Assessing Internal Network with JavaScript, Despite Same-Origin Policy
Researchers are warning about a hacking technique that enables attacks on the local network using JavaScript on a public website. Using the victim's browser as a proxy, the code can reach internal hosts and do reconnaissance activity or even compromise vulnerable services. [...]
https://www.bleepingcomputer.com/news/security/assessing-internal-network-with-javascript-despite-same-origin-policy/
Researchers are warning about a hacking technique that enables attacks on the local network using JavaScript on a public website. Using the victim's browser as a proxy, the code can reach internal hosts and do reconnaissance activity or even compromise vulnerable services. [...]
https://www.bleepingcomputer.com/news/security/assessing-internal-network-with-javascript-despite-same-origin-policy/
BleepingComputer
Assessing Internal Network with JavaScript, Despite Same-Origin Policy
Researchers are warning about a hacking technique that enables attacks on the local network using JavaScript on a public website. Using the victim's browser as a proxy, the code can reach internal hosts and do reconnaissance activity or even compromise vulnerable…
LockerGoga Ransomware Sends Norsk Hydro Into Manual Mode
One of the largest aluminum producers in the world, Nork Hydro, has been forced to switch to manual operations due to a cyber attack that is allegedly pushing LockerGoga ransomware. [...]
https://www.bleepingcomputer.com/news/security/lockergoga-ransomware-sends-norsk-hydro-into-manual-mode/
One of the largest aluminum producers in the world, Nork Hydro, has been forced to switch to manual operations due to a cyber attack that is allegedly pushing LockerGoga ransomware. [...]
https://www.bleepingcomputer.com/news/security/lockergoga-ransomware-sends-norsk-hydro-into-manual-mode/
BleepingComputer
LockerGoga Ransomware Sends Norsk Hydro Into Manual Mode
One of the largest aluminum producers in the world, Norsk Hydro, has been forced to switch to partial manual operations due to a cyber attack that is allegedly pushing LockerGoga ransomware.
Business Email Compromise (BEC) Attacks Moving to Mobile
As text messaging has become a common form of communication within a business, Business Email Compromise (BEC) scammers have started to go mobile by utilizing SMS messaging to direct their targets. [...]
https://www.bleepingcomputer.com/news/security/business-email-compromise-bec-attacks-moving-to-mobile/
As text messaging has become a common form of communication within a business, Business Email Compromise (BEC) scammers have started to go mobile by utilizing SMS messaging to direct their targets. [...]
https://www.bleepingcomputer.com/news/security/business-email-compromise-bec-attacks-moving-to-mobile/
BleepingComputer
Business Email Compromise (BEC) Attacks Moving to Mobile
As text messaging has become a common form of communication within a business, Business Email Compromise (BEC) scammers have started to go mobile by utilizing SMS messaging to direct their targets.
80% of the Top Exploited Vulnerabilities Targeted Microsoft in 2018
Eight out of the top ten vulnerabilities exploited by cybercriminals as part of phishing, exploit kits, or RAT attacks during 2018 targeted Microsoft's software products, continuing a trend started in 2017. [...]
https://www.bleepingcomputer.com/news/security/80-percent-of-the-top-exploited-vulnerabilities-targeted-microsoft-in-2018/
Eight out of the top ten vulnerabilities exploited by cybercriminals as part of phishing, exploit kits, or RAT attacks during 2018 targeted Microsoft's software products, continuing a trend started in 2017. [...]
https://www.bleepingcomputer.com/news/security/80-percent-of-the-top-exploited-vulnerabilities-targeted-microsoft-in-2018/
BleepingComputer
80% of the Top Exploited Vulnerabilities Targeted Microsoft in 2018
Eight out of the top ten vulnerabilities exploited by cybercriminals as part of phishing, exploit kits, or RAT attacks during 2018 targeted Microsoft's software products, continuing a trend started in 2017.
