The Week in Ransomware - June 12th 2020 - Slithering into networks
Attacks picked up at a rapid pace this week as well-known companies and cities were targeted with ransomware that impacted their networks. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-12th-2020-slithering-into-networks/
Attacks picked up at a rapid pace this week as well-known companies and cities were targeted with ransomware that impacted their networks. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-12th-2020-slithering-into-networks/
BleepingComputer
The Week in Ransomware - June 12th 2020 - Slithering into networks
Attacks picked up at a rapid pace this week as well-known companies and cities were targeted with ransomware that impacted their networks.
Black Kingdom ransomware hacks networks with Pulse VPN flaws
Operators of Black Kingdom ransomware are targeting enterprises with unpatched Pulse Secure VPN software or initial access on the network, security researchers have found. [...]
https://www.bleepingcomputer.com/news/security/black-kingdom-ransomware-hacks-networks-with-pulse-vpn-flaws/
Operators of Black Kingdom ransomware are targeting enterprises with unpatched Pulse Secure VPN software or initial access on the network, security researchers have found. [...]
https://www.bleepingcomputer.com/news/security/black-kingdom-ransomware-hacks-networks-with-pulse-vpn-flaws/
BleepingComputer
Black Kingdom ransomware hacks networks with Pulse VPN flaws
Operators of Black Kingdom ransomware are targeting enterprises with unpatched Pulse Secure VPN software or initial access on the network, security researchers have found.
Windows 10 Privacy Settings bug let users change admin options
An "Important" and equally ironic vulnerability, tracked as CVE-2020-1296 was fixed in the Microsoft June 2020 updates that allows privilege escalation in the Windows Diagnostics & Feedback settings app: the annoying privacy setting screen is shown to users when setting up or upgrading Windows. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-privacy-settings-bug-let-users-change-admin-options/
An "Important" and equally ironic vulnerability, tracked as CVE-2020-1296 was fixed in the Microsoft June 2020 updates that allows privilege escalation in the Windows Diagnostics & Feedback settings app: the annoying privacy setting screen is shown to users when setting up or upgrading Windows. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-privacy-settings-bug-let-users-change-admin-options/
BleepingComputer
Windows 10 Privacy Settings bug lets users change admin options
An "Important" and equally ironic vulnerability, tracked as CVE-2020-1296 was fixed in the Microsoft June 2020 updates that allows privilege escalation in the Windows Diagnostics & Feedback settings app: the annoying privacy setting screen is shown to users…
Avast fixes bug blocking programs from starting in Windows 10
A bug has been fixed in AVG and Avast security applications that set registry keys that blocked applications from running in Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/avast-fixes-bug-blocking-programs-from-starting-in-windows-10/
A bug has been fixed in AVG and Avast security applications that set registry keys that blocked applications from running in Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/avast-fixes-bug-blocking-programs-from-starting-in-windows-10/
BleepingComputer
Avast fixes bug blocking programs from starting in Windows 10
A bug has been fixed in AVG and Avast security applications that set registry keys that blocked applications from running in Windows 10.
Extortionists threaten to destroy sites in fake ransom attacks
Scammers are targeting website owners with blackmail messages asking them to pay ransoms between $1,500 and $3,000 in bitcoins to avoid having their sites' databases leaked and their reputation destroyed. [...]
https://www.bleepingcomputer.com/news/security/extortionists-threaten-to-destroy-sites-in-fake-ransom-attacks/
Scammers are targeting website owners with blackmail messages asking them to pay ransoms between $1,500 and $3,000 in bitcoins to avoid having their sites' databases leaked and their reputation destroyed. [...]
https://www.bleepingcomputer.com/news/security/extortionists-threaten-to-destroy-sites-in-fake-ransom-attacks/
BleepingComputer
Extortionists threaten to destroy sites in fake ransom attacks
Scammers are targeting website owners with blackmail messages asking them to pay ransoms between $1,500 and $3,000 in bitcoins to avoid having their sites' databases leaked and their reputation destroyed.
