What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2019-09-06 11:24:04 | Over $37 Million Lost by Toyota Boshoku Subsidiary in BEC Scam (lien direct) | Toyota Boshoku Corporation, a car components manufacturer member of the Toyota Group, announced today that one of its European subsidiaries lost more than $37 million following a business email compromise (BEC) attack. [...] | |||
|
2019-09-06 10:19:03 | Lilocked Ransomware Actively Targeting Servers and Web Sites (lien direct) | A relatively new ransomware named Lilocked by researchers and Lilu by the developers is actively targeting servers and encrypting the data located on them. All of the known infected servers are web sites, which is causing the encrypted files to show up in Google search results. [...] | Ransomware | ★★ | |
|
2019-09-06 08:30:00 | GootKit Malware Bypasses Windows Defender by Setting Path Exclusions (lien direct) | As Windows Defender matures and becomes tightly integrated into Windows 10, malware writers are creating techniques to evade its detection. Such is the case with the GootKit banking Trojan, which use a UAC bypass and WMIC commands to exclude the malware executable from being scanned by Windows Defender Antivirus. [...] | Malware | ★★★★★ | |
|
2019-09-06 07:12:05 | Critical Exim TLS Flaw Lets Attackers Remotely Execute Commands as Root (lien direct) | The Exim mail transfer agent (MTA) software is impacted by a critical severity vulnerability present in all versions up to and including 4.92.1, and allowing remote attackers to execute programs with root privileges on all servers that accept TLS connections. [...] | Vulnerability | ||
|
2019-09-06 03:30:03 | Windows and AV Software Ignore Malware in Virtual Disk Files (lien direct) | Windows operating system and antivirus software treat VHD and VHDX disk image downloads like a black box. Scanning the files inside these containers does not happen until the image is mounted and the files run. [...] | Malware | ||
|
2019-09-05 18:48:03 | FBI Warns Students to Think Before They Post Online Threats (lien direct) | The U.S. Federal Bureau of Investigation (FBI) asked students not to make hoax threats via social media, emails, or text messages, in a warning published as part of its 'Think Before You Post' campaign. [...] | |||
|
2019-09-05 17:15:00 | Microsoft Announces First PowerToys Preview Release for Windows 10 (lien direct) | Microsoft announced today that the first preview release of PowerToys utilities for Windows 10 is now available for download, together with docs and tools that will make it simple to create new PowerToys apps. [...] | |||
|
2019-09-05 13:13:05 | Students Rejoice: School District Closed by Ransomware Attack (lien direct) | The summer school holiday has not ended for students in Flagstaff, Arizona, as a ransomware attack hitting the School District computers forces the decision to cancel classes for today. The schedule for tomorrow is uncertain. [...] | Ransomware | ||
|
2019-09-05 12:01:01 | Amazon AWS Outage Shows Data in the Cloud is Not Always Safe (lien direct) | A recent power outage outage at an Amazon AWS data facility and the resulting data loss for some customers shows that storing data in the cloud does not mean you do not also need a backup. [...] | ★★★ | ||
|
2019-09-05 11:28:05 | Buggy GPS Trackers Expose Childrens\' Real-Time Location (lien direct) | Several vulnerabilities impacting twenty-nine models of GPS trackers designed to monitor the location of children, pets, and valuable possessions expose real-time location data as Avast Threat Labs researchers found. [...] | Threat | ★★★★ | |
|
2019-09-05 10:28:05 | WordPress 5.2.3 Released with Security and Bug Fixes (lien direct) | WordPress 5.2.3 has been released and includes fixes for six vulnerabilities and 29 bugs or enhancements. As WordPress is a common target for threat actors looking to host their malicious campaigns, it is important that all WordPress users upgrade to the latest release as soon as possible. [...] | Threat | ||
|
2019-09-05 07:14:02 | Twitter Suspends SMS-Based Tweeting After High-Profile Account Hacks (lien direct) | Twitter on Wednesday announced that it would turn off its Tweet via SMS feature for an unspecified period following abuses that led to hackers posting from at least two high-profile accounts. [...] | |||
