Microsoft May 2021 Patch Tuesday fixes 55 flaws, 3 zero-days
Today is Microsoft's May 2021 Patch Tuesday, and with it comes three zero-day vulnerabilities, so Windows admins will be rushing to apply updates. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2021-patch-tuesday-fixes-55-flaws-3-zero-days/
Today is Microsoft's May 2021 Patch Tuesday, and with it comes three zero-day vulnerabilities, so Windows admins will be rushing to apply updates. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2021-patch-tuesday-fixes-55-flaws-3-zero-days/
BleepingComputer
Microsoft May 2021 Patch Tuesday fixes 55 flaws, 3 zero-days
Today is Microsoft's May 2021 Patch Tuesday, and with it comes three zero-day vulnerabilities, so Windows admins will be rushing to apply updates.
Windows 10 cumulative updates KB5003169 & KB5003173 released
As part of the May Patch cycle, Microsoft is rolling out a new cumulative update for all supported version of Windows. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-cumulative-updates-kb5003169-and-kb5003173-released/
As part of the May Patch cycle, Microsoft is rolling out a new cumulative update for all supported version of Windows. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-cumulative-updates-kb5003169-and-kb5003173-released/
BleepingComputer
Windows 10 cumulative updates KB5003169 & KB5003173 released
As part of the May Patch cycle, Microsoft is rolling out a new cumulative update for all supported version of Windows.
German watchdog bans Facebook from using WhatsApp users' data
Facebook was banned today from processing WhatsApp user data by the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI). [...]
https://www.bleepingcomputer.com/news/technology/german-watchdog-bans-facebook-from-using-whatsapp-users-data/
Facebook was banned today from processing WhatsApp user data by the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI). [...]
https://www.bleepingcomputer.com/news/technology/german-watchdog-bans-facebook-from-using-whatsapp-users-data/
BleepingComputer
German watchdog bans Facebook from using WhatsApp users' data
The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) has banned Facebook today from processing WhatsApp user data for the next three months.
Microsoft Outlook bug prevents viewing or creating email worldwide
Microsoft Outlook is affected worldwide by a bug in the desktop client that is preventing users from creating or viewing mail. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-bug-prevents-viewing-or-creating-email-worldwide/
Microsoft Outlook is affected worldwide by a bug in the desktop client that is preventing users from creating or viewing mail. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-bug-prevents-viewing-or-creating-email-worldwide/
BleepingComputer
Microsoft Outlook bug prevents viewing or creating email worldwide
A Microsoft Outlook update released today for the desktop client introduced bugs that prevent users from creating or viewing mail.
All Wi-Fi devices impacted by new FragAttacks vulnerabilities
Newly discovered Wi-Fi security vulnerabilities collectively known as FragAttacks (fragmentation and aggregation attacks) are impacting all Wi-Fi devices (including computers, smartphones, and smart devices) going back as far as 1997. [...]
https://www.bleepingcomputer.com/news/security/all-wi-fi-devices-impacted-by-new-fragattacks-vulnerabilities/
Newly discovered Wi-Fi security vulnerabilities collectively known as FragAttacks (fragmentation and aggregation attacks) are impacting all Wi-Fi devices (including computers, smartphones, and smart devices) going back as far as 1997. [...]
https://www.bleepingcomputer.com/news/security/all-wi-fi-devices-impacted-by-new-fragattacks-vulnerabilities/
BleepingComputer
All Wi-Fi devices impacted by new FragAttacks vulnerabilities
Newly discovered Wi-Fi security vulnerabilities collectively known as FragAttacks (fragmentation and aggregation attacks) are impacting all Wi-Fi devices (including computers, smartphones, and smart devices) going back as far as 1997.
Microsoft's new project ports Linux eBPF to Windows 10, Server
Microsoft has launched a new open-source project that aims to add to Windows the benefits of eBPF, a technology first implemented in Linux that allows attaching programs in both kernel and user applications. [...]
https://www.bleepingcomputer.com/news/security/microsofts-new-project-ports-linux-ebpf-to-windows-10-server/
Microsoft has launched a new open-source project that aims to add to Windows the benefits of eBPF, a technology first implemented in Linux that allows attaching programs in both kernel and user applications. [...]
https://www.bleepingcomputer.com/news/security/microsofts-new-project-ports-linux-ebpf-to-windows-10-server/
BleepingComputer
Microsoft's new project ports Linux eBPF to Windows 10, Server
Microsoft has launched a new open-source project that aims to add to Windows the benefits of eBPF, a technology first implemented in Linux that allows attaching programs in both kernel and user applications.
