Menu

Monthly Archives: March 2020

Malicious Coronavirus victim tracking app demands ransom payment from Android users
Microsoft patches wormable Windows 10 ‘SMBGhost’ flaw
Report calls for web pre-screening to end UK’s child abuse ‘explosion’
Open source bugs have soared in the past year
Microsoft Teams goes down as Europe starts working from home
COVID‑19 and the forced workplace exodus

As the pandemic forces many employees to work from home, can your organization stay productive – and safe? The post COVID‑19 and the forced workplace exodus appeared first on WeLiveSecurity

Senate bill would ban TikTok from government phones

Several issue were found in Simple Linux Utility for Resource Management (SLURM), a cluster resource management and job scheduling system.

Multiple vulnerabilities have been found in Squid, the worst of which could lead to arbitrary code execution.

An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed.

Cookiethief Android malware hijacks Facebook accounts without password
Beware scams exploiting coronavirus fears

From malware-laden emails to fake donations, these are some of the most common cons you should watch out for amid the public health crisis The post Beware scams exploiting coronavirus fears appeared first on WeLiveSecurity

Working from Home: COVID-19’s Constellation of Security Challenges
Coronavirus Tracking App is ransomware; locks phones for ransom
WordPress Plugin Bug in Popup Builder Threatens 100K Websites
Your data was ‘taken without permission’, customers told, after personal info accessed in O2 UK partner’s database
Hey, friends. We know it’s a crazy time for the economy, but don’t forget to enable 2FA for payments by Saturday
Coronavirus-Themed APT Attack Spreads Malware
Europol nabs SIM hacking network from across Europe
ACLU Sues Over U.S. Airport Facial-Recognition Technology
EARN IT Act threatens end-to-end encryption
Homeland Security sued over secretive use of face recognition

Reading Time: ~ 2 min. Paradise Ransomware Spreading Through Unusual Attachments While Paradise ransomware isn’t new to the scene, the latest methods it’s using to spread are a bit surprising. Though it sticks to using email for transmission, it now offers up an IQY attachment instead of a typical word document or excel spreadsheet. These […]

Confessions app Whisper spills almost a billion records
Reviewing vulnerabilities in 2019: The annual Red Hat Product Security Risk Report
Open-source bug bonanza: Vulnerabilities up almost 50 per cent thanks to people actually looking for them
Avast pulls plug on insecure JavaScript engine in its security software suite
Fresh virus misery for Illinois: Public health agency taken down by… web ransomware. Great timing, scumbags
Researchers Warn of Novel PXJ Ransomware Strain
Trojan Raids Android Users’ Cookie Jars

security update

Thought you were done after Tuesday’s 115-fix day? Not yet: Microsoft emits SMBv3 worm-cure crisis patch
Hackers using fake live Coronavirus map to spread malware
US Congress: Spying law is flawed, open to abuse, and lacking in accountability – so let’s reauthorize it
Phishing attacks exploit YouTube redirects to catch the unwary
European power grid organization hit by cyberattack

The incident affected our office network, says ENTSO-E, as it implements measures to avoid future cyber-incursions The post European power grid organization hit by cyberattack appeared first on WeLiveSecurity

Data of millions of eBay and Amazon shoppers exposed
Microsoft takes down largest botnet network “Necurs”
Firefox 74 offers privacy and security updates
$100K Paid Out for Google Cloud Shell Root Compromise
Akamai Talks Massive Uptick in Credential-Stuffing Attacks Against Bank APIs
Intel patches graphics drivers and offers new LVI flaw mitigations
Analytics firm’s VPN and ad-blocking apps are secretly grabbing user data
Necurs zombie botnet disrupted by Microsoft
Laying a foundation for more secure computing: Red Hat Enterprise Linux and Common Criteria
Tracking Turla: New backdoor delivered via Armenian watering holes

Can an old APT learn new tricks? Turla’s TTPs are largely unchanged, but the group recently added a Python backdoor. The post Tracking Turla: New backdoor delivered via Armenian watering holes appeared first on WeLiveSecurity

Russia-backed crew’s latest malware has discerning taste – when screening visitors to poisoned watering holes