|
2019-09-05 06:30:03 | Ransomware Adopts DoppelPaymer Name Given by Researchers (lien direct) | Whether it be malware devs contacting us about our stories or commenting in our forums, we all know that the ransomware developers monitor researchers and technology sites for information about their programs. Nothing shows this better, than a ransomware that recently decided to adopt the name given to it by researchers. [...] | Ransomware Malware | ||
|
2019-09-05 03:33:03 | Hackers Ask for $5.3 Million Ransom, Turn Down $400k, Get Nothing (lien direct) | Hackers infecting the computer systems of the city of New Bedford, Massachusetts, with ransomware wouldn't settle for anything less that than $5.3 million to decrypt the data. The ransom was too high and they got a big fat nothing in return. [...] | Ransomware | ||
|
2019-09-04 20:15:01 | Android Zero-Day Bug Does Not Make It on Google\'s \'Fix\' List (lien direct) | Google yesterday rolled out security patches for the Android mobile operating system but did not include the fix for at least one bug that enables increasing permissions to kernel level. [...] | |||
|
2019-09-04 19:31:01 | Facebook and Instagram Start Fighting Vaccine Misinformation (lien direct) | Facebook and Instagram have started rolling out information pop-ups to provide users with authoritative vaccine information before accessing vaccine-related content on the two social networks. [...] | |||
|
2019-09-04 17:41:03 | Stealthy Android Trojan Spy Signs You Up For Premium Subscriptions (lien direct) | Security researchers discovered a new Android Trojan with malware dropper and spyware capabilities in 24 Google Play Store apps with more than 472,000 downloads in total. [...] | Malware | ||
|
2019-09-04 15:19:02 | Year-Old Samba Bug Allows Access to Forbidden Root Share Paths (lien direct) | For almost a year, threat actors could exploit a vulnerability in Samba software that allowed them to bypass file-sharing permissions and escape outside the share root directory. [...] | Vulnerability Threat | ||
|
2019-09-04 14:03:03 | Glupteba Malware Uses Bitcoin Blockchain to Update C2 Domains (lien direct) | A new variant of the Glupteba malware dropper is using the Bitcoin blockchain to fetch command and control (C2) server domains from Bitcoin transactions marked with OP_RETURN script opcodes. [...] | Malware | ||
|
2019-09-04 13:32:03 | Google Chrome Starts Testing Third-Party Cookie Blocking (lien direct) | With yesterday's release of Firefox 69, Mozilla has started blocking third-party tracking cookies by default as part of their Enhanced Tracking Protection feature. Not to be outdone by Firefox, Google has also started to test a new feature that will block third-party tracking cookies within Google Chrome. [...] | |||
|
2019-09-04 09:16:00 | Android SMS Phishing Can Stealthily Enable Malicious Settings (lien direct) | Android smartphones from multiple vendors, including Samsung, Huawei, LG, and Sony are susceptible to an advanced type attack that can alter device settings via a short text message. [...] | |||
|
2019-09-04 08:46:02 | Mozilla Will Support Existing Ad Blockers in Extensions Manifest v3 (lien direct) | Mozilla has decided to split from Google and continue to support existing ad blockers in the upcoming extension changes being proposed by Google as part of the Extensions Manifest v3. [...] | |||
|
2019-09-04 03:30:03 | Hackers Get $1.9M in Bug Bounties at Live Hacking Sessions (lien direct) | More than 1,000 security bug bounty reports were submitted during a three-day live hacking event in Las Vegas. The total payout for the participating hackers was almost $2 million. Three organizations paid the money, one of them covering more than half of the total. [...] | |||
|
2019-09-03 17:57:05 | Microsoft Investigating Windows 10 Cortana High CPU Issues (lien direct) | Microsoft has confirmed that they are investigating reports of high CPU usage in the SearchUI.exe component of Cortana after users install the Windows 10 v1903 KB4512941 cumulative update. [...] | |||
