What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2018-09-11 10:17:02 | Apple\'s Safari Falls For New Address Bar Spoofing Trick (lien direct) | An unpatched vulnerability in the Safari web browser allows an attacker to control the content displayed in the address bar, a security researcher discovered. The method enables well-crafted phishing attacks that are difficult to spot by the average consumer. [...] | Vulnerability | ||
|
2018-09-11 04:54:04 | British Airways Fell Victim To Card Scraping Attack (lien direct) | [...] | ★★★★ | ||
|
2018-09-10 18:35:03 | Exploit Affecting Tor Browser Burned In A Tweet (lien direct) | [...] | |||
|
2018-09-10 14:35:00 | Over 3,700 MikroTik Routers Abused In CryptoJacking Campaigns (lien direct) | Ever since exploit code for CVE-2018-14847 became publicly available, miscreants have launched attacks against MikroTik routers. Thousands of unpatched devices are mining for cryptocurrency at the moment. [...] | |||
|
2018-09-10 10:41:00 | Trend Micro Apps Leak User Data, Removed from Mac App Store (lien direct) | Multiple apps developed by Trend Micro are no longer available in the Mac App Store after researchers showed they were collecting browser history and information about users' computers. [...] | |||
|
2018-09-09 15:57:04 | Chrome 69 Removing WWW and M subdomains From the Browser\'s Address Bar (lien direct) | With the release of Chrome 69, Google has decided to strip the "www" and "m" subdomains from the URL displayed in Chrome's address bar. For example, when a user visits www.bleepingcomputer.com, the www would be stripped and displayed as bleepingcomputer.com in the address bar. [...] | ★★★★ | ||
|
2018-09-07 19:56:05 | (Déjà vu) Keybase Browser Extension Could Allow Sites to See Messages (lien direct) | The browser extension for the Keybase app fails to keep the end-to-end encryption promised by its desktop variant as sites could see the text being types into the chat area. [...] | |||
|
2018-09-07 19:56:05 | (Déjà vu) Keybase Browser Extension Does Not Encrypt Messages (lien direct) | The browser extension for the Keybase app fails to keep the end-to-end encryption promised by its desktop variant. [...] | |||
|
2018-09-07 19:28:03 | The Week in Ransomware - September 7th 2018 - Obama, Matrix, and More (lien direct) | It has been a quiet week with just small variants and new variants of existing ones such as Matrix. As much as we would like to see ransomware die off altogether, it is hear to stay. [...] | Ransomware | ||
|
2018-09-07 17:52:05 | Privilege Escalation Bug Found in Popular VPN Clients (lien direct) | Vulnerabilities in NordVPN and ProtonVPN clients allow an attacker to execute code on the affected computer with the rights of an administrator. [...] | ★★★★★ | ||
|
2018-09-07 16:34:01 | Apple Removes Top Security App For Stealing Data and Sending it to China (lien direct) | Apple removed today the #1 selling anti-malware app called Adware Doctor from the Mac App Store because it was gathering browsing history and other sensitive information without a user's permission and then uploading it to someone in China. [...] | |||
|
2018-09-07 13:54:01 | New Windows 10 Preview Build 17755 & Your Phone Updated with SMS Support (lien direct) | Microsoft has released Insider preview build 17755 that just fixes known issues and bugs. The bigger news is the release of an updated Your Phone app that allow you to view and reply on your Windows 10 PC to text messages that you received on your linked Android devices. [...] | |||
|
2018-09-07 10:46:04 | Domestic Kitten APT Operates in Silence Since 2016 (lien direct) | An extensive surveillance operation targets specific groups of individuals with malicious mobile apps that collect sensitive information from the device along with surrounding voice recordings. [...] | |||
|
2018-09-06 20:46:00 | New Chainshot Malware Found By Cracking 512-Bit RSA Key (lien direct) | Security researchers exploited a threat actor's poor choice for encryption and discovered a new piece of malware along with network infrastructure that links to various targeted attacks. [...] | Malware Threat | ||
|
2018-09-06 18:24:03 | New Fallout Exploit Kit Drops GandCrab Ransomware or Redirects to PUPs (lien direct) | A new exploit kit called Fallout is being used to distribute the GandCrab ransomware, malware downloading Trojans, and other potentially unwanted programs (PUPs). [...] | Ransomware Malware | ||
|
2018-09-06 17:40:00 | Businesses Can Now Pay to Extend Windows 7 Security Updates Beyond 2020 (lien direct) | Windows 7 is projected to reach the end-of-support in January 2020 for consumers but Microsoft is extending the support cycle for businesses to help them make the shift to a modern desktop. [...] | |||
|
2018-09-06 17:06:05 | British Airways Loses Customer Payment Card Data in Breach (lien direct) | British Airways two hours ago announced the theft of customer data from its website and mobile application. [...] | |||
|
2018-09-06 16:14:00 | Windows 10 Build 18234 (19H1) Released to Insiders With Improvements (lien direct) | Today, Microsoft is rolling out Windows 10 Build 18234 (19H1) for Windows Insiders in the Skip Ahead Ring. Build 18234 doesn't come with any new features as we're still in the early days of development of this feature update. For those who enjoy the Windows 10 Dark Theme for file explorer, it has been ported over to this build. [...] | |||
