USBCulprit malware targets air-gapped systems to steal govt info
The newly revealed USBCulprit malware is used by a group known as Cycldek, Conimes, or Goblin Panda and is designed for compromising air-gapped devices via USB. [...]
https://www.bleepingcomputer.com/news/security/usbculprit-malware-targets-air-gapped-systems-to-steal-govt-info/
The newly revealed USBCulprit malware is used by a group known as Cycldek, Conimes, or Goblin Panda and is designed for compromising air-gapped devices via USB. [...]
https://www.bleepingcomputer.com/news/security/usbculprit-malware-targets-air-gapped-systems-to-steal-govt-info/
BleepingComputer
USBCulprit malware targets air-gapped systems to steal govt info
The newly revealed USBCulprit malware is used by a group known as Cycldek, Conimes, or Goblin Panda and is designed for compromising air-gapped devices via USB.
New Tycoon ransomware targets both Windows and Linux systems
A new human-operated ransomware strain is being deployed in highly targeted attacks targeting small to medium size organizations in the software and education industries since at least December 2019. [...]
https://www.bleepingcomputer.com/news/security/new-tycoon-ransomware-targets-both-windows-and-linux-systems/
A new human-operated ransomware strain is being deployed in highly targeted attacks targeting small to medium size organizations in the software and education industries since at least December 2019. [...]
https://www.bleepingcomputer.com/news/security/new-tycoon-ransomware-targets-both-windows-and-linux-systems/
Business services giant Conduent allegedly hit by Maze Ransomware
The Maze Ransomware operators are claiming to have successfully attacked business services giant Conduent, where they stole unencrypted files and encrypted devices on their network. [...]
https://www.bleepingcomputer.com/news/security/business-services-giant-conduent-allegedly-hit-by-maze-ransomware/
The Maze Ransomware operators are claiming to have successfully attacked business services giant Conduent, where they stole unencrypted files and encrypted devices on their network. [...]
https://www.bleepingcomputer.com/news/security/business-services-giant-conduent-allegedly-hit-by-maze-ransomware/
BleepingComputer
Business services giant Conduent hit by Maze Ransomware
The Maze Ransomware operators are claiming to have successfully attacked business services giant Conduent, where they stole unencrypted files and encrypted devices on their network.
Hackers tried to steal database logins from 1.3M WordPress sites
A large scale attack targeted hundreds of thousands of WordPress websites over the course of 24 hours, attempting to harvest database credentials by stealing config files after abusing known vulnerabilities in WordPress plugins and themes. [...]
https://www.bleepingcomputer.com/news/security/hackers-tried-to-steal-database-logins-from-13m-wordpress-sites/
A large scale attack targeted hundreds of thousands of WordPress websites over the course of 24 hours, attempting to harvest database credentials by stealing config files after abusing known vulnerabilities in WordPress plugins and themes. [...]
https://www.bleepingcomputer.com/news/security/hackers-tried-to-steal-database-logins-from-13m-wordpress-sites/
BleepingComputer
Hackers tried to steal database logins from 1.3M WordPress sites
A large scale attack targeted hundreds of thousands of WordPress websites over the course of 24 hours, attempting to harvest database credentials by stealing config files after abusing known vulnerabilities in WordPress plugins and themes.
Mozilla Firefox to let you export saved passwords in plain text
Mozilla Firefox will soon allow you to export your saved login credentials to a CSV text file that you can then import into a password manager or store as a backup. [...]
https://www.bleepingcomputer.com/news/security/mozilla-firefox-to-let-you-export-saved-passwords-in-plain-text/
Mozilla Firefox will soon allow you to export your saved login credentials to a CSV text file that you can then import into a password manager or store as a backup. [...]
https://www.bleepingcomputer.com/news/security/mozilla-firefox-to-let-you-export-saved-passwords-in-plain-text/
BleepingComputer
Mozilla Firefox to let you export saved passwords in plain text
Mozilla Firefox will soon allow you to export your saved login credentials to a CSV text file that you can then import into a password manager or store as a backup.
