Bug bounty reporter cashes out on someone else's exploit
While bug bounty programs have gained increased momentum and interest from the security research community for their role in promoting security awareness and responsible vulnerability disclosure, they are not without their share of problems. [...]
https://www.bleepingcomputer.com/news/security/bug-bounty-reporter-cashes-out-on-someone-elses-exploit/
While bug bounty programs have gained increased momentum and interest from the security research community for their role in promoting security awareness and responsible vulnerability disclosure, they are not without their share of problems. [...]
https://www.bleepingcomputer.com/news/security/bug-bounty-reporter-cashes-out-on-someone-elses-exploit/
BleepingComputer
Bug bounty reporter cashes out on someone else's exploit
While bug bounty programs have gained increased momentum and interest from the security research community for their role in promoting security awareness and responsible vulnerability disclosure, they are not without their share of problems.
Microsoft removed another Windows 10 2004 safeguard hold
Microsoft removed a Windows 10, version 2004 compatibility hold blocking devices with certain WWAN LTE modems from upgrading to the latest Windows version. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-removed-another-windows-10-2004-safeguard-hold/
Microsoft removed a Windows 10, version 2004 compatibility hold blocking devices with certain WWAN LTE modems from upgrading to the latest Windows version. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-removed-another-windows-10-2004-safeguard-hold/
BleepingComputer
Microsoft removed another Windows 10 2004 safeguard hold
Microsoft removed a Windows 10, version 2004 compatibility hold blocking devices with certain WWAN LTE modems from upgrading to the latest Windows version.
Windows GravityRAT malware now also targets Android, macOS
GravityRAT, a malware strain known for checking the CPU temperature of Windows computers to detect virtual machines or sandboxes, is now multi-platform spyware as it can now also be used to infect Android and macOS devices. [...]
https://www.bleepingcomputer.com/news/security/windows-gravityrat-malware-now-also-targets-android-macos/
GravityRAT, a malware strain known for checking the CPU temperature of Windows computers to detect virtual machines or sandboxes, is now multi-platform spyware as it can now also be used to infect Android and macOS devices. [...]
https://www.bleepingcomputer.com/news/security/windows-gravityrat-malware-now-also-targets-android-macos/
BleepingComputer
Windows GravityRAT malware now also targets Android, macOS
GravityRAT, a malware strain known for checking the CPU temperature of Windows computers to detect virtual machines or sandboxes, is now multi-platform spyware as it can now also be used to infect Android and macOS devices.
Hackers hijack Telegram, email accounts in SS7 mobile attack
Hackers with access to the Signaling System 7 (SS7) used for connecting mobile networks across the world were able to gain access to Telegram messenger and email data of high-profile individuals in the cryptocurrency business. [...]
https://www.bleepingcomputer.com/news/security/hackers-hijack-telegram-email-accounts-in-ss7-mobile-attack/
Hackers with access to the Signaling System 7 (SS7) used for connecting mobile networks across the world were able to gain access to Telegram messenger and email data of high-profile individuals in the cryptocurrency business. [...]
https://www.bleepingcomputer.com/news/security/hackers-hijack-telegram-email-accounts-in-ss7-mobile-attack/
BleepingComputer
Hackers hijack Telegram, email accounts in SS7 mobile attack
Hackers with access to the Signaling System 7 (SS7) used for connecting mobile networks across the world were able to gain access to Telegram messenger and email data of high-profile individuals in the cryptocurrency business.
US indicts Russian GRU 'Sandworm' hackers for NotPetya, worldwide attacks
The U.S. Department of Justice has charged six Russian intelligence operatives for hacking operations related to the Pyeongchang Winter Olympics, the 2017 French elections, and the notorious NotPetya ransomware attack. [...]
https://www.bleepingcomputer.com/news/security/us-indicts-russian-gru-sandworm-hackers-for-notpetya-worldwide-attacks/
The U.S. Department of Justice has charged six Russian intelligence operatives for hacking operations related to the Pyeongchang Winter Olympics, the 2017 French elections, and the notorious NotPetya ransomware attack. [...]
https://www.bleepingcomputer.com/news/security/us-indicts-russian-gru-sandworm-hackers-for-notpetya-worldwide-attacks/
BleepingComputer
US indicts Russian GRU 'Sandworm' hackers for NotPetya, worldwide attacks
The U.S. Department of Justice has charged six Russian intelligence operatives for hacking operations related to the Pyeongchang Winter Olympics, the 2017 French elections, and the notorious NotPetya ransomware attack.
