ProctorU confirms data breach after database leaked online
Online exam proctoring solution ProctorU has confirmed a data breach after a threat actor released a stolen database of user records on a hacker forum. [...]
https://www.bleepingcomputer.com/news/security/proctoru-confirms-data-breach-after-database-leaked-online/
Online exam proctoring solution ProctorU has confirmed a data breach after a threat actor released a stolen database of user records on a hacker forum. [...]
https://www.bleepingcomputer.com/news/security/proctoru-confirms-data-breach-after-database-leaked-online/
BleepingComputer
ProctorU confirms data breach after database leaked online
Online exam proctoring solution ProctorU has confirmed a data breach after a threat actor released a stolen database of user records on a hacker forum.
Hacked government, college sites push malware via fake hacking tools
A large scale hacking campaign is targeting governments and university websites to host articles on hacking social network accounts that lead to malware and scams. [...]
https://www.bleepingcomputer.com/news/security/hacked-government-college-sites-push-malware-via-fake-hacking-tools/
A large scale hacking campaign is targeting governments and university websites to host articles on hacking social network accounts that lead to malware and scams. [...]
https://www.bleepingcomputer.com/news/security/hacked-government-college-sites-push-malware-via-fake-hacking-tools/
BleepingComputer
Hacked government, college sites push malware via fake hacking tools
A large scale hacking campaign is targeting governments and university websites to host articles on hacking social network accounts that lead to malware and scams.
Office 365 will let you manage phishing simulation emails
Microsoft is adding support for allowing emails containing malicious URLs or attachments to reach the mailboxes of end-users to make it easier to run phishing training sessions or simulations. [...]
https://www.bleepingcomputer.com/news/security/office-365-will-let-you-manage-phishing-simulation-emails/
Microsoft is adding support for allowing emails containing malicious URLs or attachments to reach the mailboxes of end-users to make it easier to run phishing training sessions or simulations. [...]
https://www.bleepingcomputer.com/news/security/office-365-will-let-you-manage-phishing-simulation-emails/
BleepingComputer
Office 365 will let you manage phishing simulation emails
Microsoft is adding support for allowing emails containing malicious URLs or attachments to reach the mailboxes of end-users to make it easier to run phishing training sessions or simulations.
Avaddon ransomware launches data leak site to extort victims
Avaddon ransomware is the latest cybercrime operation to launch a data leak site that will be used to publish the stolen data of victims who do not pay a ransom demand. [...]
https://www.bleepingcomputer.com/news/security/avaddon-ransomware-launches-data-leak-site-to-extort-victims/
Avaddon ransomware is the latest cybercrime operation to launch a data leak site that will be used to publish the stolen data of victims who do not pay a ransom demand. [...]
https://www.bleepingcomputer.com/news/security/avaddon-ransomware-launches-data-leak-site-to-extort-victims/
BleepingComputer
Avaddon ransomware launches data leak site to extort victims
Avaddon ransomware is the latest cybercrime operation to launch a data leak site that will be used to publish the stolen data of victims who do not pay a ransom demand.
Michigan State University discloses credit card theft incident
Michigan State University (MSU) today disclosed that attackers were able to steal credit card and personal information from roughly 2,600 users of its shop.msu.edu online store between October 2019 and June 2020. [...]
https://www.bleepingcomputer.com/news/security/michigan-state-university-discloses-credit-card-theft-incident/
Michigan State University (MSU) today disclosed that attackers were able to steal credit card and personal information from roughly 2,600 users of its shop.msu.edu online store between October 2019 and June 2020. [...]
https://www.bleepingcomputer.com/news/security/michigan-state-university-discloses-credit-card-theft-incident/
BleepingComputer
Michigan State University discloses credit card theft incident
Michigan State University (MSU) today disclosed that attackers were able to steal credit card and personal information from roughly 2,600 users of its shop.msu.edu online store between October 2019 and June 2020.