CPA Canada discloses data breach affecting 329,000 individuals
Chartered Professional Accountants of Canada (CPA) today disclosed that a cyberattack against the CPA Canada website allowed unauthorized third parties to access the personal information of over 329,000 members and other stakeholders. [...]
https://www.bleepingcomputer.com/news/security/cpa-canada-discloses-data-breach-affecting-329-000-individuals/
Chartered Professional Accountants of Canada (CPA) today disclosed that a cyberattack against the CPA Canada website allowed unauthorized third parties to access the personal information of over 329,000 members and other stakeholders. [...]
https://www.bleepingcomputer.com/news/security/cpa-canada-discloses-data-breach-affecting-329-000-individuals/
BleepingComputer
CPA Canada discloses data breach affecting 329,000 individuals
Chartered Professional Accountants of Canada (CPA) today disclosed that a cyberattack against the CPA Canada website allowed unauthorized third parties to access the personal information of over 329,000 members and other stakeholders.
Microsoft fixes admin mode bugs affecting Windows 10 PowerToys
Microsoft today released a new version of its open-source PowerToys toolset for Windows 10 with improvements and fixes for issues affecting the search results displayed by the PowerToys Run launcher when running as admin. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-admin-mode-bugs-affecting-windows-10-powertoys/
Microsoft today released a new version of its open-source PowerToys toolset for Windows 10 with improvements and fixes for issues affecting the search results displayed by the PowerToys Run launcher when running as admin. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-admin-mode-bugs-affecting-windows-10-powertoys/
BleepingComputer
Microsoft fixes admin mode bugs affecting Windows 10 PowerToys
Microsoft today released a new version of its open-source PowerToys toolset for Windows 10 with improvements and fixes for issues affecting the search results displayed by the PowerToys Run launcher when running as admin.
100,000 company inboxes hit with voice message phishing
Attackers have been pounding employee inboxes at companies that still use private branch eXchange (PBX) telephone systems for communication, delivering phishing that bypasses email defenses. [...]
https://www.bleepingcomputer.com/news/security/100-000-company-inboxes-hit-with-voice-message-phishing/
Attackers have been pounding employee inboxes at companies that still use private branch eXchange (PBX) telephone systems for communication, delivering phishing that bypasses email defenses. [...]
https://www.bleepingcomputer.com/news/security/100-000-company-inboxes-hit-with-voice-message-phishing/
BleepingComputer
100,000 company inboxes hit with voice message phishing
Attackers have been pounding employee inboxes at companies that still use private branch eXchange (PBX) telephone systems for communication, delivering phishing that bypasses email defenses.
Ongoing eCh0raix ransomware campaign targets QNAP NAS devices
After remaining relatively quiet over the past few months, the threat actors behind the eCh0raix Ransomware have launched a brand new campaign targeting QNAP storage devices. [...]
https://www.bleepingcomputer.com/news/security/ongoing-ech0raix-ransomware-campaign-targets-qnap-nas-devices/
After remaining relatively quiet over the past few months, the threat actors behind the eCh0raix Ransomware have launched a brand new campaign targeting QNAP storage devices. [...]
https://www.bleepingcomputer.com/news/security/ongoing-ech0raix-ransomware-campaign-targets-qnap-nas-devices/
BleepingComputer
Ongoing eCh0raix ransomware campaign targets QNAP NAS devices
After remaining relatively quiet over the past few months, the threat actors behind the eCh0raix Ransomware have launched a brand new campaign targeting QNAP storage devices.
Microsoft Teams to queue offline messages until back online
The Microsoft Teams cloud collaboration platform is getting support for automatically queueing up messages sent while offline until the device reconnects to the Internet. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-queue-offline-messages-until-back-online/
The Microsoft Teams cloud collaboration platform is getting support for automatically queueing up messages sent while offline until the device reconnects to the Internet. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-queue-offline-messages-until-back-online/
BleepingComputer
Microsoft Teams to queue offline messages until back online
The Microsoft Teams cloud collaboration platform is getting support for automatically queueing up messages sent while offline until the device reconnects to the Internet.
