security Archives - Page 257 of 739

FBI investigates data breach impacting U.S. House members and staff

The FBI is investigating a data breach affecting U.S. House of Representatives members and staff after their account and personal information was stolen from DC Health Link’s servers. […]

08 Mar

Bitwarden flaw can let hackers steal passwords using iframes

Bitwarden’s credentials autofill feature contains a risky behavior that could allow malicious iframes embedded in trusted websites to steal people’s credentials and send them to an attacker. […]

08 Mar

Microsoft enables LSA protection by default in Windows Canary build

Microsoft says the latest Windows 11 build that is rolling out to Insiders in the Canary channel will try to enable Local Security Authority (LSA) protection by default. […]

08 Mar

Fortinet warns of new critical unauthenticated RCE vulnerability

Fortinet has disclosed a “Critical” vulnerability impacting FortiOS and FortiProxy, which allows an unauthenticated attacker to execute arbitrary code or perform denial of service (DoS) on the GUI of vulnerable devices using specially crafted requests. […]

07 Mar

New malware variant has “radio silence” mode to evade detection

The Sharp Panda cyber-espionage hacking group was observed targeting high-profile government entities in Vietnam, Thailand, and Indonesia, using a new version of the ‘Soul’ malware framework. […]

07 Mar

Emotet malware attacks return after three-month break

The Emotet malware operation is again spamming malicious emails as of Tuesday morning after a three-month break, rebuilding its network and infecting devices worldwide. […]

07 Mar

Microsoft Excel now blocking untrusted XLL add-ins by default

Microsoft says the Excel spreadsheet software is now blocking untrusted XLL add-ins by default in Microsoft 365 tenants worldwide. […]

07 Mar

Hospital Clínic de Barcelona severely impacted by ransomware attack

The Hospital Clínic de Barcelona suffered a ransomware attack on Sunday morning, severely disrupting its healthcare services after the institution’s virtual machines were targeted by the attacks. […]

06 Mar

Old Windows ‘Mock Folders’ UAC bypass used to drop malware

A new phishing campaign targets organizations in Eastern European countries with the Remcos RAT malware with aid from an old Windows User Account Control bypass discovered over two years ago. […]

06 Mar

Proof-of-Concept released for critical Microsoft Word RCE bug

A proof-of-concept for CVE-2023-21716, a critical vulnerability in Microsoft Word that allows remote code execution, has been published over the weekend. […]

Tag: security

FBI investigates data breach impacting U.S. House members and staff

Bitwarden flaw can let hackers steal passwords using iframes

Microsoft enables LSA protection by default in Windows Canary build

Fortinet warns of new critical unauthenticated RCE vulnerability

New malware variant has “radio silence” mode to evade detection

Emotet malware attacks return after three-month break

Microsoft Excel now blocking untrusted XLL add-ins by default

Hospital Clínic de Barcelona severely impacted by ransomware attack

Old Windows ‘Mock Folders’ UAC bypass used to drop malware

Proof-of-Concept released for critical Microsoft Word RCE bug