Events
Leaderboard
Customer Support

Nastiest Malware 2024

4 hours ago

Home
Community overview
Welcome

Welcome

News, Announcements, Tech Discussions

44700 Topics

Recently active

Most replies Most views Newest first

TripleHelixModerator

posted in Security Industry News

Release notes for Microsoft Edge Security Updates October 17, 2024

Version 130.0.2849.46: October 17, 2024Fixed various bugs and performance issues, Dev channel updates, announcements, feature updates, site compatibility impacting changes, and policy updates. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel#version-1290279289-october-17-2024 More info here: Make sure to re-add back in the Privacy Protection area after every update. Click on GIF to see full size!

12 days ago

TripleHelixModerator

posted in Security Industry News

Volkswagen monitoring data dump threat from 8Base ransomware crew

Wed 16 Oct 2024 // 21:30 UTC The 8Base ransomware crew claims to have stolen a huge data dump of Volkswagen files and is threatening to publish them, but the German car giant appears to be unconcerned.The extortionists, who first came to light in 2022, posted a warning on their dark web page claiming to have detailed files stolen from Volkswagen, amongst others. The group says it has stolen "a huge amount of confidential information," including:Invoices, receipts and accounting documents Personal data and files Employment contracts and certification Confidentiality agreementsThe date for the data release was set for September 26 but so far no data has been made public. It may be that this is a false alarm."The incident is known. The IT infrastructure of the Volkswagen group is not affected. We continue to monitor the situation closely," a spokesperson told French news site LeMagIT, adding that the business "has been aware of this for some time. It is not something new or surprising." F

294

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Hackers blackmail Globe Life after stealing customer data

October 17 2024 By Bill Toulas Insurance giant Globe Life says an unknown threat actor attempted to extort money in exchange for not publishing data stolen from the company's systems earlier this year.Founded in 1900, Globe Life is among the largest providers of life and health insurance plans in the United States, with a market capitalization of $12 billion and a total revenue that exceeds $5.3 billion.Global Life previously disclosed a data breach on June 13 after discovering they had been compromised while reviewing potential vulnerabilities related to access permissions and user identity management for its web portal.At the time, the company warned that the hackers may have accessed consumer and policyholder data following a successful breach of one of the web portals. >>Full Article<<

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Fake Google Meet pages deliver infostealers

October 17 2024 By Zeljka Zorz Users of the Google Meet video communication service have been targeted by cyber crooks using the ClickFix tactic to infect them with information-stealing malware. Fake Google Meet video conference page with malicious ClickFix pop-up (Source: Sekoia)“The ClickFix tactic deceives users into downloading and running malware on their machines without involving a web browser for download or requiring manual file execution,” Sekoia researchers explained.“It makes it possible to bypass web browser security features, such as Google Safe Browsing, and to appear less suspicious to unsuspecting corporate and individual users.” >>Full Article<<

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

BianLian ransomware claims attack on Boston Children's Health Physicians

October 17 2024 By Bill Toulas The BianLian ransomware group has claimed the cyberattack on Boston Children's Health Physicians (BCHP) and threatens to leak stolen files unless a ransom is paid.BHCP is a network of over 300 pediatric physicians and specialists operating over 60 locations across New York's Hudson Valley and Connecticut, offering patient care in clinics, community hospitals, and health centers affiliated with Boston Children's Hospital.According to the announcement BHCP published on its website, a cyberattack compromised its IT vendor on September 6 and a few days later BHCP detected unauthorized activity on its network."On September 6, 2024, our IT vendor informed us that it identified unusual activity in its systems. On September 10, 2024, we detected unauthorized activity on limited parts of the BCHP network and immediately initiated our incident response protocols, including shutting down our systems as a protective measure." - BHCP >>Full Article<<