Kupidon is the latest ransomware targeting your data
The latest ransomware that everyone needs to watch out for is called Kupidon, and it targets not only corporate networks, but also your personal data. [...]
https://www.bleepingcomputer.com/news/security/kupidon-is-the-latest-ransomware-targeting-your-data/
The latest ransomware that everyone needs to watch out for is called Kupidon, and it targets not only corporate networks, but also your personal data. [...]
https://www.bleepingcomputer.com/news/security/kupidon-is-the-latest-ransomware-targeting-your-data/
BleepingComputer
Kupidon is the latest ransomware targeting your data
The latest ransomware that everyone needs to watch out for is called Kupidon, and it targets not only corporate networks, but also your personal data.
Windows 10 SMBGhost bug gets public proof-of-concept RCE exploit
Working exploit code that achieves remote code execution on Windows 10 machines is now publicly available for CVE-2020-0796, a critical vulnerability in Microsoft Server Message Block (SMB 3.1.1). [...]
https://www.bleepingcomputer.com/news/security/windows-10-smbghost-bug-gets-public-proof-of-concept-rce-exploit/
Working exploit code that achieves remote code execution on Windows 10 machines is now publicly available for CVE-2020-0796, a critical vulnerability in Microsoft Server Message Block (SMB 3.1.1). [...]
https://www.bleepingcomputer.com/news/security/windows-10-smbghost-bug-gets-public-proof-of-concept-rce-exploit/
BleepingComputer
Windows 10 SMBGhost bug gets public proof-of-concept RCE exploit
Working exploit code that achieves remote code execution on Windows 10 machines is now publicly available for CVE-2020-0796, a critical vulnerability in Microsoft Server Message Block (SMB 3.1.1).
Microsoft dev fixes major annoyance in Chromium browser
A Microsoft developer has contributed a fix for an annoying behavior that has been plaguing web browsers built off of the Chromium engine, such as Google Chrome and Microsoft Edge. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-dev-fixes-major-annoyance-in-chromium-browser/
A Microsoft developer has contributed a fix for an annoying behavior that has been plaguing web browsers built off of the Chromium engine, such as Google Chrome and Microsoft Edge. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-dev-fixes-major-annoyance-in-chromium-browser/
BleepingComputer
Microsoft dev fixes major annoyance in Chromium browser
A Microsoft developer has contributed a fix for an annoying behavior that has been plaguing web browsers built off of the Chromium engine, such as Google Chrome and Microsoft Edge.
Fitness Depot hit by data breach after ISP fails to 'activate the antivirus'
Canadian retailer Fitness Depot announced customers that its e-commerce platform was compromised by attackers who were able to steal their personal and financial information. [...]
https://www.bleepingcomputer.com/news/security/fitness-depot-hit-by-data-breach-after-isp-fails-to-activate-the-antivirus/
Canadian retailer Fitness Depot announced customers that its e-commerce platform was compromised by attackers who were able to steal their personal and financial information. [...]
https://www.bleepingcomputer.com/news/security/fitness-depot-hit-by-data-breach-after-isp-fails-to-activate-the-antivirus/
BleepingComputer
Fitness Depot hit by data breach after ISP fails to 'activate the antivirus'
Canadian retailer Fitness Depot announced customers that its e-commerce platform was compromised by attackers who were able to steal their personal and financial information.
US aerospace services provider breached by Maze Ransomware
The Maze Ransomware gang breached and successfully encrypted the systems of VT San Antonio Aerospace, as well as stole and leaked unencrypted files from the company's compromised devices in April 2020. [...]
https://www.bleepingcomputer.com/news/security/us-aerospace-services-provider-breached-by-maze-ransomware/
The Maze Ransomware gang breached and successfully encrypted the systems of VT San Antonio Aerospace, as well as stole and leaked unencrypted files from the company's compromised devices in April 2020. [...]
https://www.bleepingcomputer.com/news/security/us-aerospace-services-provider-breached-by-maze-ransomware/
BleepingComputer
US aerospace services provider breached by Maze Ransomware
The Maze Ransomware gang breached and successfully encrypted the systems of VT San Antonio Aerospace, as well as stole and leaked unencrypted files from the company's compromised devices in April 2020.
