01 Sep Hackers breached Norwegian Parliament emails to steal data Attackers have compromised a limited number of email accounts of Norwegian Parliament (Storting) representatives and employees according to Storting’s managing director Marianne Andreassen. […]
01 Sep Google now pays for bugs used to bypass its anti-fraud systems Google today announced that the company’s Vulnerability Reward Program has expanded to also include bug reports on methods threat actors can use to bypass the company’s abuse, fraud, and spam systems. […]
01 Sep Iranian hackers are selling access to corporate networks An Iranian-backed hacker group has been observed while seeking to sell access to compromised corporate networks to other threat actors on underground forums and attempting to exploit F5 BIG-IP devices vulnerable to CVE-2020-5902 exploits. […]
31 Aug Windows 10 2004 now blocked on devices with LTE cellular modems Microsoft has acknowledged another known issue affecting Windows 10 devices with WWAN LTE cellular modems and is now blocking Windows 10, version 2004 from being installed on them until a solution will be available. […]
31 Aug American Payroll Association discloses credit card theft incident The American Payroll Association (APA) disclosed a data breach affecting members and customers after attackers successfully planted a web skimmer on the organization’s website login and online store checkout pages. […]
31 Aug Lenovo warns of Windows 10 2004 crashing ThinkPad laptops Lenovo has issued an advisory warning that Windows 10 2004, the May 2020 Update, can cause BSODs in various ThinkPad laptop models. […]
31 Aug Malware authors trick Apple into trusting malicious Shlayer apps The authors of the Mac malware known as Shlayer have successfully managed to get their malicious payloads through Apple’s automated notarizing process. […]
31 Aug Hackers are backdooring QNAP NAS devices with 3-year old RCE bug Hackers are scanning for vulnerable network-attached storage (NAS) devices running multiple QNAP firmware versions, trying to exploit a remote code execution (RCE) vulnerability addressed by QNAP in a previous release. […]
30 Aug You have two days left to purchase 2-year TLS/SSL certificates If you are looking to purchase a 2-year TLS or SSL certificate, you have only two days left before all new certificates will have a maximum 397 day validity period. […]
30 Aug CenturyLink routing issue led to outages on Hulu, Steam, Discord, more A CenturyLink BGP routing mistake has led to a ripple effect across the Internet that led to outages for numerous Internet-connected services such as Cloudflare, Amazon, Garmin, Steam, Discord, Blizzard, and many more. […]