Upgraded Agent Tesla malware steals passwords from browsers, VPNs
New variants of Agent Tesla remote access Trojan now come with modules dedicated to stealing credentials from applications including popular web browsers, VPN software, as well as FTP and email clients. [...]
https://www.bleepingcomputer.com/news/security/upgraded-agent-tesla-malware-steals-passwords-from-browsers-vpns/
New variants of Agent Tesla remote access Trojan now come with modules dedicated to stealing credentials from applications including popular web browsers, VPN software, as well as FTP and email clients. [...]
https://www.bleepingcomputer.com/news/security/upgraded-agent-tesla-malware-steals-passwords-from-browsers-vpns/
BleepingComputer
Upgraded Agent Tesla malware steals passwords from browsers, VPNs
New variants of Agent Tesla information-stealing Trojan now come with modules dedicated to stealing credentials from applications including popular web browsers, VPN software, as well as FTP and email clients.
vBulletin fixes ridiculously easy to exploit zero-day RCE bug
A simple one-line exploit has been published for a zero-day pre-authentication remote code execution (RCE) vulnerability in the vBulletin forum software. [...]
https://www.bleepingcomputer.com/news/security/vbulletin-fixes-ridiculously-easy-to-exploit-zero-day-rce-bug/
A simple one-line exploit has been published for a zero-day pre-authentication remote code execution (RCE) vulnerability in the vBulletin forum software. [...]
https://www.bleepingcomputer.com/news/security/vbulletin-fixes-ridiculously-easy-to-exploit-zero-day-rce-bug/
BleepingComputer
vBulletin fixes ridiculously easy to exploit zero-day RCE bug
A simple one-line exploit has been published for a zero-day pre-authentication remote code execution (RCE) vulnerability in the vBulletin forum software.
Twitter experiencing issues sending account verification codes
Twitter is experiencing a worldwide service disruption preventing users from receiving account verification codes via text messages or phone calls. [...]
https://www.bleepingcomputer.com/news/technology/twitter-experiencing-issues-sending-account-verification-codes/
Twitter is experiencing a worldwide service disruption preventing users from receiving account verification codes via text messages or phone calls. [...]
https://www.bleepingcomputer.com/news/technology/twitter-experiencing-issues-sending-account-verification-codes/
BleepingComputer
Twitter experiencing issues sending account verification codes
Twitter is experiencing a worldwide service disruption preventing users from receiving account verification codes via text messages or phone calls.
Citrix fixes critical bugs allowing takeover of XenMobile Servers
Citrix today fixed 5 vulnerabilities impacting multiple versions of Citrix Endpoint Management (CEM) on-premise instances, also known as XenMobile Server. [...]
https://www.bleepingcomputer.com/news/security/citrix-fixes-critical-bugs-allowing-takeover-of-xenmobile-servers/
Citrix today fixed 5 vulnerabilities impacting multiple versions of Citrix Endpoint Management (CEM) on-premise instances, also known as XenMobile Server. [...]
https://www.bleepingcomputer.com/news/security/citrix-fixes-critical-bugs-allowing-takeover-of-xenmobile-servers/
BleepingComputer
Citrix fixes critical bugs allowing takeover of XenMobile Servers
Citrix today fixed 5 vulnerabilities impacting multiple versions of Citrix Endpoint Management (CEM) on-premise instances, also known as XenMobile Server.
Adobe fixes critical code execution bugs in Acrobat and Reader
Adobe has released security updates for Adobe Acrobat, Reader, and Lightroom that fix a total of twenty-six vulnerabilities in the three programs. [...]
https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-code-execution-bugs-in-acrobat-and-reader/
Adobe has released security updates for Adobe Acrobat, Reader, and Lightroom that fix a total of twenty-six vulnerabilities in the three programs. [...]
https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-code-execution-bugs-in-acrobat-and-reader/
BleepingComputer
Adobe fixes critical code execution bugs in Acrobat and Reader
Adobe has released security updates for Adobe Acrobat, Reader, and Lightroom that fix a total of twenty-six vulnerabilities in the three programs.
