news/security/nvidia-fixes-code-execution-bug-in-geforce-experience-software/
NVIDIA has addressed a vulnerability in the Windows NVIDIA GeForce Experience (GFE) software that could allow local attackers to execute arbitrary code, trigger a denial of service (DoS) state, or access privileged information on unpatched systems. [...]
https://www.bleepingcomputer.com/news/security/nvidia-fixes-code-execution-bug-in-geforce-experience-software/
BleepingComputer
NVIDIA fixes code execution bug in GeForce Experience software
NVIDIA has addressed a vulnerability in the Windows NVIDIA GeForce Experience (GFE) software that could allow local attackers to execute arbitrary code, trigger a denial of service (DoS) state, or access privileged information on unpatched systems.
First look: Microsoft's Project Freta detects Linux malware for free
Microsoft Research has announced a cloud-based malware detection service called Project Freta to detect rootkits, cryptominers, and previously undetected malware strains lurking in your Linux cloud VM images. [...]
https://www.bleepingcomputer.com/news/security/first-look-microsofts-project-freta-detects-linux-malware-for-free/
Microsoft Research has announced a cloud-based malware detection service called Project Freta to detect rootkits, cryptominers, and previously undetected malware strains lurking in your Linux cloud VM images. [...]
https://www.bleepingcomputer.com/news/security/first-look-microsofts-project-freta-detects-linux-malware-for-free/
BleepingComputer
First look: Microsoft's Project Freta detects Linux malware for free
Microsoft Research has announced a cloud-based malware detection service called Project Freta to detect rootkits, cryptominers, and previously undetected malware strains lurking in your Linux cloud VM images.
Microsoft warns of Office 365 phishing via malicious OAuth apps
Microsoft warns that with the shift to remote working, customers are exposed to additional security threats such as consent phishing, besides conventional credential theft and email phishing attacks. [...]
https://www.bleepingcomputer.com/news/security/microsoft-warns-of-office-365-phishing-via-malicious-oauth-apps/
Microsoft warns that with the shift to remote working, customers are exposed to additional security threats such as consent phishing, besides conventional credential theft and email phishing attacks. [...]
https://www.bleepingcomputer.com/news/security/microsoft-warns-of-office-365-phishing-via-malicious-oauth-apps/
BleepingComputer
Microsoft warns of Office 365 phishing via malicious OAuth apps
Microsoft warns that with the shift to remote working, customers are exposed to additional security threats such as consent phishing, besides conventional credential theft and email phishing attacks.
Palo Alto Networks fixes another severe flaw in PAN-OS devices
Palo Alto Networks (PAN) today addressed another severe vulnerability found in the PAN-OS GlobalProtect portal and affecting unpatched PAN next-generation firewalls. [...]
https://www.bleepingcomputer.com/news/security/palo-alto-networks-fixes-another-severe-flaw-in-pan-os-devices/
Palo Alto Networks (PAN) today addressed another severe vulnerability found in the PAN-OS GlobalProtect portal and affecting unpatched PAN next-generation firewalls. [...]
https://www.bleepingcomputer.com/news/security/palo-alto-networks-fixes-another-severe-flaw-in-pan-os-devices/
BleepingComputer
Palo Alto Networks fixes another severe flaw in PAN-OS devices
Palo Alto Networks (PAN) today addressed another severe vulnerability found in the PAN-OS GlobalProtect portal and affecting unpatched PAN next-generation firewalls.
Over 15 billion credentials in circulation on hacker forums
At least 15 billion credentials are currently circulating on various hacker forums, giving cybercriminals fodder for account takeover attacks and identity renting services. [...]
https://www.bleepingcomputer.com/news/security/over-15-billion-credentials-in-circulation-on-hacker-forums/
At least 15 billion credentials are currently circulating on various hacker forums, giving cybercriminals fodder for account takeover attacks and identity renting services. [...]
https://www.bleepingcomputer.com/news/security/over-15-billion-credentials-in-circulation-on-hacker-forums/
BleepingComputer
Over 15 billion credentials in circulation on hacker forums
At least 15 billion credentials are currently circulating on various hacker forums, giving cybercriminals fodder for account takeover attacks and identity renting services.