Windows 10 Alert: Defragger bug defrags SSD Drives too often
With the release of Windows 10 version 2004, the Windows Defragger has become a mess as it starts to defrag SSD drives too often, perform trim on non-SSD drives, and forgets when it last optimized a drive. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-alert-defragger-bug-defrags-ssd-drives-too-often/
With the release of Windows 10 version 2004, the Windows Defragger has become a mess as it starts to defrag SSD drives too often, perform trim on non-SSD drives, and forgets when it last optimized a drive. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-alert-defragger-bug-defrags-ssd-drives-too-often/
BleepingComputer
Windows 10 Alert: Defragger bug defrags SSD Drives too often
With the release of Windows 10 version 2004, the Windows Defragger has become a mess as it starts to defrag SSD drives too often, perform trim on non-SSD drives, and forgets when it last optimized a drive.
Attackers impersonate secure messaging site to steal bitcoins
In what can be described as the case of both cybersquatting and phishing, threat actors have created a site that imitates the legitimate secure note sharing service privnote.com to steal bitcoins. [...]
https://www.bleepingcomputer.com/news/security/attackers-impersonate-secure-messaging-site-to-steal-bitcoins/
In what can be described as the case of both cybersquatting and phishing, threat actors have created a site that imitates the legitimate secure note sharing service privnote.com to steal bitcoins. [...]
https://www.bleepingcomputer.com/news/security/attackers-impersonate-secure-messaging-site-to-steal-bitcoins/
BleepingComputer
Attackers impersonate secure messaging site to steal bitcoins
In what can be described as the case of both cybersquatting and phishing, threat actors have created a site that imitates the legitimate secure note sharing service privnote.com to steal bitcoins.
Windows 10: What to expect in upcoming feature updates
Microsoft previously confirmed that Windows 11 wouldn't be released, and the company will keep updating Windows 10 with new features, improvements, fixes, and bugs. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-what-to-expect-in-upcoming-feature-updates/
Microsoft previously confirmed that Windows 11 wouldn't be released, and the company will keep updating Windows 10 with new features, improvements, fixes, and bugs. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-what-to-expect-in-upcoming-feature-updates/
BleepingComputer
Windows 10: What to expect in upcoming feature updates
Microsoft previously confirmed that Windows 11 wouldn't be released, and the company will keep updating Windows 10 with new features, improvements, fixes, and bugs.
Accessories giant Claire's hacked to steal credit card info
The websites for U.S. based jewelry and accessory giant Claire's, and its subsidiary Icing, were compromised in April and may have allowed hackers to gain access to customer's credit cards. [...]
https://www.bleepingcomputer.com/news/security/accessories-giant-claires-hacked-to-steal-credit-card-info/
The websites for U.S. based jewelry and accessory giant Claire's, and its subsidiary Icing, were compromised in April and may have allowed hackers to gain access to customer's credit cards. [...]
https://www.bleepingcomputer.com/news/security/accessories-giant-claires-hacked-to-steal-credit-card-info/
BleepingComputer
Accessories giant Claire's hacked to steal credit card info
The websites for U.S. based jewelry and accessory giant Claire's, and its subsidiary Icing, were compromised in April and may have allowed hackers to gain access to customer's credit cards.
Microsoft removes Windows 10 2004 GameInput update block
Microsoft removed a Windows 10 2004 compatibility hold applied to prevent customers from losing mouse input in some games and apps using GameInput Redistributable after applying the Windows 10 May 2020 Update. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-removes-windows-10-2004-gameinput-update-block/
Microsoft removed a Windows 10 2004 compatibility hold applied to prevent customers from losing mouse input in some games and apps using GameInput Redistributable after applying the Windows 10 May 2020 Update. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-removes-windows-10-2004-gameinput-update-block/
BleepingComputer
Microsoft removes Windows 10 2004 GameInput update block
Microsoft removed a Windows 10 2004 compatibility hold applied to prevent customers from losing mouse input in some games and apps using GameInput Redistributable after applying the Windows 10 May 2020 Update.