Reading Time: ~ 3 min. The last thing you want to do when you get a new computer, mobile device, or tablet is spend a lot of time setting it up. But like any major appliance, these devices are something you want to invest a little time setting up properly. Often, they’re not cheap. And […]

Microsoft nukes 9 million-strong Necurs botnet after unpicking domain name-generating algorithm
Flaws Riddle Zyxel’s Network Management Software

security update

Phishing Attack Skirts Detection With YouTube
Meltdown The Sequel strikes Intel chips – and full mitigation against data-meddling LVI flaw will slash performance
TRRespass research reveals rowhammering is alive and well
Microsoft leaves critical bug unpatched on Patch Tuesday
Wormable, Unpatched Microsoft Bug Threatens Corporate LANs
Find out how to manage detection and response for better cyber security
Friend’s girlfriend sextortion scam infects PCs with Raccoon malware
New TrickBot Variant Updates Anti-Analysis Tricks
More Than Half of IoT Devices Vulnerable to Severe Attacks
Secret-sharing app Whisper shared secrets like last known location and actual password tokens in exposed database
Necurs Botnet in Crosshairs of Global Takedown Offensive
How to Tell if a Website Has Been Compromised
FBI arrests alleged owner of Deer.io, top market for stolen accounts
Securing the deployment of OpenShift Container Platform 4
Trial for accused CIA leaker ends in hung jury
Brave browser to block web fingerprinting with randomisation
The Reg produces exhibit A1: A UK court IT system running Windows XP
Google: You know we said that Chrome tracker contained no personally identifiable info? Forget we ever said that
Stuck at home? Need something to keep busy with? Microsoft has 115 ideas – including an awful SMBv3 security hole to worry about
That LVI CPU hole wasn’t the only Intel fix: Dozens of flaws patched to stop chips turning into potatoes
Critical Bugs in Rockwell, Johnson Controls ICS Gear
Microsoft Patches 26 Critical Bugs in Big March Update

security update

California tech industry gets its first big coronavirus hit: RSA Conference attendee infected, in serious condition
Popular ThemeREX WordPress Plugin Opens Websites to RCE
Firefox Bug Opens iPhone AirPods to Third-Party Snooping
High-Severity Flaws Plague Intel Graphics Drivers
You only LVI twice: Meltdown The Sequel strikes Intel chips – and full mitigation against data-meddling flaw will cost you 50%+ of performance
Hackers hit hackers in new malware campaign
Flaw in popular VPN service may have exposed customer data

NordVPN praised its bug bounty program and said that a fix had been shipped within two days The post Flaw in popular VPN service may have exposed customer data appeared first on WeLiveSecurity

Variant of Paradise Ransomware Targets Office IQY Files
Watch out for Office 365 and G Suite scams, FBI warns businesses
Google data puts innocent man at the scene of a crime
7 Cybersecurity Trends to Look Out for in 2020
Ex-Inspector General indicted for stealing data on 250k govt colleagues
Phone carriers may soon be forced to adopt anti-robocall tech
Android anti-virus products put to the test – which are the best at stopping new malicious apps?
Spear-Phishing Attack Lures Victims With ‘HIV Results’
Avast’s AntiTrack promised to protect your privacy. Instead, it opened you to miscreant-in-the-middle snooping
AMD, boffins clash over chip data-leak claims: New side-channel holes in decades of cores, CPU maker disagrees
Hackers are exploiting critical vulnerability in Microsoft Exchange server
NSO Group fires back at Facebook: You lied to the court, claims spyware slinger, and we’ve got the proof
Microsoft: 99.9 percent of hacked accounts didn’t use MFA

Only 11 percent of all enterprise accounts have multi-factor authentication enabled The post Microsoft: 99.9 percent of hacked accounts didn’t use MFA appeared first on WeLiveSecurity

Microsoft Exchange Server Flaw Exploited in APT Attacks
Months-long trial of alleged CIA Vault 7 exploit leaker ends with hung jury: Ex-sysadmin guilty of contempt, lying to FBI
It’s not a breach… it’s just that someone else has your data