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

23andMe will retain your genetic information, even if you delete the account

October 17 2024 By Pieter Arntz Deleting your personal data from 23andMe is proving to be hard.There are good reasons for people wanting to delete their data from 23andMe: The DNA testing platform has a lot of problems, so let’s start with a recap.A little over a year ago, cybercriminals put up information belonging to as many as seven million 23andMe customers for sale on criminal forums following a credential stuffing attack against the genomics company.In December 2023, we learned that the attacker was able to directly access the accounts of roughly 0.1% of 23andMe’s users, which is about 14,000 of its 14 million customers. So far not too many people affected, but with the breached accounts at their disposal, the attacker used 23andMe’s opt-in DNA Relatives (DNAR) feature—which matches users with their genetic relatives—to access information about millions of other users.For a subset of these accounts, the stolen data contained health-related information based upon the user’s genet

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Hong Kong Crime Ring Swindles Victims Out of $46M

The scammers used real-time deepfakes in online dating video calls to convince the victims of their legitimacy. October 17 2024 By Dark Reading Staff Hong Kong police arrested 27 people Monday for their involvement in a deepfake scam operation, stealing $46 million from the scam's victims.The scammers used AI face-swapping technology to create female personas for online dating, using tools to alter their appearance and voices. They then contacted their victims via social media platforms using these AI-generated photos of people with made-up personalities, occupations, and backgrounds.However, the victims began requesting video calls to become more familiar with the person they were communicating with, prompting the scammers to turn to real-time deepfakes, which transformed the scammers into attractive women, adding legitimacy to the fraud and gaining the trust of those that were being duped. >>Full Article<<

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

F5 BIG-IP Updates Patch High-Severity Elevation of Privilege Vulnerability

F5 has released patches for a high-severity elevation of privilege vulnerability in BIG-IP and a medium-severity bug in BIG-IQ. October 17 2024 By Ionut Arghire F5 on Wednesday published its October 2024 quarterly security notification, describing two vulnerabilities addressed in BIG-IP and BIG-IQ enterprise products.Updates released for BIG-IP address a high-severity security defect tracked as CVE-2024-45844. Affecting the appliance’s monitor functionality, the bug could allow authenticated attackers to elevate their privileges and make configuration changes.“This vulnerability may allow an authenticated attacker with Manager role privileges or greater, with access to the Configuration utility or TMOS Shell (tmsh), to elevate their privileges and compromise the BIG-IP system. There is no data plane exposure; this is a control plane issue only,” F5 notes in its advisory.The flaw was resolved in BIG-IP versions 17.1.1.4, 16.1.5, and 15.1.10.5. No other F5 application or service is vulne

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

VMware fixes high-severity SQL injection flaw CVE-2024-38814 in HCX

October 17 2024 By Pierluigi Paganini VMware fixes a high-severity SQL injection flaw in HCX allowing non-admin users to remotely execute code on the HCX manager.VMWare warns to address a remote code execution vulnerability, tracked as CVE-2024-38814 (CVSS score of 8.8), in its HCX application mobility platform.The vulnerability is an authenticated SQL injection vulnerability in HCX, it was privately reported to VMware by Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) through the Trend Micro Zero Day Initiative (ZDI). An authenticated user with non-admin rights could use crafted SQL queries to exploit the flaw and execute unauthorized remote code on the HCX manager. >>Full Article<<

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Sudanese Brothers Arrested in ‘AnonSudan’ Takedown

October 17 2024 By Brian Krebs The U.S. government on Wednesday announced the arrest and charging of two Sudanese brothers accused of running Anonymous Sudan (a.k.a. AnonSudan), a cybercrime business known for launching powerful distributed denial-of-service (DDoS) attacks against a range of targets, including dozens of hospitals, news websites and cloud providers. The younger brother is facing charges that could land him life in prison for allegedly seeking to kill people with his attacks.Image: FBIActive since at least January 2023, AnonSudan has been described in media reports as a “hacktivist” group motivated by ideological causes. But in a criminal complaint, the FBI said those high-profile cyberattacks were effectively commercials for the hackers’ DDoS-for-hire service, which they sold to paying customers for as little as $150 a day — with up to 100 attacks allowed per day — or $700 for an entire week.The complaint says despite reports suggesting Anonymous Sudan might be state-sp

