06 Oct Chrome 86 rolls out with massive user security enhancements Google has released Chrome 86 today, October 6th, 2020, to the Stable desktop channel, and it includes numerous security enhancements, features, and APIs for developers. […]
05 Oct Microsoft: Iranian hackers actively exploiting Windows Zerologon flaw Microsoft today warned that the Iranian-backed MuddyWater cyber-espionage group was observed using ZeroLogon exploits in multiple attacks during the last two weeks. […]
05 Oct Hacker group compromises mobile provider to steal credit cards Credit card skimming group Fullz House has compromised and injected the website of US mobile virtual network operator (MVNO) Boom! Mobile with a credit card stealer script. […]
05 Oct MosaicRegressor: Second-ever UEFI rootkit found in the wild The second-ever UEFI rootkit used in the wild was found by security researchers during investigations surrounding attacks from 2019 against two non-governmental organizations (NGOs). […]
04 Oct New ransomware vaccine kills programs wiping Windows shadow volumes A new ransomware vaccine program has been created that terminates processes that try to delete volume shadow copies using Microsoft’s vssadmin.exe program, […]
03 Oct Online avatar service Gravatar allows mass collection of user info A user enumeration method discovered by an Italian security researcher Carlo Di Dato demonstrates how can Gravatar data be easily scraped by web crawlers and bots. […]
03 Oct New Jersey hospital paid ransomware gang $670K to prevent data leak University Hospital New Jersey in Newark, New Jersey, paid a $670,000 ransomware demand this month to prevent the publishing of 240 GB of stolen data, including patient info. […]
02 Oct The Week in Ransomware – October 2nd 2020 – Healthcare under attack This week started with a bang as a large hospital chain was hit by a ransomware attack that disrupted the healthcare industry. […]
02 Oct Grindr fixed a bug allowing full takeover of any user account Grindr has fixed a security flaw that could have allowed attackers to easily hijack any Grindr account if they knew the user’s email address. […]
02 Oct Google now discloses Android vulnerabilities for 3rd-party devices Google today announced the launch of a new program specifically designed to deal with security vulnerabilities the company finds in devices and software serviced by Android OEMs. […]