Colorado city forced to pay $45,000 ransom to decrypt files
The City of Lafayette in Colorado, USA has been forced to pay $45,000 after the City's devices were encrypted in July and they were unable to restore necessary files from backup. [...]
https://www.bleepingcomputer.com/news/security/colorado-city-forced-to-pay-45-000-ransom-to-decrypt-files/
The City of Lafayette in Colorado, USA has been forced to pay $45,000 after the City's devices were encrypted in July and they were unable to restore necessary files from backup. [...]
https://www.bleepingcomputer.com/news/security/colorado-city-forced-to-pay-45-000-ransom-to-decrypt-files/
BleepingComputer
Colorado city forced to pay $45,000 ransom to decrypt files
The City of Lafayette in Colorado, USA has been forced to pay $45,000 after the City's devices were encrypted in July and they were unable to restore necessary files from backup.
Windows 10 Cumulative Updates KB4566782 & KB4565351 Released
Today is the second Tuesday of the month and August 2020 security updates are now available for all supported versions of Windows 10. As always, you can download and install the latest security fixes by checking for updates in the Settings. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-cumulative-updates-kb4566782-and-kb4565351-released/
Today is the second Tuesday of the month and August 2020 security updates are now available for all supported versions of Windows 10. As always, you can download and install the latest security fixes by checking for updates in the Settings. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-cumulative-updates-kb4566782-and-kb4565351-released/
BleepingComputer
Windows 10 Cumulative Updates KB4566782 & KB4565351 Released
Today is the second Tuesday of the month and August 2020 security updates are now available for all supported versions of Windows 10. As always, you can download and install the latest security fixes by checking for updates in the Settings.
Microsoft August 2020 Patch Tuesday fixes 2 zero-days, 120 flaws
Today is Microsoft's August 2020 Patch Tuesday, and while this is just a typical day for most of you, Windows administrators around the world want to pull their hair out. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2020-patch-tuesday-fixes-2-zero-days-120-flaws/
Today is Microsoft's August 2020 Patch Tuesday, and while this is just a typical day for most of you, Windows administrators around the world want to pull their hair out. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2020-patch-tuesday-fixes-2-zero-days-120-flaws/
BleepingComputer
Microsoft August 2020 Patch Tuesday fixes 2 zero-days, 120 flaws
Today is Microsoft's August 2020 Patch Tuesday, and while this is just a typical day for most of you, Windows administrators around the world want to pull their hair out.
Network intruders selling access to high-value companies
Breaching corporate networks and selling access to them is a business in and of itself. For many hackers, this is how they make their living, others do it forced by financial struggles to supplement their revenue. [...]
https://www.bleepingcomputer.com/news/security/network-intruders-selling-access-to-high-value-companies/
Breaching corporate networks and selling access to them is a business in and of itself. For many hackers, this is how they make their living, others do it forced by financial struggles to supplement their revenue. [...]
https://www.bleepingcomputer.com/news/security/network-intruders-selling-access-to-high-value-companies/
BleepingComputer
Network intruders selling access to high-value companies
Breaching corporate networks and selling access to them is a business in and of itself. For many hackers, this is how they make their living, others do it forced by financial struggles to supplement their revenue.
SANS infosec training org suffers data breach after phishing attack
The SANS cybersecurity training organization has suffered a data breach after one of their employees fell victim to a phishing attack. [...]
https://www.bleepingcomputer.com/news/security/sans-infosec-training-org-suffers-data-breach-after-phishing-attack/
The SANS cybersecurity training organization has suffered a data breach after one of their employees fell victim to a phishing attack. [...]
https://www.bleepingcomputer.com/news/security/sans-infosec-training-org-suffers-data-breach-after-phishing-attack/
BleepingComputer
SANS infosec training org suffers data breach after phishing attack
The SANS cybersecurity training organization has suffered a data breach after one of their employees fell victim to a phishing attack.
SAP updates security note for critical RECON vulnerability
SAP today released its security patches for August, alerting of new critical and high-severity vulnerabilities in several of its products, mostly NetWeaver Application Server (AS). [...]
https://www.bleepingcomputer.com/news/security/sap-updates-security-note-for-critical-recon-vulnerability/
SAP today released its security patches for August, alerting of new critical and high-severity vulnerabilities in several of its products, mostly NetWeaver Application Server (AS). [...]
https://www.bleepingcomputer.com/news/security/sap-updates-security-note-for-critical-recon-vulnerability/
BleepingComputer
SAP updates security note for critical RECON vulnerability
SAP today released its security patches for August, alerting of new critical and high-severity vulnerabilities in several of its products, mostly NetWeaver Application Server (AS).