Joker Android malware keeps evading Google Play Store defenses
The threat actor behind the Joker Android malware has once again succeeded to successfully slip spyware infected apps onto the Play Store, Google's official Android app store. [...]
https://www.bleepingcomputer.com/news/security/joker-android-malware-keeps-evading-google-play-store-defenses/
The threat actor behind the Joker Android malware has once again succeeded to successfully slip spyware infected apps onto the Play Store, Google's official Android app store. [...]
https://www.bleepingcomputer.com/news/security/joker-android-malware-keeps-evading-google-play-store-defenses/
BleepingComputer
Joker Android malware keeps evading Google Play Store defenses
The threat actor behind the Joker Android malware has once again succeeded to successfully slip spyware infected apps onto the Play Store, Google's official Android app store.
Evilnum hackers use the same malware supplier as FIN6, Cobalt
Hackers in the Evilnum group have developed a toolset that combines custom malware, legitimate utilities, and tools bought from a malware-as-a-service (MaaS) provider that caters for big fintech threat actors. [...]
https://www.bleepingcomputer.com/news/security/evilnum-hackers-use-the-same-malware-supplier-as-fin6-cobalt/
Hackers in the Evilnum group have developed a toolset that combines custom malware, legitimate utilities, and tools bought from a malware-as-a-service (MaaS) provider that caters for big fintech threat actors. [...]
https://www.bleepingcomputer.com/news/security/evilnum-hackers-use-the-same-malware-supplier-as-fin6-cobalt/
BleepingComputer
Evilnum hackers use the same malware supplier as FIN6, Cobalt
Hackers in the Evilnum group have developed a toolset that combines custom malware, legitimate utilities, and tools bought from a malware-as-a-service (MaaS) provider that caters to big fintech threat actors.
Persuasive Office 365 phishing uses fake Zoom suspension alerts
Microsoft Office 365 users are targeted by a new phishing campaign using fake Zoom notifications to warn those who work in corporate environments that their Zoom accounts have been suspended, with the end goal of stealing Office 365 logins. [...]
https://www.bleepingcomputer.com/news/security/persuasive-office-365-phishing-uses-fake-zoom-suspension-alerts/
Microsoft Office 365 users are targeted by a new phishing campaign using fake Zoom notifications to warn those who work in corporate environments that their Zoom accounts have been suspended, with the end goal of stealing Office 365 logins. [...]
https://www.bleepingcomputer.com/news/security/persuasive-office-365-phishing-uses-fake-zoom-suspension-alerts/
BleepingComputer
Persuasive Office 365 phishing uses fake Zoom suspension alerts
Microsoft Office 365 users are targeted by a new phishing campaign using fake Zoom notifications to warn those who work in corporate environments that their Zoom accounts have been suspended, with the end goal of stealing Office 365 logins.
Microsoft testing new Windows 10 KDP anti-malware protection
Microsoft is testing a new Windows 10 security feature dubbed Kernel Data Protection (KDP) and designed to block malicious actors from altering Windows drivers and systems' protected kernel memory as part of their attacks. [...]
https://www.bleepingcomputer.com/news/security/microsoft-testing-new-windows-10-kdp-anti-malware-protection/
Microsoft is testing a new Windows 10 security feature dubbed Kernel Data Protection (KDP) and designed to block malicious actors from altering Windows drivers and systems' protected kernel memory as part of their attacks. [...]
https://www.bleepingcomputer.com/news/security/microsoft-testing-new-windows-10-kdp-anti-malware-protection/
BleepingComputer
Microsoft testing new Windows 10 KDP anti-malware protection
Microsoft is testing a new Windows 10 security feature dubbed Kernel Data Protection (KDP) and designed to block malicious actors from altering Windows drivers and systems' protected kernel memory as part of their attacks.
Google will ban ads for stalkerware starting August 11
Google will update its Google Ads Enabling Dishonest Behavior policy to globally ban advertising for spyware and surveillance technology known as stalkerware starting with August 11, 2020. [...]
https://www.bleepingcomputer.com/news/security/google-will-ban-ads-for-stalkerware-starting-august-11/
Google will update its Google Ads Enabling Dishonest Behavior policy to globally ban advertising for spyware and surveillance technology known as stalkerware starting with August 11, 2020. [...]
https://www.bleepingcomputer.com/news/security/google-will-ban-ads-for-stalkerware-starting-august-11/
BleepingComputer
Google will ban ads for stalkerware starting August 11
Google will update its Google Ads Enabling Dishonest Behavior policy to globally ban advertising for spyware and surveillance technology known as stalkerware starting with August 11, 2020.