Microsoft Antimalware Crashing With Error 0x800106ba on Windows 7 & 8
According to multiple user reports, the Windows Defender Antivirus, Microsoft Endpoint Protection, and Microsoft Security Essentials antimalware solutions are crashing randomly with a 0x800106ba error code on computers running Windows 7, Windows 8, and Windows Server 2003, 2008 and 2012. [...]
https://www.bleepingcomputer.com/news/security/microsoft-antimalware-crashing-with-error-0x800106ba-on-windows-7-and-8/
According to multiple user reports, the Windows Defender Antivirus, Microsoft Endpoint Protection, and Microsoft Security Essentials antimalware solutions are crashing randomly with a 0x800106ba error code on computers running Windows 7, Windows 8, and Windows Server 2003, 2008 and 2012. [...]
https://www.bleepingcomputer.com/news/security/microsoft-antimalware-crashing-with-error-0x800106ba-on-windows-7-and-8/
BleepingComputer
Microsoft Antimalware Crashing With Error 0x800106ba on Windows 7 & 8
According to multiple user reports, the Windows Defender Antivirus, Microsoft Endpoint Protection, and Microsoft Security Essentials antimalware solutions are crashing randomly with a 0x800106ba error code on computers running Windows 7, Windows 8.1, and…
Windows 10 Insider Preview Build 18361 (19H1) Still Has Some Bugs to Fix
Microsoft has released Windows 10 Insider Preview Build 18361 (19H1) to Insiders in the Fast ring. As we get closer to its final release in April, these builds will mostly be bug fixes. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-insider-preview-build-18361-19h1-still-has-some-bugs-to-fix/
Microsoft has released Windows 10 Insider Preview Build 18361 (19H1) to Insiders in the Fast ring. As we get closer to its final release in April, these builds will mostly be bug fixes. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-insider-preview-build-18361-19h1-still-has-some-bugs-to-fix/
BleepingComputer
Windows 10 Insider Preview Build 18361 (19H1) Still Has Some Bugs to Fix
Microsoft has released Windows 10 Insider Preview Build 18361 (19H1) to Insiders in the Fast ring. As we get closer to its final release in April, these builds will mostly be bug fixes.
DDoS-for-Hire Crackdown Leads to 85% Drop in Attack Sizes
The average size of distributed denial-of-service (DDoS) attacks decreased by 85% on a YoY basis during Q4 2018 after the FBI seized the domains of 15 of the world's biggest "booters" (DDoS-for-hire websites). [...]
https://www.bleepingcomputer.com/news/security/ddos-for-hire-crackdown-leads-to-85-percent-drop-in-attack-sizes/
The average size of distributed denial-of-service (DDoS) attacks decreased by 85% on a YoY basis during Q4 2018 after the FBI seized the domains of 15 of the world's biggest "booters" (DDoS-for-hire websites). [...]
https://www.bleepingcomputer.com/news/security/ddos-for-hire-crackdown-leads-to-85-percent-drop-in-attack-sizes/
BleepingComputer
DDoS-for-Hire Crackdown Leads to 85% Drop in Attack Sizes
The average size of distributed denial-of-service (DDoS) attacks decreased by 85% on a YoY basis during Q4 2018 after the FBI seized the domains of 15 of the world's biggest "booters" (DDoS-for-hire websites).
Netflix and AMEX Customers Actively Targeted by Phishing Campaigns
Two ongoing phishing campaigns are actively targeting Netflix and American Express customers to steal credit card and social security information as discovered by the Office 365 Threat Research team during the weekend. [...]
https://www.bleepingcomputer.com/news/security/netflix-and-amex-customers-actively-targeted-by-phishing-campaigns/
Two ongoing phishing campaigns are actively targeting Netflix and American Express customers to steal credit card and social security information as discovered by the Office 365 Threat Research team during the weekend. [...]
https://www.bleepingcomputer.com/news/security/netflix-and-amex-customers-actively-targeted-by-phishing-campaigns/
BleepingComputer
Netflix and AMEX Customers Actively Targeted by Phishing Campaigns
Two ongoing phishing campaigns are actively targeting Netflix and American Express customers to steal credit card and social security information as discovered by the Office 365 Threat Research team during the weekend.