Trust Wallet, MetaMask crypto wallets targeted by new support scam
Trust Wallet and MetaMask wallet users are being targeted in ongoing and aggressive Twitter phishing attacks to steal cryptocurrency funds. [...]
https://www.bleepingcomputer.com/news/security/trust-wallet-metamask-crypto-wallets-targeted-by-new-support-scam/
Trust Wallet and MetaMask wallet users are being targeted in ongoing and aggressive Twitter phishing attacks to steal cryptocurrency funds. [...]
https://www.bleepingcomputer.com/news/security/trust-wallet-metamask-crypto-wallets-targeted-by-new-support-scam/
BleepingComputer
Trust Wallet, MetaMask crypto wallets targeted by new support scam
Trust Wallet and MetaMask wallet users are being targeted in ongoing and aggressive Twitter phishing attacks to steal cryptocurrency funds.
Microsoft: Threat actors target aviation orgs with new malware
Microsoft warns of an ongoing spear-phishing campaign targeting aerospace and travel organizations with multiple remote access trojans (RATs) deployed using a new and stealthy malware loader. [...]
https://www.bleepingcomputer.com/news/security/microsoft-threat-actors-target-aviation-orgs-with-new-malware/
Microsoft warns of an ongoing spear-phishing campaign targeting aerospace and travel organizations with multiple remote access trojans (RATs) deployed using a new and stealthy malware loader. [...]
https://www.bleepingcomputer.com/news/security/microsoft-threat-actors-target-aviation-orgs-with-new-malware/
BleepingComputer
Microsoft: Threat actors target aviation orgs with new malware
Microsoft warns of an ongoing spear-phishing campaign targeting aerospace and travel organizations with multiple remote access trojans (RATs) deployed using a new and stealthy malware loader.
Microsoft fixes WSUS bug blocking May Windows security updates
Microsoft has resolved a known issue preventing managed devices from receiving the May 2021 Patch Tuesday security updates. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-wsus-bug-blocking-may-windows-security-updates/
Microsoft has resolved a known issue preventing managed devices from receiving the May 2021 Patch Tuesday security updates. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-wsus-bug-blocking-may-windows-security-updates/
BleepingComputer
Microsoft fixes WSUS bug blocking May Windows security updates
Microsoft has resolved a known issue preventing managed devices from receiving the May 2021 Patch Tuesday security updates.
Tor Project auctions off the first Onion URL ever created as an NFT
The Tor Project is auctioning off the first Tor Onion domain ever created, duskgytldkxiuqc6.onion, as an NFT. [...]
https://www.bleepingcomputer.com/news/technology/tor-project-auctions-off-the-first-onion-url-ever-created-as-an-nft/
The Tor Project is auctioning off the first Tor Onion domain ever created, duskgytldkxiuqc6.onion, as an NFT. [...]
https://www.bleepingcomputer.com/news/technology/tor-project-auctions-off-the-first-onion-url-ever-created-as-an-nft/
BleepingComputer
Tor Project auctions off the first Onion URL ever created as an NFT
The Tor Project is auctioning off the first Tor Onion domain ever created, duskgytldkxiuqc6.onion, as an NFT.
Microsoft: Several Windows 10 editions have reached end of service
Multiple editions of Windows 10 versions 1803, 1809, and 1909 have reached their End of Service (EOS) on this month's Patch Tuesday, as Microsoft reminded customers yesterday. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-several-windows-10-editions-have-reached-end-of-service/
Multiple editions of Windows 10 versions 1803, 1809, and 1909 have reached their End of Service (EOS) on this month's Patch Tuesday, as Microsoft reminded customers yesterday. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-several-windows-10-editions-have-reached-end-of-service/
BleepingComputer
Microsoft: Windows 10 1809 and 1909 have reached end of service
Multiple editions of Windows 10 versions 1803, 1809, and 1909 have reached their End of Service (EOS) on this month's Patch Tuesday, as Microsoft reminded customers yesterday.
