Hawaii Cybersecurity Journal: BleepingComputer: Latest Cybersecurity News

Showing posts with label BleepingComputer: Latest Cybersecurity News. Show all posts

Showing posts with label BleepingComputer: Latest Cybersecurity News. Show all posts

Thursday, April 27, 2023

BleepingComputer.com: Latest Cybersecurity News

"Clop, Lockbit ransomware group behind PaperCut server attacks."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 27 April 2023, 1350 UTC. Content provided by "BleepingComputer.com."

Source: https://www.bleepingcomputer.com/ ("BleepingComputer.com).

Please click link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

LATEST ARTICLES

SECURITY
Clop, LockBit ransomware gangs behind PaperCut server attacks
Microsoft has attributed recent attacks on PaperCut servers to the Clop and LockBit ransomware operations, which used the vulnerabilities to steal corporate data.
- LAWRENCE ABRAMS
- APRIL 26, 2023
- 07:28 PM
- 0
SECURITY, LEGAL
Ukrainian arrested for selling data of 300M people to Russians
The Ukrainian cyber police have arrested a 36-year-old man from the city of Netishyn for selling the personal data and sensitive information of over 300 million people, citizens of Ukraine, and various European countries.
- BILL TOULAS
- APRIL 26, 2023
- 05:35 PM
- 2
GOOGLE, SECURITY
Google will add End-to-End encryption to Google Authenticator
Google is bringing end-to-end encryption to Google Authenticator cloud backups after researchers warned users against synchronizing 2FA codes with their Google accounts.
- LAWRENCE ABRAMS
- APRIL 26, 2023
- 05:11 PM
- 2
SECURITY
PrestaShop fixes bug that lets any backend user delete databases
The open-source e-commerce platform PrestaShop has released a new version that addresses a critical-severity vulnerability allowing any back-office user to write, update, or delete SQL databases regardless of their permissions.
- BILL TOULAS
- APRIL 26, 2023
- 03:30 PM
- 0
SECURITY
Cisco discloses XSS zero-day flaw in server management tool
Cisco disclosed today a zero-day vulnerability in the company's Prime Collaboration Deployment (PCD) software that can be exploited for cross-site scripting attacks.
- SERGIU GATLAN
- APRIL 26, 2023
- 02:51 PM
- 0
SECURITY
Tencent QQ users hacked in mysterious malware attack, says ESET
The Chinese APT hacking group known as 'Evasive Panda' are behind a mysterious attack that distributed the MsgBot malware as part of an automatic update for the Tencent QQ messaging app.
- BILL TOULAS
- APRIL 26, 2023
- 02:16 PM
- 0
SECURITY
Google disrupts the CryptBot info-stealing malware operation
Google is taking down malware infrastructure linked to the Cryptbot info stealer after suing those using it to infect Google Chrome users and steal their data.
- SERGIU GATLAN
- APRIL 26, 2023
- 12:46 PM
- 0
SECURITY
Thousands of Apache Superset servers exposed to RCE attacks
Apache Superset is vulnerable to authentication bypass and remote code execution at default configurations, allowing attackers to potentially access and modify data, harvest credentials, and execute commands.
- BILL TOULAS
- APRIL 26, 2023
- 11:52 AM
- 0
MICROSOFT
Microsoft rolls out Phone Link for iOS to all Windows 11 users
Microsoft is rolling out Phone Link for iOS to all Windows 11 and iPhone users, with the rollout expected to complete by mid-May.
- SERGIU GATLAN
- APRIL 26, 2023
- 11:44 AM
- 0
MICROSOFT
Microsoft removes LSA Protection from Windows settings to fix bug
Microsoft has fixed a known issue triggering Windows Security warnings that Local Security Authority (LSA) Protection is off by removing the feature's UI from settings.
- SERGIU GATLAN
- APRIL 26, 2023
- 11:27 AM
- 1
SECURITY
Chinese hackers use new Linux malware variants for espionage
Hackers are deploying new Linux malware variants in cyberespionage attacks, such as a new PingPull variant and a previously undocumented backdoor tracked as 'Sword2033.'
- BILL TOULAS
- APRIL 26, 2023
- 06:00 AM
- 1
MICROSOFT
New Microsoft 365 outage causes Exchange Online connectivity issues
Microsoft is investigating ongoing Microsoft 365 issues preventing some Exchange Online customers from accessing their mailboxes.
- SERGIU GATLAN
- APRIL 25, 2023
- 04:47 PM
- 2
SECURITY
VMware fixes critical zero-day exploit chain used at Pwn2Own
VMware has released security updates to address zero-day vulnerabilities that could be chained to gain code execution systems running unpatched versions of the company's Workstation and Fusion software hypervisors.
- SERGIU GATLAN
- APRIL 25, 2023
- 02:33 PM
- 0
MICROSOFT
Windows 10 KB5025297 preview update released with 10 fixes
Microsoft has released the optional KB5025297 Preview cumulative update for Windows 10 22H2, with eighteen fixes or changes.
- LAWRENCE ABRAMS
- APRIL 25, 2023
- 02:26 PM
- 0
MICROSOFT
Windows 11 KB5025305 adds prioritized Windows updates setting
Microsoft has released the optional April 2023 non-security cumulative updates for all editions of Windows 11 22H2 with a new option to prioritize non-security and feature Windows updates.
- SERGIU GATLAN
- APRIL 25, 2023
- 01:44 PM
- 0
SECURITY, HARDWARE
New SLP bug can lead to massive 2,200x DDoS amplification attacks
A new reflective Denial-of-Service (DoS) amplification vulnerability in the Service Location Protocol (SLP) allows threat actors to launch massive denial-of-service attacks with 2,200X amplification.
- BILL TOULAS
- APRIL 25, 2023
- 11:26 AM
- 0