13 days ago

TripleHelixModerator

posted in Security Industry News

Alert CISA Adds One Known Exploited Vulnerability to Catalog Release Date October 17, 2024

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2024-40711Veeam Backup and Replication Deserialization VulnerabilityThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timel

13 days ago

TripleHelixModerator

posted in Security Industry News

Alert CISA Releases Seven Industrial Control Systems Advisories Release Date October 17, 2024

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Google warns uBlock Origin and other extensions may be disabled soon

October 13 2024 By Lawrence Abrams Google's Chrome Web Store is now warning that the uBlock Origin ad blocker and other extensions may soon be blocked as part of the company's deprecation of the Manifest V2 extension specification."This extension may soon no longer be supported because it doesn't follow best practices for Chrome extensions," reads the Chrome Web Store page for uBlock Origin.The warning includes a link to a Google support bulletin that states the browser extension may be disabled to protect users' privacy and security."To better protect your privacy and security, Chrome and the Chrome Web Store require extensions to be up-to-date with new requirements," reads Google's support bulletin."With this, Chrome may disable extensions that don't meet these requirements." >>Full Article<<

243

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Brazilian Police Arrest Notorious Hacker USDoD

Brazil’s Federal Police announced the arrest of a hacker whose description matches that of the notorious leaker USDoD. October 17 2024 By Eduard Kovacs Brazil’s Federal Police on Wednesday announced the arrest of a hacker whose description matches that of the notorious leaker known as USDoD. USDoD, aka EquationCorp, has leaked significant amounts of information stolen from major organizations. His targets include the FBI’s InfraGard portal, Airbus, TransUnion, National Public Data (NPD), and CrowdStrike. In some instances, such as in the case of CrowdStrike, the hacker made exaggerated claims, but his leaks still made many headlines in the past few years. In August, CrowdStrike and others independently determined that USDoD is a 33-year-old man identified as Luan B.G. and Luan G from the Brazilian state of Minas Gerais. >>Full Article<<

13 days ago

TripleHelixModerator

posted in Tech Talk

Intel lets go of 2,000 staff at Oregon R&D site, offices in Texas, Arizona, California

Wed 16 Oct 2024 // 22:31 UTC Layoffs follow more than 7,500 voluntary departures, early retirements Intel this week handed out pink slips to more than 2,000 workers across the USAThe latest of these job cuts saw 1,300 people let go at Intel's Hillsboro offices, a crucial research and development hub where many of the chipmaker's next-gen parts get their start.First reported by the Oregonian on Tuesday, the layoffs are part of a massive staffing reduction that Intel announced in August following a disastrous second quarter. The job cuts will see the x86 giant cut 15 percent of its global workforce.The layoffs in Oregon represent a little over five percent of Intel's workforce in the state, which totaled 23,000 employees at the start of the year. However, we'll note this figure may not encompass the full scope of staff reductions hitting the R&D hub. Including staff buyouts and early retirements, the brain drain could be even more substantial. An Intel spokesperson told us the job c

101

13 days ago

TripleHelixModerator

posted in Security Industry News

Code Execution, Data Tampering Flaw in Nvidia NeMo Gen-AI Framework

Artificial intelligence tech giant Nvidia issues a warning for code execution and data tampering security problems in the NeMo platform. October 16, 2024 Artificial intelligence tech giant Nvidia has flagged a major security flaw in its NeMo generative-AI framework, warning that malicious hackers can execute code and tamper with data on systems utilizing the platform. “NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering,” the company said in an advisory.Nvidia tagged the issue as CVE-2024-0129 with a CVSS severity score of 6.3/10. The issue affects the framework on Windows, Linux and MacOS systems. Full Story

13 days ago

TripleHelixModerator

posted in Security Industry News

Couno Offers Expert Cyber Security Consulting Services to Safeguard Businesses Across the UK

10-16-2024 11:22 PM CET Strengthen Your Business Against Cyber Threats with Couno - A Leading Cyber Security ConsultantIn an increasingly digital world, cyber security has become a crucial aspect of business operations, and the rise in cybercrime has heightened the need for robust protection. Couno, a top-rated cyber security consulting company, provides essential services designed to protect businesses from cyber threats. With comprehensive solutions that encompass risk assessment, threat detection, and incident recovery, Couno ensures that businesses stay secure in the face of growing cyber risks.The frequency and complexity of cyber-attacks continue to rise, affecting businesses of all sizes. A recent report by Cybersecurity Ventures predicts that global cybercrime costs will reach $10.5 trillion annually by 2025, while 39% of UK businesses reported a cyber-attack in the past year. These figures demonstrate the urgent need for expert-led cyber security measures.Couno recognizes that

13 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Finnish Customs dismantled the dark web drugs market Sipulitie

October 16 2024 By Pierluigi Paganini Finnish Customs shut down the Tor darknet marketplace Sipulitie and seized the servers hosting the platform.Finnish Customs, with the help of Europol, Swedish and Polish law enforcement authorities and researchers at Bitdefender, shut down the Tor marketplace Sipulitie.“Finnish customs has closed the web servers of the Sipulitie marketplace, which has been operating on the Tor network since 2023, in cooperation with the Swedish police, and confiscated their contents. The site was used for criminal purposes, such as selling narcotics anonymously.” reads the Finnish Customs’s announcement.The darknet market has been active since February 2023, it was used by criminals to sell narcotics anonymously. >>Full Article<<

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

US disrupts Anonymous Sudan DDoS operation, indicts 2 Sudanese brothers

October 16 2024 By Lawrence Abrams The United States Department of Justice unsealed an indictment today against two Sudanese brothers suspected of being the operators of Anonymous Sudan, a notorious and dangerous hacktivist group known for conducting over 35,000 DDoS attacks in a year.Since launching in 2023, Anonymous Sudan has been behind numerous high-profile DDoS attacks, causing widespread outages and the inability for users worldwide to access targeted services. Many of their attacks were motivated by pro-Russian and pro-Palestinian causes, based on messages on the operation's Telegram channel.These attacks impacted well-known companies and services, including tech giants like Cloudflare, Microsoft, and OpenAI, with the threat actors capable of overloading services and making them inaccessible. >>Full Article<<

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

“Nudify” deepfake bots remove clothes from victims in minutes, and millions are using them

October 16 2024 By Pieter Arntz Millions of people are turning normal pictures into nude images, and it can be done in minutes.Journalists at Wired found at least 50 “nudify” bots on Telegram that claim to create explicit photos or videos of people with only a couple of clicks. Combined, these bots have millions of monthly users. Although there is no sure way to find out how many unique users that are, it’s appalling, and highly likely there are much more than those they found.The history of nonconsensual intimate image (NCII) abuse—as the use of explicit deepfakes without consent is often called—started near the end of 2017. Motherboard (now Vice) found an online video in which the face of Gal Gadot had been superimposed on an existing pornographic video to make it appear that the actress was engaged in the acts depicted. The username of the person that claimed to be responsible for this video resulted in the name “deepfake.”Since then, deepfakes have gone through many developments.

121

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Hybrid Work Exposes New Vulnerabilities in Print Security

The shift to a distributed work model has exposed organizations to new threats, and a low but continuing stream of printer-related vulnerabilities isn't helping. October 16 2024 By Jai Vijayan The shift to hybrid work models has exposed new vulnerabilities in corporate print infrastructure and heightened security risks at many organizations.The risks run the gamut and include employees using insecure and unmanaged printers, remote workers sending print jobs over public networks, inadequate user authentication and print job release processes, exposed local spools and caches, and inconsistent patching practices.A relatively low but steady volume of print-related vulnerabilities have exacerbated these issues. Recent examples of such vulnerabilities include CVE-2024-38199 (a remote code execution [RCE] vulnerability in the Windows or Line Printer Daemon [LPD] Service), CVE-2024-21433 (a Windows Print Spooler elevation of privilege vulnerability), and CVE-2024-43529 (a similar vulnerability

14 days ago

TripleHelixModerator

posted in Security Industry News

Alert CISA and FBI Release Joint Guidance on Product Security Bad Practices for Public Comment Release Date October 16, 2024

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Malicious ads exploited Internet Explorer zero day to drop malware

October 16 2024 By Bill Toulas The North Korean hacking group ScarCruft launched a large-scale attack in May that leveraged an Internet Explorer zero-day flaw to infect targets with the RokRAT malware and exfiltrate data.ScarCruft (aka "APT37" or "RedEyes") is a state-sponsored cyber-espionage threat actor known for targeting systems in South Korea and Europe, as well as North Korean human rights activists and defectors, using phishing, watering hole, and Internet Explorer zero-days.A new joint report by South Korea's National Cyber Security Center (NCSC) and AhnLab (ASEC) outlines a recent ScarCruft campaign dubbed "Code on Toast," which leveraged toast pop-up ads to perform zero-click malware infections.The flaw used in zero-day attacks is tracked as CVE-2024-38178 and is a high-severity type confusion flaw in Internet Explorer.ASEC and NCSC, responding to the campaign, informed Microsoft immediately, and the tech giant released a security update to address CVE-2024-39178 in August 2

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Varsity Brands Data Breach Impacts 65,000 People

Apparel giant Varsity Brands has disclosed some information about a data breach impacting more than 65,000 individuals. October 16 2024 By Eduard Kovacs Apparel giant Varsity Brands this week disclosed a data breach impacting a significant number of individuals. Varsity provides uniforms, apparel and services for sports teams, schools, and student-athletes. The company was recently acquired by investment firm KKR, reportedly for $4.75 billion.Varsity informed the Maine Attorney General’s Office this week that it detected “unusual activity” on its systems in May 2024. “Upon detection, we promptly took steps to stop the activity and took certain systems offline. An investigation was launched with assistance from external cybersecurity experts. We also notified law enforcement,” Varsity said in a letter sent to impacted individuals. >>Full Article<<

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Sidewinder Casts Wide Geographic Net in Latest Attack Spree

The long-active, India-sponsored cyber-threat group targeted multiple entities across Asia, Africa, the Middle East, and even Europe in a recent attack wave that demonstrated the use of a previously unknown post-exploit tool called StealerBot. October 16 2024 By Elizabeth Montalbano The elusive, India-based advanced persistent threat (APT) group SideWinder has unleashed a new flurry of attacks against high-profile entities and strategic infrastructure targets that span numerous countries in Asia, the Middle East, Africa, and even Europe, signaling an expansion of its geographic reach. The attacks also show the group is using an advanced post-exploitation toolkit dubbed "StealerBot" to further its cyber-espionage activity, researchers have found.The state-sponsored group — active since 2012, publicly outed in 2018, and mainly known for attacking rivals in Pakistan, Afghanistan, China, and Nepal — has demonstrated a widening of its geographic scope in the last six months. The latest at

14 days ago

1
2
3
4
5
6
7
8
...
1788

Page 5 / 1788

Badges

pierrequiroulehas earned the badge Beta To The Max
Daves Big Machas earned the badge Bear Bell (Tech Talk Badge)
russell.harrishas earned the badge Product Help: Posted 50 comments!
JAQ-PChas earned the badge Beta To The Max
tmcmullenhas earned the badge News: Posted 50 comments!

Show all badges

Join the Conversation

Tweets by Webroot

Terms & Conditions

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.