FBI warns of newly registered domains spoofing US Census Bureau
The Federal Bureau of Investigation (FBI) issued a flash alert to warn of the potential use of spoofed US Census Bureau domains in future malicious campaigns including phishing and credential theft attacks. [...]
https://www.bleepingcomputer.com/news/security/fbi-warns-of-newly-registered-domains-spoofing-us-census-bureau/
The Federal Bureau of Investigation (FBI) issued a flash alert to warn of the potential use of spoofed US Census Bureau domains in future malicious campaigns including phishing and credential theft attacks. [...]
https://www.bleepingcomputer.com/news/security/fbi-warns-of-newly-registered-domains-spoofing-us-census-bureau/
BleepingComputer
FBI warns of newly registered domains spoofing US Census Bureau
The Federal Bureau of Investigation (FBI) issued a flash alert to warn of the potential use of spoofed US Census Bureau domains in future malicious campaigns including phishing and credential theft attacks.
Coinbase phishing hijacks Microsoft 365 accounts via OAuth app
A new phishing campaign uses a Coinbase-themed email to install an Office 365 consent app that gives attackers access to a victim's email. [...]
https://www.bleepingcomputer.com/news/microsoft/coinbase-phishing-hijacks-microsoft-365-accounts-via-oauth-app/
A new phishing campaign uses a Coinbase-themed email to install an Office 365 consent app that gives attackers access to a victim's email. [...]
https://www.bleepingcomputer.com/news/microsoft/coinbase-phishing-hijacks-microsoft-365-accounts-via-oauth-app/
BleepingComputer
Coinbase phishing hijacks Microsoft 365 accounts via OAuth app
A new phishing campaign uses a Coinbase-themed email to install an Office 365 consent app that gives attackers access to a victim's email.
US Treasury hits bitcoin mixer with $60 million penalty
The US Department of Treasury's Financial Crimes Enforcement Network (FinCEN) today announced the first-ever penalty against a Helix and Coin Ninja cryptocurrency mixing services. [...]
https://www.bleepingcomputer.com/news/security/us-treasury-hits-bitcoin-mixer-with-60-million-penalty/
The US Department of Treasury's Financial Crimes Enforcement Network (FinCEN) today announced the first-ever penalty against a Helix and Coin Ninja cryptocurrency mixing services. [...]
https://www.bleepingcomputer.com/news/security/us-treasury-hits-bitcoin-mixer-with-60-million-penalty/
BleepingComputer
US Treasury hits bitcoin mixer with $60 million penalty
The US Department of Treasury's Financial Crimes Enforcement Network (FinCEN) today announced the first-ever penalty against a Helix and Coin Ninja cryptocurrency mixing services.
Windows 10 KB4579311 update won't install, causes Explorer crashes
Windows 10 users face numerous issues installing the latest KB4579311 cumulative update, and for those who can install, they are reporting various bugs, including performance issues. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-kb4579311-update-wont-install-causes-explorer-crashes/
Windows 10 users face numerous issues installing the latest KB4579311 cumulative update, and for those who can install, they are reporting various bugs, including performance issues. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-kb4579311-update-wont-install-causes-explorer-crashes/
BleepingComputer
Windows 10 KB4579311 update won't install, may cause Explorer crash
Windows 10 users face numerous issues installing the latest KB4579311 cumulative update, and for those who can install, they are reporting various bugs, including performance issues.
NSA: Top 25 vulnerabilities actively abused by Chinese hackers
The U.S. National Security Agency (NSA) warns that Chinese state-sponsored hackers exploit 25 different vulnerabilities in attacks against United States organizations and interests. [...]
https://www.bleepingcomputer.com/news/security/nsa-top-25-vulnerabilities-actively-abused-by-chinese-hackers/
The U.S. National Security Agency (NSA) warns that Chinese state-sponsored hackers exploit 25 different vulnerabilities in attacks against United States organizations and interests. [...]
https://www.bleepingcomputer.com/news/security/nsa-top-25-vulnerabilities-actively-abused-by-chinese-hackers/
BleepingComputer
NSA: Top 25 vulnerabilities actively abused by Chinese hackers
The U.S. National Security Agency (NSA) warns that Chinese state-sponsored hackers exploit 25 different vulnerabilities in attacks against U.S. organizations and interests.