|
2018-09-06 11:49:00 | Tesla Will Restore Car Firmware/OS When Hacking Goes Wrong (lien direct) | Tesla recently added to its responsible disclosure guidelines with clarifications that welcome researchers to probe software in its cars for security bugs. [...] | Tesla | ||
|
2018-09-06 08:46:00 | Necurs Spews 780,000 Emails With Weaponized IQY Files (lien direct) | Necurs botnet distributed over 780,000 emails in five campaigns earlier this year, all containing weaponized IQY files - the latest method for delivering malware. [...] | |||
|
2018-09-05 17:06:02 | Cisco Releases 16 Security Alerts Rated Critical and High (lien direct) | Cisco published on Wednesday 30 security advisories on vulnerabilities identified in its products. Half of them are for high and critical severity bugs. [...] | ★★★★★ | ||
|
2018-09-05 15:19:02 | New Windows 10 October 2018 Preview Build 17754 Released (lien direct) | Today, Microsoft is rolling out a new preview build of Windows 10 October 2018 Update with a series of improvements and bug fixes. Windows 10 Build 17754 comes with fixes for Action Center, Microsoft Edge PWA integration, and more. [...] | |||
|
2018-09-05 14:50:04 | Vodafone Tells Hacked Customers with "1234" Password to Pay Back Money (lien direct) | A Czech court recently sentenced two hackers to three years in prison for accessing Vodafone customer's mobile accounts and use them to purchase 600,000 Czech Koruna worth of gambling services. Vodafone reportedly wants the hacked victim's to pay for these charges as they were using an easy password of "1234". [...] | |||
|
2018-09-05 11:45:00 | Windows Task Scheduler Zero Day Exploited by Malware (lien direct) | Malware developers have started to use the zero-day exploit for Windows Task Scheduler component, two days after proof-of-concept code for the vulnerability appeared online. [...] | Malware Vulnerability | ||
|
2018-09-05 09:55:00 | (Déjà vu) USA Is the Top Country for Hosting Malicious Domains According to Report (lien direct) | The US continues to be the top country hosting domains that serve web-based threats and, and the main source for exploit kits on a global level, according to new research. [...] | |||
|
2018-09-05 09:55:00 | (Déjà vu) USA Is the Top Country for Hosting Malicious Domains, Research (lien direct) | The US continues to be the top country hosting domains that serve web-based threats and, and the main source for exploit kits on a global level, according to new research. [...] | |||
|
2018-09-05 06:30:00 | Scammers Cashing In on Free TK Domains & Ad Fraud (lien direct) | Scammers are utilizing free .TK domains to redirect users from hacked sites to fake blogs created for the sole purpose of displaying advertisements or tech support scams. [...] | |||
|
2018-09-05 03:00:00 | MEGA Chrome Extension Hacked To Steal Login Credentials and CryptoCurrency (lien direct) | Security researchers have discovered that the MEGA Chrome extension had been compromised to steal login credentials and cryptocurrency keys. Once it was discovered that the extension was replaced with a malicious variant, Google removed the extension from the Chrome Web Store. [...] | |||
|
2018-09-04 22:50:01 | White-Hats Go Rogue, Attack Financial Institutions (lien direct) | Hackers rooted in the white-hat part of the business moonlight as bank robbers, pouring their knowledge and skills into creating and modifying malware that allows them to infiltrate financial institutions. [...] | Malware | ||
|
2018-09-04 19:28:01 | Python Package Installation Can Trigger Malicious Code (lien direct) | Although there is nothing special about code executing on a machine, when this code is executed is a significant detail from a security standpoint. [...] | |||
|
2018-09-04 18:13:05 | Microsoft Is Updating Outlook on Windows and Web With Design Improvements (lien direct) | Today, Microsoft is rolling out a big update for Outlook on Windows and web with design improvements. Microsoft has added a new option called "Coming Soon" in Outlook for Windows and an opt-in toggle in Outlook on the web that allows users to try the new design. [...] | |||
|
2018-09-04 15:04:05 | Microsoft Is Rolling Out New Skype Update With Call Recording Feature (lien direct) | Microsoft today announced a new update for Skype messaging platform that adds support for call recording on Android and iOS. Microsoft says that the Skype call recording feature is not yet available on Windows 10 but it will be rolled out in the coming weeks. [...] | |||
|
2018-09-04 14:01:03 | Microsoft To-Do App Updated for Insiders With Inking Support on Windows 10 (lien direct) | Microsoft has started testing a new feature for the Microsoft To-Do that simply makes sense on a touch-enabled device like Surface Go. Currently available for the Insiders, the updated Microsoft To-Do app allows users to create notes using a pen like the Surface Pen. [...] | |||
|
2018-09-04 13:05:01 | Chrome 69 Released With Enhanced Security, Customization, and Design (lien direct) | Google Chrome was launched 10 years ago and as part of the celebration, Google has released Chrome 69 for desktop, Android, and iOS. This version comes with a bunch of new features including a new user interface design, better password management, security, and customization. [...] | |||
|