Heeere's Clippy! He's Back, but Only for Microsoft Teams.
Microsoft just revived the heavily criticized and parodied Clippy, the default Microsoft Office assistant for 4 years — yes, we thought it was longer too — transforming it into an open source Microsoft Teams app designed to help you add various Clippy animated emotes within messages. [...]
https://www.bleepingcomputer.com/news/microsoft/heeeres-clippy-hes-back-but-only-for-microsoft-teams/
Microsoft just revived the heavily criticized and parodied Clippy, the default Microsoft Office assistant for 4 years — yes, we thought it was longer too — transforming it into an open source Microsoft Teams app designed to help you add various Clippy animated emotes within messages. [...]
https://www.bleepingcomputer.com/news/microsoft/heeeres-clippy-hes-back-but-only-for-microsoft-teams/
BleepingComputer
Heeere's Clippy! He's Back, but Only for Microsoft Teams.
Microsoft just revived the heavily criticized and parodied Clippy, the default Microsoft Office assistant for 4 years — yes, we thought it was longer too — transforming it into an open source Microsoft Teams app designed to help you add various Clippy animated…
KDE Connect Kicked From Google Play, Returns Less the App It Was
Google today temporarily removed KDE Connect from Play store because it violated a newly-imposed policy for SMS and Call Logs permissions, which the companion app needs in order to offer a full-featured experience. [...]
https://www.bleepingcomputer.com/news/mobile/kde-connect-kicked-from-google-play-returns-less-the-app-it-was/
Google today temporarily removed KDE Connect from Play store because it violated a newly-imposed policy for SMS and Call Logs permissions, which the companion app needs in order to offer a full-featured experience. [...]
https://www.bleepingcomputer.com/news/mobile/kde-connect-kicked-from-google-play-returns-less-the-app-it-was/
BleepingComputer
KDE Connect Kicked From Google Play, Returns Less the App It Was
Google today temporarily removed KDE Connect from Play store because it violated a newly-imposed policy for SMS and Call Logs permissions, which the companion app needs in order to offer a full-featured experience.
Fake eBay Ad in Google Search Led to Tech Support Scams
A fake advertisement in the Google search results has been running for the past week that looked just like a legitimate ad for eBay. When you clicked on it, though, instead of being brought to the auction site you would be shown an incredibly annoying tech support scam that would try to lock up your browser. [...]
https://www.bleepingcomputer.com/news/security/fake-ebay-ad-in-google-search-led-to-tech-support-scams/
A fake advertisement in the Google search results has been running for the past week that looked just like a legitimate ad for eBay. When you clicked on it, though, instead of being brought to the auction site you would be shown an incredibly annoying tech support scam that would try to lock up your browser. [...]
https://www.bleepingcomputer.com/news/security/fake-ebay-ad-in-google-search-led-to-tech-support-scams/
BleepingComputer
Fake eBay Ad in Google Search Led to Tech Support Scams
A fake advertisement in the Google search results has been running for the past week that looked just like a legitimate ad for eBay. When you clicked on it, though, instead of being brought to the auction site you would be shown an incredibly annoying tech…
Google Photos Bug Exposed the Location & Time of Your Pictures
A vulnerability in the web version of Google Photos allowed websites to learn a user's location history based on the images they stored in the account. [...]
https://www.bleepingcomputer.com/news/security/google-photos-bug-exposed-the-location-and-time-of-your-pictures/
A vulnerability in the web version of Google Photos allowed websites to learn a user's location history based on the images they stored in the account. [...]
https://www.bleepingcomputer.com/news/security/google-photos-bug-exposed-the-location-and-time-of-your-pictures/
BleepingComputer
Google Photos Bug Exposed the Location & Time of Your Pictures
A vulnerability in the web version of Google Photos allowed websites to learn a user's location history based on the images they stored in the account.