|
2019-09-03 17:21:04 | (Déjà vu) Microsoft Releases September 2019 Office Updates With Fixes, Improvements (lien direct) | Microsoft released the September 2019 non-security Microsoft Office updates with improvements and fixes for the Windows Installer (MSI) editions of Office 2013, and Office 2016. [...] | |||
|
2019-09-03 16:31:00 | Hacked SharePoint Sites Used to Bypass Secure Email Gateways (lien direct) | Phishers behind a new campaign have switched to using compromised SharePoint sites and OneNote documents to redirect potential victims from the banking sector to their landing pages. [...] | |||
|
2019-09-03 15:07:00 | Firefox 69 Released with Enhanced Tracking Protection and Flash Disabled (lien direct) | Mozilla has officially released Firefox 69 for Windows, Mac, and Linux. This version comes with enhanced tracking protection enabled by default, Flash disabled by default, ability to block autoplay videos without sound, and numerous performance and UI improvements. [...] | |||
|
2019-09-03 14:02:04 | Microsoft Uses Deep Learning For Malicious PowerShell Detection (lien direct) | Microsoft bets on deep learning to enhance the Microsoft Defender Advanced Threat Protection (ATP) malicious PowerShell detection feature using a new technique originally developed for natural language processing (NLP). [...] | Threat | ||
|
2019-09-03 11:53:01 | XKCD Forum Breach Exposes Emails, Passwords of 562,000 Users (lien direct) | The forums of the XKCD webcomic created by Randall Munroe in 2005 are currently offline after being impacted by a data breach which exposed the information of 561,991 users on July 1. [...] | Data Breach | ||
|
2019-09-03 10:29:03 | Zerodium Makes Android Zero Days More Expensive Than iOS (lien direct) | Exploit broker Zerodium has updated the payouts for eligible zero-day Android and iOS exploits, with rewards for Android 0days having surpassed the ones for iOS for the first time since 2015 when the company was founded. [...] | |||
|
2019-09-03 08:00:00 | New Toolkit Pushes Malware via Fake Program Update Alerts in 30 Languages (lien direct) | A new social engineering toolkit called Domen has been discovered that uses fake browser and program update alerts on compromised sites to infect users with malware and remote access software. [...] | Malware | ||
|
2019-09-03 06:11:01 | USBAnywhere Bugs in Supermicro Servers Allow Remote USB Access (lien direct) | Baseboard management controllers (BMC) of some Supermicro servers are vulnerable to unauthorized virtual USB mounting attacks that can be carried out remotely. [...] | |||
|
2019-09-03 04:48:05 | Nemty Ransomware Gets Distribution from RIG Exploit Kit (lien direct) | The operators of Nemty ransomware appear to have struck a distribution deal to target systems with outdated technology that can still be infected by exploit kits. [...] | Ransomware | ||
|
2019-09-03 03:32:03 | Fake BleachBit Website Built to Distribute AZORult Info Stealer (lien direct) | Cybercriminals are taking advantage of the popularity of the BleachBit disk cleaning tool to spread Azorult information stealer. For this purpose, they created a static web page that purports to be the official website for the utility. [...] | Tool | ||
|
2019-09-02 18:59:04 | Windows 10 1903 May Cause Microsoft Visio to Stall or Hang (lien direct) | Microsoft Visio users may experience delays or stalling while using the app with a keyboard on Windows 10, version 1903 according to an issue published today on the Microsoft 365 Service health dashboard. [...] | |||
|
2019-09-02 17:31:00 | Windows 10 Gets a Cloud Reset Feature, Here\'s How it Works (lien direct) | The Windows 10 20H1 Update will introduce a new cloud recovery feature that allow users to reset their PC using Windows files downloaded from Microsoft's servers. [...] | |||
|
2019-09-02 17:06:04 | Data of 90K Mastercard Priceless Specials Members Shared Online (lien direct) | A database containing sensitive information of about 90,000 German Mastercard "Priceless Specials" loyalty program members shared online following a breach discovered on August 20 was added to data breach site Have I Been Pwned on September 1. [...] | Data Breach | ||