Intel adds CPU-level malware protection to Tiger Lake processors
Intel today announced a new CPU-level security capability known as Control-Flow Enforcement Technology (Intel CET) that offers protection against malware using control-flow hijacking attack methods on devices with Intel's future Tiger Lake mobile processors. [...]
https://www.bleepingcomputer.com/news/security/intel-adds-cpu-level-malware-protection-to-tiger-lake-processors/
Intel today announced a new CPU-level security capability known as Control-Flow Enforcement Technology (Intel CET) that offers protection against malware using control-flow hijacking attack methods on devices with Intel's future Tiger Lake mobile processors. [...]
https://www.bleepingcomputer.com/news/security/intel-adds-cpu-level-malware-protection-to-tiger-lake-processors/
BleepingComputer
Intel adds CPU-level malware protection to Tiger Lake processors
Intel today announced a new CPU-level security capability known as Control-Flow Enforcement Technology (Intel CET) that offers protection against malware using control-flow hijacking attack methods on devices with Intel's future Tiger Lake mobile processors.
Microsoft investigating Edge self-launch on Windows startup
Microsoft is investigating a known issue affecting the new Chromium-based Edge browser where the app is automatically launching itself on Windows startup even if users haven't configured it to auto-start after their systems boot up. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-investigating-edge-self-launch-on-windows-startup/
Microsoft is investigating a known issue affecting the new Chromium-based Edge browser where the app is automatically launching itself on Windows startup even if users haven't configured it to auto-start after their systems boot up. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-investigating-edge-self-launch-on-windows-startup/
BleepingComputer
Microsoft investigating Edge self-launch on Windows startup
Microsoft is investigating a known issue affecting the new Chromium-based Edge browser where the app is automatically launching itself on Windows startup even if users haven't configured it to auto-start after their systems boot up.
Microsoft's Windows 10 Insider Program is being overhauled
With the launch of Windows 10 in 2015, getting into Microsoft's preview and beta testing program become a much simpler process. Now, Microsoft is overhauling the Windows Insider program and migrating users to "channels" from "rings". [...]
https://www.bleepingcomputer.com/news/microsoft/microsofts-windows-10-insider-program-is-being-overhauled/
With the launch of Windows 10 in 2015, getting into Microsoft's preview and beta testing program become a much simpler process. Now, Microsoft is overhauling the Windows Insider program and migrating users to "channels" from "rings". [...]
https://www.bleepingcomputer.com/news/microsoft/microsofts-windows-10-insider-program-is-being-overhauled/
BleepingComputer
Microsoft's Windows 10 Insider Program is being overhauled
With the launch of Windows 10 in 2015, getting into Microsoft's preview and beta testing program become a much simpler process. Now, Microsoft is overhauling the Windows Insider program and migrating users to "channels" from "rings".
Windows 10 2004 breaks Fresh Start, how to still use it
With the release of Windows 10 version 2004, Microsoft has broken the 'Fresh Start' feature that allows you to perform a clean install of the operating system while retaining your data. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-2004-breaks-fresh-start-how-to-still-use-it/
With the release of Windows 10 version 2004, Microsoft has broken the 'Fresh Start' feature that allows you to perform a clean install of the operating system while retaining your data. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-2004-breaks-fresh-start-how-to-still-use-it/
BleepingComputer
Windows 10 2004 breaks Fresh Start, how to still use it
With the release of Windows 10 version 2004, Microsoft has broken the 'Fresh Start' feature that allows you to perform a clean install of the operating system while retaining your data.
US bank customers targeted in ongoing Qbot campaign
Security researchers at F5 Labs have spotted ongoing attacks using Qbot banking trojan malware payloads to steal credentials from customers of dozens of US financial institutions. [...]
https://www.bleepingcomputer.com/news/security/us-bank-customers-targeted-in-ongoing-qbot-campaign/
Security researchers at F5 Labs have spotted ongoing attacks using Qbot banking trojan malware payloads to steal credentials from customers of dozens of US financial institutions. [...]
https://www.bleepingcomputer.com/news/security/us-bank-customers-targeted-in-ongoing-qbot-campaign/
BleepingComputer
US bank customers targeted in ongoing Qbot campaign
Security researchers at F5 Labs have spotted ongoing attacks using Qbot banking trojan malware payloads to steal credentials from customers of dozens of US financial institutions.