Conti ransomware shows signs of being a Ryuk successor
The Conti Ransomware is an upcoming threat targeting corporate networks with new features that allow it to perform quicker and more targeted attacks. There are also indications that this ransomware shares the same malware code as Ryuk, who has slowly been fading away, while Conti's distribution is increasing. [...]
https://www.bleepingcomputer.com/news/security/conti-ransomware-shows-signs-of-being-a-ryuk-successor/
The Conti Ransomware is an upcoming threat targeting corporate networks with new features that allow it to perform quicker and more targeted attacks. There are also indications that this ransomware shares the same malware code as Ryuk, who has slowly been fading away, while Conti's distribution is increasing. [...]
https://www.bleepingcomputer.com/news/security/conti-ransomware-shows-signs-of-being-a-ryuk-successor/
BleepingComputer
Conti ransomware shows signs of being Ryuk's successor
The Conti Ransomware is an upcoming threat targeting corporate networks with new features that allow it to perform quicker and more targeted attacks. There are also indications that this ransomware shares the same malware code as Ryuk, who has slowly been…
How to import and backup saved passwords in Google Chrome
Google Chrome Password Manager lets you save usernames and passwords and automatically use them to log in to websites you visit. If you ever decide to switch from or to Google Chrome and want to take your saved passwords with you, this guide will help you. [...]
https://www.bleepingcomputer.com/news/google/how-to-import-and-backup-saved-passwords-in-google-chrome/
Google Chrome Password Manager lets you save usernames and passwords and automatically use them to log in to websites you visit. If you ever decide to switch from or to Google Chrome and want to take your saved passwords with you, this guide will help you. [...]
https://www.bleepingcomputer.com/news/google/how-to-import-and-backup-saved-passwords-in-google-chrome/
BleepingComputer
How to import and backup saved passwords in Google Chrome
Google Chrome Password Manager lets you save usernames and passwords and automatically use them to log in to websites you visit. If you ever decide to switch from or to Google Chrome and want to take your saved passwords with you, this guide will help you.
Over 1,300 phishing kits for sale on hacker forum
A member of a hacker forum is looking to make over $30,000 from selling a huge collection of more than 1,300 phishing kits. [...]
https://www.bleepingcomputer.com/news/security/over-1-300-phishing-kits-for-sale-on-hacker-forum/
A member of a hacker forum is looking to make over $30,000 from selling a huge collection of more than 1,300 phishing kits. [...]
https://www.bleepingcomputer.com/news/security/over-1-300-phishing-kits-for-sale-on-hacker-forum/
BleepingComputer
Over 1,300 phishing kits for sale on hacker forum
A member of a hacker forum is looking to make over $30,000 from selling a huge collection of more than 1,300 phishing kits.
Mozilla reduces TLS certificate lifespan to 1 year in September
Mozilla has officially announced that starting September 1st, 2020, they will no longer consider any newly issued certificates with a lifespan greater than 398 days, or a little over one year, as valid. [...]
https://www.bleepingcomputer.com/news/security/mozilla-reduces-tls-certificate-lifespan-to-1-year-in-september/
Mozilla has officially announced that starting September 1st, 2020, they will no longer consider any newly issued certificates with a lifespan greater than 398 days, or a little over one year, as valid. [...]
https://www.bleepingcomputer.com/news/security/mozilla-reduces-tls-certificate-lifespan-to-1-year-in-september/
BleepingComputer
Mozilla reduces TLS certificate lifespan to 1 year in September
Mozilla has officially announced that starting September 1st, 2020, they will no longer consider any newly issued certificates with a lifespan greater than 398 days, or a little over one year, as valid.