Dharma ransomware created a hacking toolkit to make cybercrime easy
The Darhma Ransomware-as-a-Service (RaaS) operation makes it easy for a wannabe cyber-criminal to get into the ransomware business by offering a toolkit that does almost everything for them. [...]
https://www.bleepingcomputer.com/news/security/dharma-ransomware-created-a-hacking-toolkit-to-make-cybercrime-easy/
The Darhma Ransomware-as-a-Service (RaaS) operation makes it easy for a wannabe cyber-criminal to get into the ransomware business by offering a toolkit that does almost everything for them. [...]
https://www.bleepingcomputer.com/news/security/dharma-ransomware-created-a-hacking-toolkit-to-make-cybercrime-easy/
BleepingComputer
Dharma ransomware created a hacking toolkit to make cybercrime easy
The Dharma Ransomware-as-a-Service (RaaS) operation makes it easy for a wannabe cyber-criminal to get into the ransomware business by offering a toolkit that does almost everything for them.
Windows 10 to give power users more control over their GPUs
Microsoft will soon offer Windows 10 power users with multiple GPUs greater control over how they can use their graphics cards when running applications in Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-to-give-power-users-more-control-over-their-gpus/
Microsoft will soon offer Windows 10 power users with multiple GPUs greater control over how they can use their graphics cards when running applications in Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-to-give-power-users-more-control-over-their-gpus/
BleepingComputer
Windows 10 to give power users more control over their GPUs
Microsoft will soon offer Windows 10 power users with multiple GPUs greater control over how they can use their graphics cards when running applications in Windows 10.
Windows, IE11 zero-day vulnerabilities chained in targeted attack
An advanced threat actor exploited one of the two zero-day vulnerabilities that Microsoft patched on Tuesday in a targeted attack earlier this year. [...]
https://www.bleepingcomputer.com/news/security/windows-ie11-zero-day-vulnerabilities-chained-in-targeted-attack/
An advanced threat actor exploited one of the two zero-day vulnerabilities that Microsoft patched on Tuesday in a targeted attack earlier this year. [...]
https://www.bleepingcomputer.com/news/security/windows-ie11-zero-day-vulnerabilities-chained-in-targeted-attack/
BleepingComputer
Windows, IE11 zero-day vulnerabilities chained in targeted attack
An advanced threat actor exploited one of the two zero-day vulnerabilities that Microsoft patched on Tuesday in a targeted attack earlier this year.
Windows 10 Tips apps will soon show new features in an update
Microsoft is adding a new post-update experience to Windows 10 that displays the prominent changes in a just installed update. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-tips-apps-will-soon-show-new-features-in-an-update/
Microsoft is adding a new post-update experience to Windows 10 that displays the prominent changes in a just installed update. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-tips-apps-will-soon-show-new-features-in-an-update/
BleepingComputer
Windows 10 Tips apps will soon show new features in an update
Microsoft is adding a new post-update experience to Windows 10 that displays the prominent changes in a just installed update.
U.S. stock broker regulator FINRA warns of copycat phishing site
The U.S. Financial Industry Regulatory Authority (FINRA) is warning of copycat site impersonating them and potentially being used in phishing attacks. [...]
https://www.bleepingcomputer.com/news/security/us-stock-broker-regulator-finra-warns-of-copycat-phishing-site/
The U.S. Financial Industry Regulatory Authority (FINRA) is warning of copycat site impersonating them and potentially being used in phishing attacks. [...]
https://www.bleepingcomputer.com/news/security/us-stock-broker-regulator-finra-warns-of-copycat-phishing-site/
BleepingComputer
U.S. stock broker regulator FINRA warns of copycat phishing site
The U.S. Financial Industry Regulatory Authority (FINRA) is warning of copycat site impersonating them and potentially being used in phishing attacks.