Google Alerts catches fake data breach notes pushing malware
Fraudsters recently have been pushing fake data breach notifications using big company names to distribute malware and scams. They're mixing black SEO, Google Sites, and spam pages to direct users to dangerous locations. [...]
https://www.bleepingcomputer.com/news/security/google-alerts-catches-fake-data-breach-notes-pushing-malware/
Fraudsters recently have been pushing fake data breach notifications using big company names to distribute malware and scams. They're mixing black SEO, Google Sites, and spam pages to direct users to dangerous locations. [...]
https://www.bleepingcomputer.com/news/security/google-alerts-catches-fake-data-breach-notes-pushing-malware/
BleepingComputer
Google Alerts catches fake data breach notes pushing malware
Fraudsters recently have been pushing fake data breach notifications using big company names to distribute malware and scams. They're mixing black SEO, Google Sites, and spam pages to direct users to dangerous locations.
CoinMiner exploits Apple APSDaemon vulnerability to evade detection
Malware distributors are abusing a DLL hijacking vulnerability in Apple's Push Notification service Windows executable to install coin miners on users attempting to download copyrighted software. [...]
https://www.bleepingcomputer.com/news/security/coinminer-exploits-apple-apsdaemon-vulnerability-to-evade-detection/
Malware distributors are abusing a DLL hijacking vulnerability in Apple's Push Notification service Windows executable to install coin miners on users attempting to download copyrighted software. [...]
https://www.bleepingcomputer.com/news/security/coinminer-exploits-apple-apsdaemon-vulnerability-to-evade-detection/
BleepingComputer
CoinMiner exploits Apple APSDaemon vulnerability to evade detection
Malware distributors are abusing a DLL hijacking vulnerability in Apple's Push Notification service Windows executable to install coin miners on users attempting to download copyrighted software.
T-Mobile outage caused by configuration error, not a DDoS attack
Rumors began circulating on Twitter yesterday that the U.S. was under a massive DDoS attack. It turned out to be an outage on T-Mobile caused by a configuration error. [...]
https://www.bleepingcomputer.com/news/security/t-mobile-outage-caused-by-configuration-error-not-a-ddos-attack/
Rumors began circulating on Twitter yesterday that the U.S. was under a massive DDoS attack. It turned out to be an outage on T-Mobile caused by a configuration error. [...]
https://www.bleepingcomputer.com/news/security/t-mobile-outage-caused-by-configuration-error-not-a-ddos-attack/
BleepingComputer
T-Mobile outage caused by configuration error, not a DDoS attack
Rumors began circulating on Twitter yesterday that the U.S. was under a massive DDoS attack. It turned out to be an outage on T-Mobile caused by a configuration error.
Chipmaker MaxLinear reports data breach after Maze Ransomware attack
U.S. system-on-chip (SOC) maker company MaxLinear disclosed that some of its computing systems were encrypted by Maze Ransomware operators last month, after an initial breach that took place around April 15. [...]
https://www.bleepingcomputer.com/news/security/chipmaker-maxlinear-reports-data-breach-after-maze-ransomware-attack/
U.S. system-on-chip (SOC) maker company MaxLinear disclosed that some of its computing systems were encrypted by Maze Ransomware operators last month, after an initial breach that took place around April 15. [...]
https://www.bleepingcomputer.com/news/security/chipmaker-maxlinear-reports-data-breach-after-maze-ransomware-attack/
BleepingComputer
Chipmaker MaxLinear reports data breach after Maze Ransomware attack
U.S. system-on-chip (SOC) maker company MaxLinear disclosed that some of its computing systems were encrypted by Maze Ransomware operators last month, after an initial breach that took place around April 15.
Adobe fixes critical flaws in Illustrator, After Effects, more
Adobe has released out-of-band security updates to address 18 critical flaws that could allow attackers to execute arbitrary code on systems running vulnerable versions of Adobe After Effects, Illustrator, Premiere Pro, Premiere Rush, and Audition. [...]
https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-flaws-in-illustrator-after-effects-more/
Adobe has released out-of-band security updates to address 18 critical flaws that could allow attackers to execute arbitrary code on systems running vulnerable versions of Adobe After Effects, Illustrator, Premiere Pro, Premiere Rush, and Audition. [...]
https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-flaws-in-illustrator-after-effects-more/
BleepingComputer
Adobe fixes critical flaws in Illustrator, After Effects, more
Adobe has released out-of-band security updates to address 18 critical flaws that could allow attackers to execute arbitrary code on systems running vulnerable versions of Adobe After Effects, Illustrator, Premiere Pro, Premiere Rush, and Audition.