|
2019-09-02 14:48:04 | Astaroth Trojan Uses Cloudflare Workers to Bypass AV Software (lien direct) | A new malicious campaign is actively distributing a new Astaroth Trojan variant by abusing the Cloudflare Workers serverless computing platform to avoid detection and block automated analysis attempts. [...] | |||
|
2019-09-02 13:05:00 | Back to School? Be Careful of Malware Hiding As Textbooks (lien direct) | Searching for textbooks and essays in electronic form on the Internet exposes students to a wide range of malicious attacks as Kaspersky Lab researchers found after analyzing data gathered over the past academic year. [...] | Malware | ||
|
2019-09-02 12:35:00 | Cracked Passwords for Poshmark Accounts Being Sold Online (lien direct) | Dehashed login details for customers of Poshmark, an online marketplace for buying and selling used clothes and accessories, have been circulating online following the data breach a few months ago. [...] | Data Breach | ||
|
2019-09-02 11:27:03 | Sodinokibi Ransomware Spreads via Fake Forums on Hacked Sites (lien direct) | A distributor for the Sodinokibi Ransomware is hacking into WordPress sites and injecting JavaScript that displays a fake Q & A forum post over the content of the original site. This fake post contains an "answer" from the site's "admin" that contains a link to the ransomware installer. [...] | Ransomware | ||
|
2019-09-02 04:05:01 | The Different Types of Windows 10 Updates (lien direct) | Windows as a Service model delivers always up to date Windows 10 experience with the latest features and security update. In this article, we will discuss the different types of Windows 10 updates. [...] | |||
|
2019-09-01 16:14:01 | Windows 10 KB4512941 Update Causing High CPU Usage in Cortana (lien direct) | After installing last week's KB4512941 cumulative update for Windows 10 v1903, some users are reporting that the SearchUI.exe process for Cortana is exhibiting high CPU usage and spikes. [...] | |||
|
2019-09-01 11:12:03 | New Microsoft Edge to Retire Flash Using Chrome\'s Roadmap (lien direct) | Microsoft has announced that the new Microsoft Edge will follow the same Adobe Flash retirement roadmap as Chrome and other chromium-based browsers. [...] | |||
|
2019-08-31 13:02:01 | Latest Sextortion Email Scheme Sent by ChaosCC Hacker Group (lien direct) | A new sextortion scam is underway that claims to be from the ChaosCC hacker group who states they infected the recipient's computer with a Trojan that videoed them on adult web sites. [...] | |||
|
2019-08-31 11:20:01 | Reddit Experiencing Outage Due to Amazon AWS Issue (lien direct) | Some users say they are experiencing problems with Reddit today. Most of them are reporting that they cannot access the website for the social discussion platform. [...] | |||
|
2019-08-31 10:30:00 | Microsoft Resolves Six Windows 10 1903 Issues, Update Blocks Stay On (lien direct) | Microsoft resolved six Windows 10, version 1903 known issues in the KB4512941 optional cumulative update released on August 30, with compatibility blocks still being enabled for two of them. [...] | |||
|
2019-08-30 19:36:01 | Microsoft Says Windows 10 1809 Users Can Dismiss 1903 Update Alerts (lien direct) | Microsoft says that Windows 10, version 1809 users who have recently started receiving update notifications to install the Windows 10, version 1903 can dismiss them and update at a later time. [...] | |||
|
2019-08-30 17:21:03 | TrickBot Bypasses Secure Email Gateway Using Google Docs Phishing (lien direct) | The Google Docs online word processor is being used by attackers to disseminate TrickBot banking Trojan payloads to unsuspecting victims via executables camouflaged as PDF documents. [...] | |||
|
2019-08-30 16:06:05 | Windows 10 v1903 Update KB4512941 Released With Sandbox Fix & More (lien direct) | Microsoft is rolling out another August cumulative update (KB4512941) for Windows 10 version 1903 that includes numerous fixes, including one for the Windows Sandbox crashes. This update won't download and install automatically unless the user manually checks for updates in the Settings app. [...] |
To see everything:
