BleepingComputer.com-Cybersecurity News

"Fake Google Chrome errors trick you into running malicious PowerShell scripts."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 18 June 2024, 1333 UTC.

Content and Source:  https://www.bleepingcomputer.com/

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

LATEST ARTICLES

Save $170 on the full Microsoft Office 2021 suite for Windows

  • Whether you're updating your personal laptop or refurbishing your old one, Microsoft Office is a must-own. Get the complete 2021 version of Microsoft Office Professional for Windows for $49.97, $170 off the $219 MSRP, now through 11:59PM PST on June 26th and with no coupon required.

    • BLEEPINGCOMPUTER DEALS
      •  
    • JUNE 18, 2024
      •  
    • 07:19 AM
      •  
    • Comment Count 0
  • Chrome flare
     
    SECURITY

Fake Google Chrome errors trick you into running malicious PowerShell scripts

  • A new malware distribution campaign uses fake Google Chrome, Word, and OneDrive errors to trick users into running malicious PowerShell "fixes" that install malware.

  • Panera
     
    SECURITY

Panera Bread likely paid a ransom in March ransomware attack

  • Panera Bread, an American chain of fast food restaurants, most likely paid a ransom after being hit by a ransomware attack, suggests language used an internal email sent to employees.

  • Shop
     
    LEGAL

Empire Market owners charged for enabling $430M in dark web transactions

  • Two men have been charged in a Chicago federal court for operating "Empire Market," a dark web marketplace that facilitated over $430 million in illegal transactions between February 2018 and August 2020.

  • hacker shh
     
    SECURITY

Hackers use F5 BIG-IP malware to stealthily steal data for years

  • A group of suspected Chinese cyberespionage actors named 'Velvet Ant' are deploying custom malware on F5 BIG-IP appliances to gain a persistent connection to the internal network and steal data.

  • Spider
     
    LEGAL, SECURITY

Alleged Scattered Spider sim-swapper arrested in Spain

  • A 22-year-old British national allegedly linked to the Scattered Spider hacking group and responsible for attacks on 45 U.S. companies has been arrested in Palma de Mallorca, Spain.

  • Cybersecurity ethical hacking penetration testing
     
    DEALS

Learn ethical hacking from scratch with $141 off this training bundle

  • Cybersecurity is growing in demand as more technologies arrive and more threats are uncovered. Start building your ethical hacking skill set with these nine digital security courses for $29.99, $141 off the $171 MSRP.

    • BLEEPINGCOMPUTER DEALS
      •  
    • JUNE 17, 2024
      •  
    • 07:11 AM
      •  
    • Comment Count 0
  • ARM
     
    SECURITY, HARDWARE

New ARM 'TIKTAG' attack impacts Google Chrome, Linux systems

  • A new speculative execution attack named "TIKTAG" targets ARM's Memory Tagging Extension (MTE) to leak data with over a 95% chance of success, allowing hackers to bypass the security feature.

  • Hacker Cybersecurity
     
    DEALS

Get certified in ethical hacking with $100 off this training bundle

  • Ethical hacking stops breaches and other problems before they happen. This eight-course white-hat hacking bundle shows you ethical hacking strategies for $59.99, $100 off the $160 MSRP.

    • BLEEPINGCOMPUTER DEALS
      •  
    • JUNE 16, 2024
      •  
    • 08:16 AM
      •  
    • Comment Count 0
  • Hacker Emoji
     
    SECURITY, LINUX

New Linux malware is controlled through emojis sent from Discord

  • A newly discovered Linux malware dubbed 'DISGOMOJI' uses the novel approach of utilizing emojis to execute commands on infected devices in attacks on government agencies in India.

  • ASUS
     
    SECURITY, HARDWARE

ASUS warns of critical remote authentication bypass on 7 routers

  • ASUS has released a new firmware update that addresses a vulnerability impacting seven router models that allow remote attackers to log in to devices.

  • Outlook
     
    SECURITY

Microsoft: New Outlook security changes coming to personal accounts

  • Microsoft has announced new cybersecurity enhancements for Outlook personal email accounts as part of its 'Secure Future Initiative,' including the deprecation of basic authentication (username + password) by September 16, 2024.

  • Microsoft Azure
     
    DEALS

Train for Microsoft Azure certifications with $350 off this course bundle

  • Working in IT professionally means working with Microsoft. This 11-course Microsoft certification bundle helps you stay on top of their product line for $79.99, $350 off the $429 MSRP.

    • BLEEPINGCOMPUTER DEALS
      •  
    • JUNE 15, 2024
      •  
    • 08:06 AM
      •  
    • Comment Count 0
  • Keytronic confirms data breach after ransomware gang leaks stolen files
     
    SECURITY

Keytronic confirms data breach after ransomware gang leaks stolen files

  • PCBA manufacturing giant Keytronic is warning it suffered a data breach after the Black Basta ransomware gang leaked 530GB of the company's stolen data two weeks ago.

  • Firefox
     
    SECURITY, SOFTWARE

Mozilla Firefox can now secure access to passwords with device credentials

  • Mozilla Firefox finally allows you to further protect local access to stored credentials in the browser's password manager using your device's login, including a password, fingerprint, pin, or other biometrics

  • Hospital
     
    SECURITY, HEALTHCARE

London hospitals cancel over 800 operations after ransomware attack

  • NHS England revealed today that multiple London hospitals impacted by last week's Synnovis ransomware attack were forced to cancel hundreds of planned operations and appointments.

  • Windows
     
    SECURITY, MICROSOFT

CISA warns of Windows bug exploited in ransomware attacks

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity Windows vulnerability abused in ransomware attacks as a zero-day to its catalog of actively exploited security bugs.

  • Hacker datacenter servers
     
    SECURITY, LEGAL

Former IT employee gets 2.5 years for wiping 180 virtual servers

  • A former quality assurance employee of National Computer Systems (NCS) was sentenced to two years and eight months in prison for reportedly deleting 180 virtual servers after being fired.

  • Copilot Windows
     
    MICROSOFT

Microsoft removes Copilot app ‘incorrectly’ added on Windows PCs

  • Microsoft says it removed a Copilot app that was "incorrectly" added to Windows 10 and Windows 11 systems in April due to buggy Microsoft Edge updates.

  • Spider
     
    SECURITY

Scattered Spider hackers switch focus to cloud apps for data theft

  • The Scattered Spider gang has started to steal data from software-as-a-service (SaaS) applications and establish persistence through creating new virtual machines.

VIEW MORE

Comments

Post a Comment

Please leave a comment about our recent post.

Popular posts from this blog

The Cyberwire Daily Briefing

Image
"Fortinet confirms breach of customer data." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 15 September 2024, 1339 UTC. Content and Source:   https://thecyberwire.com/newsletters/daily-briefing/13/176 Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). V13 | Issue 176 | 9.13.24 Daily Briefing for 09.13.24 Announcement Cloud Security in the Age of Generative AI. Artificial Intelligence is revolutionizing business, but it also introduces new risks. Join us on Wednesday, September 18th at 2pm EDT for a compelling live webinar on "Good vs. Evil: Cloud Security in the Age of Generative AI" with N2K CyberWire’s Dave Bittner and Sysdig’s Loris Degioanni.  Learn more and register now . Summary By the CyberWire staff At a glance. Fortinet confirms breach of customer data. Iran's Scarred Manticore deplo...
Read more

BleepingComputer.com

Image
"Progress LoadMaster vulnerable to 10/10 severity RCE flaw." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 08 September 2024, 1458 UTC. Content and Source:   https://www.bleepingcomputer.com/ Please check link or scroll down to read your selections. Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). Latest Articles   Security Progress LoadMaster vulnerable to 10/10 severity RCE flaw Progress Software has issued an emergency fix for a maximum (10/10) severity vulnerability impacting its LoadMaster and LoadMaster Multi-Tenant (MT) Hypervisor products that allows attackers to remotely execute commands on the device. Bill Toulas   September 08, 2024   10:11 AM     0   Deals Get started learning about cybersecurity with this course bundle deal Take a real step towards a job in information security with this intro to cybersecurity. Get the 2...
Read more

SecurityWeek Briefing

Image
"New RAMBO attack allows air-gapped data theft." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 10 September 2024, 0035 UTC. Content and Source:  https://www.securityweek.com Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net).   Monday, September 9 , 2024 Are you worried about unmanaged devices and apps? LATEST CYBERSECURITY HEADLINES New RAMBO Attack Allows Air-Gapped Data Theft Predator Spyware Resurfaces With Fresh Infrastructure Google Pushes Rust in Legacy Firmware to Tackle Memory Safety Flaws 300,000 Impacted by Data Breach at Car Rental Firm Avis One Million US Kaspersky Customers Transferred to Pango’s UltraAV Two Indicted in US for Running Dark Web Marketplaces Offering Stolen Information Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks CISA Breaks Silence on Controvers...
Read more