US Secret Service creates new Cyber Fraud Task Force
The U.S. Secret Service announced the creation of the Cyber Fraud Task Force (CFTF) after the merger of its Financial Crimes Task Forces (FCTFs) and Electronic Crimes Task Forces (ECTFs) into a single unified network. [...]
https://www.bleepingcomputer.com/news/security/us-secret-service-creates-new-cyber-fraud-task-force/
The U.S. Secret Service announced the creation of the Cyber Fraud Task Force (CFTF) after the merger of its Financial Crimes Task Forces (FCTFs) and Electronic Crimes Task Forces (ECTFs) into a single unified network. [...]
https://www.bleepingcomputer.com/news/security/us-secret-service-creates-new-cyber-fraud-task-force/
BleepingComputer
US Secret Service creates new Cyber Fraud Task Force
The U.S. Secret Service announced the creation of the Cyber Fraud Task Force (CFTF) after the merger of its Financial Crimes Task Forces (FCTFs) and Electronic Crimes Task Forces (ECTFs) into a single unified network.
eToro accounts peddled by the thousands on cybercrime forums
A threat actor is peddling 62,000 active eToro accounts on a known cybercrime forum. They are also likely collaborating with REvil ransomware on the corporate intrusion front. [...]
https://www.bleepingcomputer.com/news/security/etoro-accounts-peddled-by-the-thousands-on-cybercrime-forums/
A threat actor is peddling 62,000 active eToro accounts on a known cybercrime forum. They are also likely collaborating with REvil ransomware on the corporate intrusion front. [...]
https://www.bleepingcomputer.com/news/security/etoro-accounts-peddled-by-the-thousands-on-cybercrime-forums/
BleepingComputer
eToro accounts peddled by the thousands on cybercrime forums
A threat actor is peddling 62,000 active eToro accounts on a known cybercrime forum. They are also likely collaborating with REvil ransomware on the corporate intrusion front.
Uber Eats outage in multiple countries, 'Internal Server Error" reports
The Uber Eats food delivery service is having an outage in multiple countries that is preventing orders from being placed in the app. [...]
https://www.bleepingcomputer.com/news/technology/uber-eats-outage-in-multiple-countries-internal-server-error-reports/
The Uber Eats food delivery service is having an outage in multiple countries that is preventing orders from being placed in the app. [...]
https://www.bleepingcomputer.com/news/technology/uber-eats-outage-in-multiple-countries-internal-server-error-reports/
BleepingComputer
Uber Eats outage in multiple countries, 'Internal Server Error" reports
The Uber Eats food delivery service is having an outage in multiple countries that is preventing orders from being placed in the app.
How to protect your Verizon number from SIM swapping attacks
Verizon now makes it possible for customers to defend against SIM swapping attacks by enabling the free Number Lock protection feature through the My Verizon app or the My Verizon website. [...]
https://www.bleepingcomputer.com/news/security/how-to-protect-your-verizon-number-from-sim-swapping-attacks/
Verizon now makes it possible for customers to defend against SIM swapping attacks by enabling the free Number Lock protection feature through the My Verizon app or the My Verizon website. [...]
https://www.bleepingcomputer.com/news/security/how-to-protect-your-verizon-number-from-sim-swapping-attacks/
BleepingComputer
How to protect your Verizon number from SIM swapping attacks
Verizon now makes it possible for customers to defend against SIM swapping attacks by enabling the free Number Lock protection feature through the My Verizon app or the My Verizon website.
Microsoft will not support PHP 8.0 for Windows in 'any capacity'
Microsoft has announced that it will not offer support in 'any capacity' for PHP for Windows 8.0 when it is released. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-will-not-support-php-80-for-windows-in-any-capacity/
Microsoft has announced that it will not offer support in 'any capacity' for PHP for Windows 8.0 when it is released. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-will-not-support-php-80-for-windows-in-any-capacity/
BleepingComputer
Microsoft will not support PHP 8.0 for Windows in 'any capacity'
Microsoft has announced that it will not offer support in 'any capacity' for PHP for Windows 8.0 when it is released.
Apple: Closing MacBooks with camera covers leads to display damage
Apple warns customers to avoid closing their MacBook, MacBook Air, or MacBook Pro devices if they use a camera cover thicker than 0.1mm to avoid display damage. [...]
https://www.bleepingcomputer.com/news/apple/apple-closing-macbooks-with-camera-covers-leads-to-display-damage/
Apple warns customers to avoid closing their MacBook, MacBook Air, or MacBook Pro devices if they use a camera cover thicker than 0.1mm to avoid display damage. [...]
https://www.bleepingcomputer.com/news/apple/apple-closing-macbooks-with-camera-covers-leads-to-display-damage/
BleepingComputer
Apple: Closing MacBooks with camera covers leads to display damage
Apple warns customers to avoid closing their MacBook, MacBook Air, or MacBook Pro devices if they use a camera cover thicker than 0.1mm to avoid display damage.