Darkside ransomware donates $20K of extortion money to charities
The operators of Darkside ransomware have donated some of the money they made extorting victims to non-profits Children International and The Water Project. [...]
https://www.bleepingcomputer.com/news/security/darkside-ransomware-donates-20k-of-extortion-money-to-charities/
The operators of Darkside ransomware have donated some of the money they made extorting victims to non-profits Children International and The Water Project. [...]
https://www.bleepingcomputer.com/news/security/darkside-ransomware-donates-20k-of-extortion-money-to-charities/
BleepingComputer
Darkside ransomware donates $20K of extortion money to charities
The operators of Darkside ransomware have donated some of the money they made extorting victims to nonprofits Children International and The Water Project.
Windows 10 20H2 is released, here are the new features
Microsoft is rolling out the next version of Windows 10 called "October 2020 Update" and the update is available for those who check for updates using the Settings app. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-20h2-is-released-here-are-the-new-features/
Microsoft is rolling out the next version of Windows 10 called "October 2020 Update" and the update is available for those who check for updates using the Settings app. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-20h2-is-released-here-are-the-new-features/
BleepingComputer
Windows 10 20H2 is released, here are the new features
Microsoft is rolling out the next version of Windows 10 called "October 2020 Update" and the update is available for those who check for updates using the Settings app.
The new Microsoft Edge is now mandatory in Windows 10 20H2
Today's release of Windows 10 20H2 is the first release to automatically replace Microsoft Edge Legacy with the new Chromium-based Microsoft Edge regardless of any policies you have in place. [...]
https://www.bleepingcomputer.com/news/microsoft/the-new-microsoft-edge-is-now-mandatory-in-windows-10-20h2/
Today's release of Windows 10 20H2 is the first release to automatically replace Microsoft Edge Legacy with the new Chromium-based Microsoft Edge regardless of any policies you have in place. [...]
https://www.bleepingcomputer.com/news/microsoft/the-new-microsoft-edge-is-now-mandatory-in-windows-10-20h2/
BleepingComputer
The new Microsoft Edge is now mandatory in Windows 10 20H2
Today's release of Windows 10 20H2 is the first release to automatically replace Microsoft Edge Legacy with the new Chromium-based Microsoft Edge regardless of any policies you have in place.
Adobe fixes 18 critical bugs affecting its Windows, macOS apps
Adobe has released security updates to address critical vulnerabilities affecting ten of its Windows and macOS products that could allow attackers to execute arbitrary code on devices running vulnerable software versions. [...]
https://www.bleepingcomputer.com/news/security/adobe-fixes-18-critical-bugs-affecting-its-windows-macos-apps/
Adobe has released security updates to address critical vulnerabilities affecting ten of its Windows and macOS products that could allow attackers to execute arbitrary code on devices running vulnerable software versions. [...]
https://www.bleepingcomputer.com/news/security/adobe-fixes-18-critical-bugs-affecting-its-windows-macos-apps/
BleepingComputer
Adobe fixes 18 critical bugs affecting its Windows, macOS apps
Adobe has released security updates to address critical vulnerabilities affecting ten of its Windows and macOS products that could allow attackers to execute arbitrary code on devices running vulnerable software versions.
How to download the Windows 10 20H2 ISO from Microsoft
Now that Windows 10 20H2 is released, otherwise known as the October 2020 Update, Microsoft has made new ISO disk images for the operating system available. [...]
https://www.bleepingcomputer.com/news/microsoft/how-to-download-the-windows-10-20h2-iso-from-microsoft/
Now that Windows 10 20H2 is released, otherwise known as the October 2020 Update, Microsoft has made new ISO disk images for the operating system available. [...]
https://www.bleepingcomputer.com/news/microsoft/how-to-download-the-windows-10-20h2-iso-from-microsoft/
BleepingComputer
How to download the Windows 10 20H2 ISO from Microsoft
Now that Windows 10 20H2 is released, otherwise known as the October 2020 Update, Microsoft has made new ISO disk images for the operating system available.
Barnes & Noble hit by Egregor ransomware, strange data leaked
U.S. Bookstore giant Barnes & Noble was hit by the Egregor ransomware gang on October 10th, 2020, that led to a disruption of services and the theft of unencrypted files. [...]
https://www.bleepingcomputer.com/news/security/barnes-and-noble-hit-by-egregor-ransomware-strange-data-leaked/
U.S. Bookstore giant Barnes & Noble was hit by the Egregor ransomware gang on October 10th, 2020, that led to a disruption of services and the theft of unencrypted files. [...]
https://www.bleepingcomputer.com/news/security/barnes-and-noble-hit-by-egregor-ransomware-strange-data-leaked/
BleepingComputer
Barnes & Noble hit by Egregor ransomware, strange data leaked
U.S. Bookstore giant Barnes & Noble was hit by the Egregor ransomware gang on October 10th, 2020, that led to a disruption of services and the theft of unencrypted files.