1
2
3
4
5

Saturday, April 22, 2023

BleepingComputer.com: Latest cybersecurity news

"GitHub now allows enabling private vulnerability reporting at scale."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 22 April 2023, 2058 UTC. Content provided by "BleepingComputer.com."

Source: https://www.bleepingcomputer.com/ ("BleepingComputer.com").

Please click link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

LATEST ARTICLES

SECURITY
GitHub now allows enabling private vulnerability reporting at scale
GitHub announced that private vulnerability reporting is now generally available and can be enabled at scale, on all repositories belonging to an organization.
- SERGIU GATLAN
- APRIL 22, 2023
- 12:18 PM
- 0
SECURITY
EvilExtractor malware activity spikes in Europe and the U.S.
Researchers are seeing a rise in attacks spreading the EvilExtractor data theft tool, used to steal users' sensitive data in Europe and the U.S.
- BILL TOULAS
- APRIL 22, 2023
- 11:14 AM
- 0
SECURITY
Google ads push BumbleBee malware used by ransomware gangs
The enterprise-targeting Bumblebee malware is distributed through Google Ads and SEO poisoning that promote popular software like Zoom, Cisco AnyConnect, ChatGPT, and Citrix Workspace.
- BILL TOULAS
- APRIL 22, 2023
- 10:08 AM
- 0
SECURITY
The Week in Ransomware - April 21st 2023 - Macs in the Crosshairs
A lot of news broke this week related to ransomware, with the discovery of LockBit testing macOS encryptors to an outage on NCR, causing massive headaches for restaurants.
- LAWRENCE ABRAMS
- APRIL 21, 2023
- 06:39 PM
- 0
SECURITY
Critical infrastructure also hit by supply chain attack behind 3CX breach
The X_Trader software supply chain attack that led to last month's 3CX breach has also impacted at least several critical infrastructure organizations in the United States and Europe, according to Symantec's Threat Hunter Team.
- SERGIU GATLAN
- APRIL 21, 2023
- 03:26 PM
- 4
SECURITY
GhostToken GCP flaw let attackers backdoor Google accounts
Google has addressed a Cloud Platform (GCP) security vulnerability impacting all users and allowing attackers to backdoor their accounts using malicious OAuth applications installed from the Google Marketplace or third-party providers.
- SERGIU GATLAN
- APRIL 21, 2023
- 01:50 PM
- 0
SECURITY, CLOUD
Kubernetes RBAC abused to create persistent cluster backdoors
Hackers use a novel method involving RBAC (Role-Based Access Control) to create persistent backdoor accounts on Kubernetes clusters and hijack their resources for Monero crypto-mining.
- BILL TOULAS
- APRIL 21, 2023
- 11:35 AM
- 0
SECURITY, LEGAL
American Bar Association data breach hits 1.4 million members
The American Bar Association (ABA) has suffered a data breach after hackers compromised its network and gained access to older credentials for 1,466,000 members.
- LAWRENCE ABRAMS
- APRIL 21, 2023
- 09:56 AM