Biden issues executive order to increase U.S. cybersecurity defenses
President Biden signed an executive order Wednesday to modernize the country's defenses against cyberattacks and give more timely access to information necessary for law enforcement to conduct investigations. [...]
https://www.bleepingcomputer.com/news/security/biden-issues-executive-order-to-increase-us-cybersecurity-defenses/
President Biden signed an executive order Wednesday to modernize the country's defenses against cyberattacks and give more timely access to information necessary for law enforcement to conduct investigations. [...]
https://www.bleepingcomputer.com/news/security/biden-issues-executive-order-to-increase-us-cybersecurity-defenses/
BleepingComputer
Biden issues executive order to increase U.S. cybersecurity defenses
President Biden signed an executive order Wednesday to modernize the country's defenses against cyberattacks and give more timely access to information necessary for law enforcement to conduct investigations.
Crypto exchange glitch causes duplicate purchases, delayed credits
This week, recurring glitches on the popular cryptocurrency exchange Crypto.com caused multi-day delays for users in receiving their purchased assets. Moreover, those reattempting "declined" or "expired" transactions were charged multiple times for duplicate purchases. [...]
https://www.bleepingcomputer.com/news/security/crypto-exchange-glitch-causes-duplicate-purchases-delayed-credits/
This week, recurring glitches on the popular cryptocurrency exchange Crypto.com caused multi-day delays for users in receiving their purchased assets. Moreover, those reattempting "declined" or "expired" transactions were charged multiple times for duplicate purchases. [...]
https://www.bleepingcomputer.com/news/security/crypto-exchange-glitch-causes-duplicate-purchases-delayed-credits/
BleepingComputer
Crypto exchange glitch causes duplicate purchases, delayed credits
This week, recurring glitches on the popular cryptocurrency exchange Crypto.com caused multi-day delays for users in receiving their purchased assets. Moreover, those reattempting "declined" or "expired" transactions were charged multiple times for duplicate…
Cisco fixes 6-month-old AnyConnect VPN zero-day with exploit code
Cisco has fixed a six-month-old zero-day vulnerability found in the Cisco AnyConnect Secure Mobility Client VPN software, with publicly available proof-of-concept exploit code. [...]
https://www.bleepingcomputer.com/news/security/cisco-fixes-6-month-old-anyconnect-vpn-zero-day-with-exploit-code/
Cisco has fixed a six-month-old zero-day vulnerability found in the Cisco AnyConnect Secure Mobility Client VPN software, with publicly available proof-of-concept exploit code. [...]
https://www.bleepingcomputer.com/news/security/cisco-fixes-6-month-old-anyconnect-vpn-zero-day-with-exploit-code/
BleepingComputer
Cisco fixes 6-month-old AnyConnect VPN zero-day with exploit code
Cisco has fixed a six-month-old zero-day vulnerability found in the Cisco AnyConnect Secure Mobility Client VPN software, with publicly available proof-of-concept exploit code.
Insurance giant CNA fully restores systems after ransomware attack
Leading US-based insurance company CNA Financial has fully restored systems following a Phoenix CryptoLocker ransomware attack that hits its network during late March and disrupted online services and business operations. [...]
https://www.bleepingcomputer.com/news/security/insurance-giant-cna-fully-restores-systems-after-ransomware-attack/
Leading US-based insurance company CNA Financial has fully restored systems following a Phoenix CryptoLocker ransomware attack that hits its network during late March and disrupted online services and business operations. [...]
https://www.bleepingcomputer.com/news/security/insurance-giant-cna-fully-restores-systems-after-ransomware-attack/
BleepingComputer
Insurance giant CNA fully restores systems after ransomware attack
Leading US-based insurance company CNA Financial has fully restored systems following a Phoenix CryptoLocker ransomware attack that disrupted its online services and business operations during late March.
Meet Lorenz — A new ransomware gang targeting the enterprise
A new ransomware operation known as Lorenz targets organizations worldwide with customized attacks demanding hundreds of thousands of dollars in ransoms. [...]
https://www.bleepingcomputer.com/news/security/meet-lorenz-a-new-ransomware-gang-targeting-the-enterprise/
A new ransomware operation known as Lorenz targets organizations worldwide with customized attacks demanding hundreds of thousands of dollars in ransoms. [...]
https://www.bleepingcomputer.com/news/security/meet-lorenz-a-new-ransomware-gang-targeting-the-enterprise/
BleepingComputer
Meet Lorenz — A new ransomware gang targeting the enterprise
A new ransomware operation known as Lorenz targets organizations worldwide with customized attacks demanding hundreds of thousands of dollars in ransoms.