Windows 10 1909 KB4580386 fixes XBOX, display, USB printer issues
Microsoft has released the Windows 10 1909 KB4580386 monthly "C" release preview cumulative update with quality improvements and fixes for Microsoft Xbox Game Pass, USB printer, and screen flashing issues. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-1909-kb4580386-fixes-xbox-display-usb-printer-issues/
Microsoft has released the Windows 10 1909 KB4580386 monthly "C" release preview cumulative update with quality improvements and fixes for Microsoft Xbox Game Pass, USB printer, and screen flashing issues. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-1909-kb4580386-fixes-xbox-display-usb-printer-issues/
BleepingComputer
Windows 10 1909 KB4580386 fixes XBOX, display, USB printer issues
Microsoft has released the Windows 10 1909 KB4580386 monthly "C" release preview cumulative update with quality improvements and fixes for Microsoft Xbox Game Pass, USB printer, and screen flashing issues.
New Google Chrome version fixes actively exploited zero-day bug
Google has released Chrome 86.0.4240.111 today, October 20th, 2020, to the Stable desktop channel to address five security vulnerabilities, one of them an actively exploited zero-day. [...]
https://www.bleepingcomputer.com/news/security/new-google-chrome-version-fixes-actively-exploited-zero-day-bug/
Google has released Chrome 86.0.4240.111 today, October 20th, 2020, to the Stable desktop channel to address five security vulnerabilities, one of them an actively exploited zero-day. [...]
https://www.bleepingcomputer.com/news/security/new-google-chrome-version-fixes-actively-exploited-zero-day-bug/
BleepingComputer
New Google Chrome version fixes actively exploited zero-day bug
Google has released Chrome 86.0.4240.111 today, October 20th, 2020, to the Stable desktop channel to address five security vulnerabilities, one of them an actively exploited zero-day.
Microsoft Edge for Linux released, how to install
Microsoft's Chromium-based Edge was first released in January to Windows consumers and enterprises, and it was later released to macOS users. Edge is already available on Android and iOS, and now Linux users can finally get a taste of Microsoft's new browser. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-edge-for-linux-released-how-to-install/
Microsoft's Chromium-based Edge was first released in January to Windows consumers and enterprises, and it was later released to macOS users. Edge is already available on Android and iOS, and now Linux users can finally get a taste of Microsoft's new browser. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-edge-for-linux-released-how-to-install/
BleepingComputer
Microsoft Edge for Linux released, how to install
Microsoft's Chromium-based Edge was first released in January to Windows consumers and enterprises, and it was later released to macOS users. Edge is already available on Android and iOS, and now Linux users can finally get a taste of Microsoft's new browser.
Cisco warns of attacks targeting high severity router vulnerability
Cisco today warned of attacks actively targeting the CVE-2020-3118 high severity vulnerability found to affect multiple carrier-grade routers that run the company's Cisco IOS XR Software. [...]
https://www.bleepingcomputer.com/news/security/cisco-warns-of-attacks-targeting-high-severity-router-vulnerability/
Cisco today warned of attacks actively targeting the CVE-2020-3118 high severity vulnerability found to affect multiple carrier-grade routers that run the company's Cisco IOS XR Software. [...]
https://www.bleepingcomputer.com/news/security/cisco-warns-of-attacks-targeting-high-severity-router-vulnerability/
BleepingComputer
Cisco warns of attacks targeting high severity router vulnerability
Cisco today warned of attacks actively targeting the CVE-2020-3118 high severity vulnerability found to affect multiple carrier-grade routers that run the company's Cisco IOS XR Software.
TrickBot malware under siege from all sides, and it's working
The Trickbot malware operation is on the brink of going down completely following efforts from an alliance of cybersecurity and hosting providers targeting the botnet's command and control servers. [...]
https://www.bleepingcomputer.com/news/security/trickbot-malware-under-siege-from-all-sides-and-its-working/
The Trickbot malware operation is on the brink of going down completely following efforts from an alliance of cybersecurity and hosting providers targeting the botnet's command and control servers. [...]
https://www.bleepingcomputer.com/news/security/trickbot-malware-under-siege-from-all-sides-and-its-working/
BleepingComputer
TrickBot malware under siege from all sides, and it's working
The Trickbot malware operation is on the brink of going down completely following efforts from an alliance of cybersecurity and hosting providers targeting the botnet's command and control servers.