Payment Card Thieves Slip into MyPillow and AmeriSleep Bedding Sites
One of the biggest threats facing online retailers are malicious scripts that attackers add to checkout pages in order to steal customer payment information. A new report released today details how the bedding sites MyPillow.com and Amerisleep.com were targeted with these types of of attacks. [...]
https://www.bleepingcomputer.com/news/security/payment-card-thieves-slip-into-mypillow-and-amerisleep-bedding-sites/
One of the biggest threats facing online retailers are malicious scripts that attackers add to checkout pages in order to steal customer payment information. A new report released today details how the bedding sites MyPillow.com and Amerisleep.com were targeted with these types of of attacks. [...]
https://www.bleepingcomputer.com/news/security/payment-card-thieves-slip-into-mypillow-and-amerisleep-bedding-sites/
BleepingComputer
Payment Card Thieves Slip into MyPillow and AmeriSleep Bedding Sites
One of the biggest threats facing online retailers are malicious scripts that attackers add to checkout pages in order to steal customer payment information. A new report released today details how the bedding sites MyPillow.com and Amerisleep.com were targeted…
Google Fined $1.7 Billion for Anti-Competitive Practices in Online Advertising
Google was fined €1.494.459.000 ($1.698.064.094) or 1.29% of Google's 2018 turnover for abusing its market dominance to block rival advertising companies from displaying search ads on publisher search results pages says a European Commission statement published today. [...]
https://www.bleepingcomputer.com/news/security/google-fined-17-billion-for-anti-competitive-practices-in-online-advertising/
Google was fined €1.494.459.000 ($1.698.064.094) or 1.29% of Google's 2018 turnover for abusing its market dominance to block rival advertising companies from displaying search ads on publisher search results pages says a European Commission statement published today. [...]
https://www.bleepingcomputer.com/news/security/google-fined-17-billion-for-anti-competitive-practices-in-online-advertising/
BleepingComputer
Google Fined $1.7 Billion for Anti-Competitive Practices in Online Advertising
Google was fined €1.494.459.000 ($1.698.064.094) or 1.29% of Google's 2018 turnover for abusing its market dominance to block rival advertising companies from displaying search ads on publisher search results pages says a European Commission statement published…
Microsoft Releases Windows 10 Build 18860 (20H1) With Swiftkey Enhancements
Microsoft has released Windows 10 Insider Preview Build 18860 for Insiders in the Skip Ahead ring. This 20H1 build is mostly bug fixes, but does add support for 39 languages in Switfkey. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-build-18860-20h1-with-swiftkey-enhancements/
Microsoft has released Windows 10 Insider Preview Build 18860 for Insiders in the Skip Ahead ring. This 20H1 build is mostly bug fixes, but does add support for 39 languages in Switfkey. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-build-18860-20h1-with-swiftkey-enhancements/
BleepingComputer
Microsoft Releases Windows 10 Build 18860 (20H1) With Swiftkey Enhancements
Microsoft has released Windows 10 Insider Preview Build 18860 for Insiders in the Skip Ahead ring. This 20H1 build is mostly bug fixes, but does add support for 39 languages in Switfkey.
1,600 Hotel Guests Secretly Live Streamed to 4,000+ Subscribers
Four individuals from South Korea were detained for secretly recording, live streaming, and selling spycam videos of 1600 motel guests between November 24 and March 2, with two of them being arrested and facing a maximum of five years in jail. [...]
https://www.bleepingcomputer.com/news/security/1-600-hotel-guests-secretly-live-streamed-to-4-000-subscribers/
Four individuals from South Korea were detained for secretly recording, live streaming, and selling spycam videos of 1600 motel guests between November 24 and March 2, with two of them being arrested and facing a maximum of five years in jail. [...]
https://www.bleepingcomputer.com/news/security/1-600-hotel-guests-secretly-live-streamed-to-4-000-subscribers/
BleepingComputer
1,600 Hotel Guests Secretly Live Streamed to 4,000+ Subscribers
Four individuals from South Korea were detained for secretly recording, live streaming, and selling spycam videos of 1600 motel guests between November 24 and March 2, with two of them being arrested and facing a maximum of five years in jail.