Attackers abuse Microsoft dev tool to deploy Windows malware
Threat actors are abusing the Microsoft Build Engine (MSBuild) to deploy remote access tools and information-stealing malware filelessly as part of an ongoing campaign. [...]
https://www.bleepingcomputer.com/news/security/attackers-abuse-microsoft-dev-tool-to-deploy-windows-malware/
Threat actors are abusing the Microsoft Build Engine (MSBuild) to deploy remote access tools and information-stealing malware filelessly as part of an ongoing campaign. [...]
https://www.bleepingcomputer.com/news/security/attackers-abuse-microsoft-dev-tool-to-deploy-windows-malware/
BleepingComputer
Microsoft build tool abused to deliver password-stealing malware
Threat actors are abusing the Microsoft Build Engine (MSBuild) to deploy remote access tools and information-stealing malware filelessly as part of an ongoing campaign.
Colonial Pipeline restores operations, $5 million ransom demanded
Colonial Pipeline Company has recovered quickly from the ransomware attack suffered less than a week ago and expects all its infrastructure to be fully operational today. [...]
https://www.bleepingcomputer.com/news/security/colonial-pipeline-restores-operations-5-million-ransom-demanded/
Colonial Pipeline Company has recovered quickly from the ransomware attack suffered less than a week ago and expects all its infrastructure to be fully operational today. [...]
https://www.bleepingcomputer.com/news/security/colonial-pipeline-restores-operations-5-million-ransom-demanded/
BleepingComputer
Colonial Pipeline restores operations, $5 million ransom demanded
Colonial Pipeline Company has recovered quickly from the ransomware attack suffered less than a week ago and expects all its infrastructure to be fully operational today.
Windows 10 KB5003173 update fails with error 0x800f0922, how to fix
The Windows 10 KB5003173 cumulative update may fail to install with an error 0x800f0922 if Microsoft Edge has been previously uninstalled. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5003173-update-fails-with-error-0x800f0922-how-to-fix/
The Windows 10 KB5003173 cumulative update may fail to install with an error 0x800f0922 if Microsoft Edge has been previously uninstalled. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5003173-update-fails-with-error-0x800f0922-how-to-fix/
BleepingComputer
Windows 10 KB5003173 update fails with error 0x800f0922, how to fix
The Windows 10 KB5003173 cumulative update may fail to install with an error 0x800f0922 if Microsoft Edge has been previously uninstalled.
Rapid7 source code, credentials accessed in Codecov supply-chain attack
US cybersecurity firm Rapid7 has disclosed that some source code repositories were accessed in a security incident linked to the supply-chain attack that recently impacted customers of the popular Codecov code coverage tool. [...]
https://www.bleepingcomputer.com/news/security/rapid7-source-code-credentials-accessed-in-codecov-supply-chain-attack/
US cybersecurity firm Rapid7 has disclosed that some source code repositories were accessed in a security incident linked to the supply-chain attack that recently impacted customers of the popular Codecov code coverage tool. [...]
https://www.bleepingcomputer.com/news/security/rapid7-source-code-credentials-accessed-in-codecov-supply-chain-attack/
BleepingComputer
Rapid7 source code, credentials accessed in Codecov supply-chain attack
US cybersecurity firm Rapid7 has disclosed that some source code repositories were accessed in a security incident linked to the supply-chain attack that recently impacted customers of the popular Codecov code coverage tool.
Chemical distributor pays $4.4 million to DarkSide ransomware
Chemical distribution company Brenntag paid a $4.4 million ransom in Bitcoin to the DarkSide ransomware gang to receive a decryptor for encrypted files and prevent the threat actors from publicly leaking stolen data. [...]
https://www.bleepingcomputer.com/news/security/chemical-distributor-pays-44-million-to-darkside-ransomware/
Chemical distribution company Brenntag paid a $4.4 million ransom in Bitcoin to the DarkSide ransomware gang to receive a decryptor for encrypted files and prevent the threat actors from publicly leaking stolen data. [...]
https://www.bleepingcomputer.com/news/security/chemical-distributor-pays-44-million-to-darkside-ransomware/
BleepingComputer
Chemical distributor pays $4.4 million to DarkSide ransomware
Chemical distribution company Brenntag paid a $4.4 million ransom in Bitcoin to the DarkSide ransomware gang to receive a decryptor for encrypted files and prevent the threat actors from publicly leaking stolen data.