- 0
SECURITY
University websites using MediaWiki, TWiki hacked to serve Fortnite spam
Websites of multiple U.S. universities are serving Fortnite and 'gift card' spam. Researchers observed Wiki and documentation pages being hosted by universities including Stanford, MIT, Berkeley, UMass Amherst, Northeastern, Caltech, among others, were compromised.
- AX SHARMA
- APRIL 21, 2023
- 04:35 AM
- 0
SECURITY
Attackers use abandoned WordPress plugin to backdoor websites
Attackers are using Eval PHP, an outdated legitimate WordPress plugin, to compromise websites by injecting stealthy backdoors.
- BILL TOULAS
- APRIL 20, 2023
- 04:02 PM
- 0
SECURITY
Google: Ukraine targeted by 60% of Russian phishing attacks in 2023
Google's Threat Analysis Group (TAG) has been monitoring and disrupting Russian state-backed cyberattacks targeting Ukraine's critical infrastructure in 2023.
- BILL TOULAS
- APRIL 20, 2023
- 02:47 PM
- 0
SECURITY
VMware fixes vRealize bug that let attackers run code as root
VMware addressed a critical vRealize Log Insight security vulnerability that allows remote attackers to gain remote execution on vulnerable appliances.
- SERGIU GATLAN
- APRIL 20, 2023
- 01:22 PM
- 0
SECURITY, LINUX
Lazarus hackers now push Linux malware via fake job offers
A new Lazarus campaign considered part of "Operation DreamJob" has been discovered targeting Linux users with malware for the first time.
- BILL TOULAS
- APRIL 20, 2023
- 11:43 AM
- 0
MICROSOFT
Microsoft 365 outage blocks access to web apps and services
Microsoft is investigating an ongoing outage blocking customers worldwide from accessing and using web apps and online services.
- SERGIU GATLAN
- APRIL 20, 2023
- 10:24 AM
- 2
SECURITY
Capita confirms hackers stole data in recent cyberattack
London-based professional outsourcing giant Capita has published an update on the cyber-incident that impacted it at the start of the month, now admitting that hackers exfiltrated data from its systems.
- BILL TOULAS
- APRIL 20, 2023
- 09:48 AM
- 0
SECURITY
3CX hack caused by trading software supply chain attack
An investigation into last month's 3CX supply chain attack discovered that it was caused by another supply chain compromise where suspected North Korean attackers breached the site of stock trading automation company Trading Technologies to push trojanized software builds.
- SERGIU GATLAN
- APRIL 20, 2023
- 08:00 AM
- 4
MICROSOFT, SECURITY
Microsoft Defender update causes Windows Hardware Stack Protection mess
In a confusing mess, a recent Microsoft Defender update rolled out a new security feature called 'Kernel-mode Hardware-enforced Stack Protection,' while removing the LSA protection feature. Unfortunately, Microsoft has not provided any documentation on this change, leading to more questions than answers.
- LAWRENCE ABRAMS
- APRIL 19, 2023
- 05:57 PM
- 1

1
2
3
4
5

Subscribe to: Posts (Atom)