Windows 10 Insider Preview Build 18362 (19H1) Fixes Autoupdate of Apps
Microsoft has released Windows 10 Insider Preview Build 18362 (19H1) to Insiders in the Fast ring. This was released to offer a quick fix for a bug that was preventing the Microsoft Store from automatically updating installed apps. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-insider-preview-build-18362-19h1-fixes-autoupdate-of-apps/
Microsoft has released Windows 10 Insider Preview Build 18362 (19H1) to Insiders in the Fast ring. This was released to offer a quick fix for a bug that was preventing the Microsoft Store from automatically updating installed apps. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-insider-preview-build-18362-19h1-fixes-autoupdate-of-apps/
BleepingComputer
Windows 10 Insider Preview Build 18362 (19H1) Fixes Autoupdate of Apps
Microsoft has released Windows 10 Insider Preview Build 18362 (19H1) to Insiders in the Fast ring. This was released to offer a quick fix for a bug that was preventing the Microsoft Store from automatically updating installed apps.
KB4493132 Update Notifies Windows 7 Users of End of Support Date
A new Windows 7 update called KB4493132 has been released and is used to display notifications that remind users that Windows 7 will reach its end of life starting on January 14th, 2020. These notifications contain a link that goes to a Microsoft page suggesting that users upgrade to Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/kb4493132-update-notifies-windows-7-users-of-end-of-support-date/
A new Windows 7 update called KB4493132 has been released and is used to display notifications that remind users that Windows 7 will reach its end of life starting on January 14th, 2020. These notifications contain a link that goes to a Microsoft page suggesting that users upgrade to Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/kb4493132-update-notifies-windows-7-users-of-end-of-support-date/
BleepingComputer
KB4493132 Update Notifies Windows 7 Users of End of Support Date
A new Windows 7 update called KB4493132 has been released and is used to display notifications that remind users that Windows 7 will reach its end of life starting on January 14th, 2020. These notifications contain a link that goes to a Microsoft page suggesting…
Lithuanian Pleads Guilty to Stealing $100 Million From Google, Facebook
A Lithuanian man pleaded guilty to wire fraud, aggravated identity theft, and three counts of money laundering, and faces a maximum of 30 years in jail after tricking Google and Facebook employees into wiring over $100 million into bank accounts he controlled. [...]
https://www.bleepingcomputer.com/news/security/lithuanian-pleads-guilty-to-stealing-100-million-from-google-facebook/
A Lithuanian man pleaded guilty to wire fraud, aggravated identity theft, and three counts of money laundering, and faces a maximum of 30 years in jail after tricking Google and Facebook employees into wiring over $100 million into bank accounts he controlled. [...]
https://www.bleepingcomputer.com/news/security/lithuanian-pleads-guilty-to-stealing-100-million-from-google-facebook/
BleepingComputer
Lithuanian Pleads Guilty to Stealing $100 Million From Google, Facebook
A Lithuanian man pleaded guilty to wire fraud, aggravated identity theft, and three counts of money laundering, and faces a maximum of 30 years in jail after tricking Google and Facebook employees into wiring over $100 million into bank accounts he controlled.
Putty 0.71 Fixes Weakness That Allows Fake Login Prompts
[...]
https://www.bleepingcomputer.com/news/security/putty-071-fixes-weakness-that-allows-fake-login-prompts/
[...]
https://www.bleepingcomputer.com/news/security/putty-071-fixes-weakness-that-allows-fake-login-prompts/
BleepingComputer
Putty 0.71 Fixes Weakness That Allows Fake Login Prompts
The latest version of PuTTY SSH and Telnet client adds protection against spoofing the terminal authentication prompt to steal login info. Recently released, the update comes after a 20-month hiatus and fixes a total of eight security issues.