2018-09-04 11:21:05 | New Banking Trojan Poses As A Security Module (lien direct) | A newly discovered banking Trojan departs from the regular tactics observed by malware researchers by choosing visible installation and by adding social engineering components. [...] | Malware | ||
|
2018-09-04 09:00:00 | Public IP Addresses of Tor Sites Exposed via SSL Certificates (lien direct) | A security researcher has found a method that can be used to easily identify the public IP addresses of misconfigured dark web servers. While some feel that this researcher is attacking Tor or other similar networks, in reality he is exposing the pitfalls of not knowing how to properly configure a hidden service. [...] | |||
|
2018-09-04 07:46:02 | Thousands of Compromised MikroTik Routers Send Traffic to Attackers (lien direct) | Attackers compromising MikroTik routers have configured the devices to forward network traffic to a handful of IP addresses under their control. [...] | |||
|
2018-09-04 04:50:04 | Cracked Logins of 570,000 Mortal Online Players Sold On Forums (lien direct) | Account information belonging to 569,703 players of Mortal Online massively multiplayer online role-playing game (MMORPG) is currently available online on database exchange forums. [...] | |||
|
2018-09-03 18:12:02 | Banking Trojans and Shady Apps Galore In Google Play (lien direct) | Despite Google's defenses for the official Android marketplace, cybercriminals still manage to sneak in a banking Trojan, or two, or three, security researchers have discovered. [...] | |||
|
2018-09-03 11:58:05 | Fake Yandex Voice Assistant App Found In Google Play (lien direct) | [...] | |||
|
2018-09-03 09:51:04 | Firefox to Recommend Extensions Related to Sites You Visit (lien direct) | In future versions of Firefox, the browser will display recommended browser extensions that are related to the site that a user is visiting. These extension will provide extra functionality to the site such as enhancing search functions, protecting a user's privacy, or performing some other behavior. [...] | |||
|
2018-09-03 07:57:01 | Google Has Trouble Detecting Fake Tech-Support Ads (lien direct) | Fraudulent tech-support services buying advertising space from Google has grown in sophistication to a level that the platform cannot distinguish them from legitimate providers. [...] | |||
|
2018-09-02 14:16:02 | Barack Obama\'s Blackmail Virus Ransomware Only Encrypts .EXE Files (lien direct) | Every once in a while you come across a really strange malware and such is the case with a new ransomware that only encrypts .EXE files on a computer. It then displays a screen with a picture of President Obama that asks for a "tip" to decrypt the files. [...] | Ransomware Malware | ||
|
2018-09-02 12:22:00 | Avast Users Having Internet Issues & Malwarebytes Conflicts After Upgrade (lien direct) | This week users of Avast's antivirus product have reported Internet problems after performing an upgrade of a product. If users also have Malwarebytes installed, reports are coming in that Avast is causing conflicts with that program as well. [...] | |||
|
2018-09-01 09:15:01 | Microsoft Fights to Improve Skype & Users Just Want Classic Back (lien direct) | No matter how hard Microsoft tries to modernize Skype 8, many users just want Skype Classic (Skype 7) back. Skype Classic may not have a modern interface or a simplistic feel, but users are concerned that Microsoft is just sacrificing functionality over form in Skype 8. [...] | |||
|
2018-08-31 22:01:02 | The Week in Ransomware - August 31st 2018 - Devs on Vacation (lien direct) | Even the ransomware developers seem to be taking a last minute summer vacation as it was only small variants released, with a few being in development. I am hoping this is just a continual decline in new ransomware, but we will not know for sure until we start moving into September. [...] | Ransomware | ||
|
2018-08-31 20:44:00 | CryptoNar Ransomware Discovered and Quickly Decrypted (lien direct) | This week a new CryptoJoker ransomware variant was discovered called CryptoNar that has infected victims. The good news, is that a free decryptor was quickly released so that these victims can get their files back for free. [...] | Ransomware | ||
|
2018-08-31 18:40:02 | Philips Reports Its Own Device For Nine Security Vulnerabilities (lien direct) | Philips evaluated one of its products and discovered that it was vulnerable to nine different security bugs, one of them of critical severity. [...] | |||
|
2018-08-31 16:53:01 | (Déjà vu) CCleaner 5.46 Released With Improved Privacy Options (lien direct) | CCleaner 5.46 was released yesterday and aims to fix all of the problems that led to the fiasco with the previous release of CCleaner 5.45. With this release, Piriform has added settings that allow you to actually disable their background monitoring process and to disable the sending of anonymous usage statistics. [...] | CCleaner | ||
|
2018-08-31 16:53:01 | (Déjà vu) CCleaner 5.46 Released With the Ability to Disable Unwanted Features (lien direct) | CCleaner 5.46 was released yesterday and aims to fix all of the problems that led to the fiasco with the previous release of CCleaner 5.45. With this release, Piriform has added settings that allow you to actually disable their background monitoring process and to disable the sending of anonymous usage statistics. [...] | CCleaner |
To see everything:
Our RSS (filtrered)