The Week in Ransomware - June 5th 2020 - Threat actors team up
It was quite a busy week with lots of new developments, including ransomware operations teaming up, new extortion tactics, and significant cyberattacks revealed. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-5th-2020-threat-actors-team-up/
It was quite a busy week with lots of new developments, including ransomware operations teaming up, new extortion tactics, and significant cyberattacks revealed. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-5th-2020-threat-actors-team-up/
BleepingComputer
The Week in Ransomware - June 5th 2020 - Threat actors team up
It was quite a busy week with lots of new developments, including ransomware operations teaming up, new extortion tactics, and significant cyberattacks revealed.
Windows 10 Start Menu promo for Microsoft Edge can't be disabled
Microsoft has recently started to show advertisements for Microsoft Edge every time you search for a competing browser, and there is no way to prevent it. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-start-menu-promo-for-microsoft-edge-cant-be-disabled/
Microsoft has recently started to show advertisements for Microsoft Edge every time you search for a competing browser, and there is no way to prevent it. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-start-menu-promo-for-microsoft-edge-cant-be-disabled/
BleepingComputer
Windows 10 Start Menu promo for Microsoft Edge can't be disabled
Microsoft has recently started to show advertisements for Microsoft Edge every time you search for a competing browser, and there is no way to prevent it.
ZEE5 allegedly hacked by 'Korean hackers', customer info at risk
A hacker identifying themselves as "John Wick" and "Korean Hackers" claim to have breached the systems for Indian media giant ZEE5 and are threatening to sell the database on criminal markets. [...]
https://www.bleepingcomputer.com/news/security/zee5-allegedly-hacked-by-korean-hackers-customer-info-at-risk/
A hacker identifying themselves as "John Wick" and "Korean Hackers" claim to have breached the systems for Indian media giant ZEE5 and are threatening to sell the database on criminal markets. [...]
https://www.bleepingcomputer.com/news/security/zee5-allegedly-hacked-by-korean-hackers-customer-info-at-risk/
BleepingComputer
ZEE5 allegedly hacked by 'Korean hackers', customer info at risk
A hacker identifying themselves as "John Wick" and "Korean Hackers" claim to have breached the systems for Indian media giant ZEE5 and are threatening to sell the database on criminal markets.
How to free up space after Windows 10 May 2020 Update
If May 2020 Update is running smoothly on your PC, here's how you can reclaim gigs of drive space by removing files of the previous version of Windows 10 such as the November 2019 Update. [...]
https://www.bleepingcomputer.com/news/microsoft/how-to-free-up-space-after-windows-10-may-2020-update/
If May 2020 Update is running smoothly on your PC, here's how you can reclaim gigs of drive space by removing files of the previous version of Windows 10 such as the November 2019 Update. [...]
https://www.bleepingcomputer.com/news/microsoft/how-to-free-up-space-after-windows-10-may-2020-update/
BleepingComputer
How to free up space after Windows 10 May 2020 Update
If May 2020 Update is running smoothly on your PC, here's how you can reclaim gigs of drive space by removing files of the previous version of Windows 10 such as the November 2019 Update.
Fake ransomware decryptor double-encrypts desperate victims' files
A fake decryptor for the STOP Djvu Ransomware is being distributed that lures already desperate people with the promise of free decryption. Instead of getting their files back for free, they are infected with another ransomware that makes their situation even worse. [...]
https://www.bleepingcomputer.com/news/security/fake-ransomware-decryptor-double-encrypts-desperate-victims-files/
A fake decryptor for the STOP Djvu Ransomware is being distributed that lures already desperate people with the promise of free decryption. Instead of getting their files back for free, they are infected with another ransomware that makes their situation even worse. [...]
https://www.bleepingcomputer.com/news/security/fake-ransomware-decryptor-double-encrypts-desperate-victims-files/
BleepingComputer
Fake ransomware decryptor double-encrypts desperate victims' files
A fake decryptor for the STOP Djvu Ransomware is being distributed that lures already desperate people with the promise of free decryption. Instead of getting their files back for free, they are infected with another ransomware that makes their situation…