Thursday, November 7, 2024

BleepingComputer.com

"North Korean hackers use new macOS malware against crypto firms."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 08 November 2024, 0008 UTC.

Content and Source:  https://www.bleepingcomputer.com/

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

North Korean hackers use new macOS malware against crypto firms

  • North Korean threat actor BlueNoroff has been targeting crypto-related businesses with a new multi-stage malware for macOS systems.

  • Microsoft Office
     

Replace your Microsoft Office subscription with a lifetime license in this deal

  • Microsoft Office Pro 2021 has a lifetime license that comes with slightly older versions of apps like Word, Excel, and PowerPoint, but it's still equipped for work, school, or home management, and it's only $69.97 (reg. $219 in this deal.

    • BLEEPINGCOMPUTER DEALS
    •  
    • NOVEMBER 07, 2024
    •  
    • 02:06 PM
    •  
    • Comment Count 0
  • Palo Alto Networks
     

CISA warns of critical Palo Alto Networks bug exploited in attacks

  • Today, CISA warned that attackers are exploiting a critical missing authentication vulnerability in Palo Alto Networks Expedition, a migration tool that can help convert firewall configuration from Checkpoint, Cisco, and other vendors to PAN-OS.

  • Nokia
     

Nokia says hackers leaked third-party app source code

  • Nokia's investigation of recent claims of a data breach found that the source code leaked on a hacker forum belongs to a third party and company and customer data has not been impacted.

  • TikTok
     

Canada orders TikTok to shut down over national risk concerns

  • The Canadian government has ordered the dissolution of TikTok Technology Canada following a multi-step review that provided information and evidence of the social media company posing a national risk.

  • HPE
     

HPE warns of critical RCE flaws in Aruba Networking access points

  • Hewlett Packard Enterprise (HPE) released updates for Instant AOS-8 and AOS-10 software to address two critical vulnerabilities in Aruba Networking Access Points.

  • Lifetime access to 1TB Koofr cloud storage for $120 with no recurring fees
     

Lifetime access to 1TB Koofr cloud storage for $120 with no recurring fees

  • With this Koofr deal, you'll have enough space to store up to 250,000 high-resolution photos, 500 hours of HD video, or even millions of pages of documents—all accessible whenever you need them for $119.97 (reg. $810) while supplies last.

    • BLEEPINGCOMPUTER DEALS
    •  
    • NOVEMBER 07, 2024
    •  
    • 07:16 AM
    •  
    • Comment Count 0
  • Hacker
     

Hackers increasingly use Winos4.0 post-exploitation kit in attacks

  • Hackers are increasingly targeting Windows users with the malicious Winos4.0 framework, distributed via seemingly benign game-related apps.

  • AI robot Windows 11
     

Microsoft Notepad to get AI-powered rewriting tool on Windows 11

  • Microsoft has started testing AI-powered Notepad text rewriting and Paint image generation tools four decades after the two programs were released in the 1980s.

  • Cisco
     

Cisco bug lets hackers run commands as root on UWRB access points

  • Cisco has fixed a maximum severity vulnerability that allows attackers to run commands with root privileges on vulnerable Ultra-Reliable Wireless Backhaul (URWB) access points that provide connectivity for industrial wireless automation.

  • Cybersecurity Lock World
     

This $40 course bundle gives you on training in ethical hacking

  • The How to Hack From Beginner to Ethical Hacking Certification Bundle comes with 161 hours of training spread across eight courses. It's your chance to get hands-on experience with tools like Kali Linux and Wireshark while also mastering SQL injection and keylogger creation, and it's on sale for $39.99 (reg. $144). 

    • BLEEPINGCOMPUTER DEALS
    •  
    • NOVEMBER 06, 2024
    •  
    • 02:09 PM
    •  
    • Comment Count 0
  • SteelFox
     

New SteelFox malware hijacks Windows PCs using vulnerable driver

  • A new malicious package called 'SteelFox' mines for cryptocurrency and steals credit card data by using the "bring your own vulnerable driver" technique to get SYSTEM privileges on Windows machines.

  • Court gavel
     

Washington courts' systems offline following weekend cyberattack

  • ​​Court systems across Washington state have been down since Sunday when officials said "unauthorized activity" was detected on their networks.

  • Hacking security Cybersecurity
     

Germany drafts law to protect researchers who find security flaws

  • The Federal Ministry of Justice in Germany has drafted a law to provide legal protection to security researchers who discover and responsibly report security vulnerabilities to vendors.

  • Affordable & eco-friendly refurbed laptop for everyday use — 30% off now
     

Affordable & eco-friendly refurbed laptop for everyday use — 30% off now

  • The ASUS VivoBook Go 15.6" laptop offers just that: efficiency and portability designed for real-life productivity. Get this refurbished ASUS Vivobook Go 15.6" Laptop for $174.99 (reg. $249)

    • BLEEPINGCOMPUTER DEALS
    •  
    • NOVEMBER 06, 2024
    •  
    • 07:10 AM
    •  
    • Comment Count 1
  • Google Cloud
     

Google Cloud to make MFA mandatory by the end of 2025

  • Google has announced that multi-factor authentication (MFA) will be mandatory on all Cloud accounts by the end of 2025 to enhance security.

  • Identity Cybersecurity Framework passwords authentication
     

Future IT workers can learn ethical hacking in this $50 bundle

  • If you're looking for a place to start your cybersecurity education, the Complete 2024 Penetration Testing and Ethical Hacking Certification Training Bundle is a great start, and it's only $49.99 (reg. $351) for lifetime access. 

    • BLEEPINGCOMPUTER DEALS
    •  
    • NOVEMBER 05, 2024
    •  
    • 02:09 PM
    •  
    • Comment Count 0
  • Police arrest
     

Interpol disrupts cybercrime activity on 22,000 IP addresses, arrests 41

  • Interpol announced it arrested 41 individuals and taken down 1,037 servers and infrastructure running on 22,000 IP addresses facilitating cybercrime in an international law enforcement action titled Operation Synergia II.

  • Election Vote
     

US warns of last-minute Iranian and Russian election influence ops

  • The U.S. Cybersecurity & Infrastructure Security Agency is warning about last-minute influence operations conducted by Iranian and Russian actors to undermine the public trust in the integrity and fairness of the upcoming presidential election.

  • Hacker
     

Suspect behind Snowflake data-theft attacks arrested in Canada

  • Canadian authorities have arrested a man suspected of having stolen the data of hundreds of millions after targeting over 165 organizations, all of them customers of cloud storage company Snowflake.

VIEW MORE

No comments:

Post a Comment

Please leave a comment about our recent post.

ZDNet | Security.

"It's official:  All your Office apps are getting AI and a price increase." Views expressed in this cybersecurity, cyber crime...