Blog - Page 543 of 940

US Congress asks FBI to explain delay in helping Kaseya atack victims

The House Committee on Oversight and Reform has requested a briefing to understand the rationale behind FBI’s decision to delay providing the victims of the Kaseya REvil ransomware with an universal decryption key for three weeks. […]

30 Sep

Apple Pay with VISA lets hackers force payments on locked iPhones

Academic researchers have found a way to make fraudulent payments using Apple Pay from a locked iPhone with a Visa card in the digital wallet set as a transit card. […]

29 Sep

Facebook open-sources tool to find Android app security flaws

Facebook today open-sourced a static analysis tool its software and security engineers use internally to find potentially dangerous security and privacy flaws in the company’s Android and Java applications. […]

28 Sep

Windows 11’s Store is now open to third-party app stores

With Windows 11, Microsoft has opened up its store to developers using different types of frameworks, packaging technologies, and commerce platforms. Ahead of Windows 11’s October 5 rollout, Microsoft has confirmed that its new app store will also support third-party app stores like Amazon AppStore and Epic Store. […]

28 Sep

NSA, CISA share VPN security tips to defend against hackers (edited)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have released guidance for hardening the security of virtual private network (VPN) solutions. […]

28 Sep

FinFisher malware hijacks Windows Boot Manager with UEFI bootkit

Commercially developed FinFisher malware now can infect Windows devices using a UEFI bootkit that it injects in the Windows Boot Manager. […]

28 Sep

Twitter web client outage forces users to log out, blocks logins

Twitter is experiencing a worldwide outage affecting their web platform that prompts users to logout and prevents them from accessing tweets. […]

28 Sep

Microsoft 365 MFA outage locks users out of their accounts

Microsoft is investigating an ongoing Multi-Factor Authentication (MFA) issue preventing some customers from logging into their Microsoft 365 accounts. […]

28 Sep

New Microsoft Exchange service mitigates high-risk bugs automatically

Microsoft has added a new Exchange Server feature that automatically applies interim mitigations for high-risk (and likely actively exploited) security flaws to secure on-premises servers against incoming attacks and give admins more time to apply security updates. […]

28 Sep

Working exploit released for VMware vCenter CVE-2021-22005 bug

A complete exploit for the remote code execution vulnerability in VMware vCenter tracked as CVE-2021-22005 is now widely available, and threat actors are taking advantage of it. […]