Security News

Discuss the latest breaches and security news

  • 200 Topics
  • 196 Replies

200 Topics

owl-IT
owl-ITPower User
posted in Security News

Google Chrome Zero-day

REF: https://thehackernews.com/2019/11/chrome-zero-day-update.html I do not see yet the updated Google Chrome package version 78.0.3904.87 in Automox … latest is still 78.0.3904.70 … any update when it will show up ? Thank you!

4
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

At least 13 managed service providers were used to push ransomware this year

ZDNet At least 13 managed service providers were used to push ransomware this year... Once hackers compromise an MSP's network, they can use its remote access tools to deploy ransomware to hundreds of companies and thousands of computers. The ransomware was coming from inside the house!

1
dimforest
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Just in time for Halloween: The scariest hacks and vulnerabilities of 2019

ZDNet The scariest hacks and vulnerabilities of 2019 | ZDNet This year's biggest and scariest security incidents, data breaches, and vulnerabilities. Good recap of the year to date - it’s both impressive and scary to see one year’s worth of hacks laid out in one document.

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Ransomware and data breaches linked to uptick in fatal heart attacks

PBS NewsHour – 24 Oct 19 Ransomware and data breaches linked to uptick in fatal heart attacks Another unintended consequence of electronic medical records has been revealed. This surprise result is attributed to the increased delay in accessing medical records after new security procedures are put in place after being hacked. While we all know that security and convenience are always at odds, what would be an acceptable inconvenience in an office means worse outcomes when it comes to medical care.

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Firefox, Chrome Bugs Allow Arbitrary Code-Execution

threatpost.com Critical Firefox Bugs Allow Arbitrary Code-Execution Multiple critical memory safety bugs in Firefox 69 and Firefox ESR 68.1 in particular affect medium and large government entities and enterprises. Patch those browsers!

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

NordVPN and TorGuard confirm data breaches

TechCrunch NordVPN and TorGuard confirm data breaches – TechCrunch NordVPN, a virtual private network provider that promises to “protect your privacy online,” has confirmed it was hacked. The admission comes following rumors that the company had been breached. It first emerged that NordVPN had an expired internal... They don’t keep any activity logs and NordVPN claims it was just the one server that was compromised.

2
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

2.8 million CenturyLink customer records exposed by unprotected database

SC Media – 18 Oct 19 2.8 million CyberLink customer records exposed | SC Media A third-party MongoDB database containing 2.8 million CyberLink customer records and information was left unprotected exposing customer data. They’re claiming just contact info and nothing more sensitive than that, but you should probably change your CenturyLink password(s) just in case.

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Pitney Bowes services disrupted by malware attack

https://maintenance.pb.com/pbcom/outage.html discussion on reddit: reddit r/sysadmin - Pitney Bowes Hit By Malware 0 votes and 25 comments so far on Reddit PB doesn’t yet have an ETA for when full service will be restored.

1
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Adobe Releases Out-of-Band Security Patches for 82 Flaws in Various Products

The Hacker News Adobe Releases Out-of-Band Security Patches for 82 Flaws in Various Products Adobe Releases Out-of-Band Security Patches for 82 Flaws Affecting Various Products, including Adobe Acrobat and Reader, Adobe Experience Manager, Adobe Experience Manager Forms, Adobe Download Manager Time to patch all your Adobe software.

0
Nic-Automox
3 years ago
MSouth47
MSouth47Power User
posted in Security News

Sophos to be bought by Thoma Bravo

databreachtoday.com Thoma Bravo to Buy Sophos for $3.9 Billion Private-equity firm Thoma Bravo, which already has stakes in several cybersecurity companies, plans to buy U.K.-based security company Sophos in a $3.9 billion

1
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Sudo Flaw Lets Linux Users Run Commands As Root Even When They're Restricted

The Hacker News Sudo Flaw Lets Linux Users Run Commands As Root Even When They're Restricted A vulnerability in Sudo, tracked as CVE-2019-14287, could allow Linux users to run commands as root user even when they're restricted. Looks like the use case isn’t common, but still worth updating to close this vulnerability!

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Twitter apologizes for using personal info for advertising

https://help.twitter.com/en/information-and-ads They “accidentally” used your phone number, that you provide for security reasons, to target you for advertising. Reminds me of this great South Park episode:

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Australian National University hacked by phishing email that only requires being previewed to work

10 daily – 2 Oct 19 'State Of The Art' Cyber Attack On Australian Uni Shocks Experts Hackers responsible for cracking the Australian National University's network focused on student information and were so sophisticated that experienced security experts were shocked. They don’t mention which email client they were using, but it appears that just previewing the email was enough to execute the malware that let the hackers into their network. Initial reports blamed China but now they say they don’t have enough info yet to identify where the hack originated from.

1
Nic-Automox
3 years ago
Gavin-Automox
Gavin-AutomoxFormer Automox Employee
posted in Security News

Patch Now: Two New Windows Zero-Days - With a Twist!

If you haven’t seen the news, Windows released patches for two new zero-days, one for IE 9/10/11, and another for Windows Defender. These are severe - the IE issues are being exploited in the wild, the Defender issue can erode security. We covered the details here. In a sad way, that’s good news. The bad news is that Windows isn’t offering the IE patches through Windows Update. Instead, you need to push them manually…for every version, configuration, and processor. Rather than leave you guessing, we made a worklet that you can modify to patch every version one by one. For Evaluation Code, enter the below, changing the KB number for the KB you are targeting: #Define KB Number and check for presence. You need to enter the one specific to your OS version ############################################################################ $kbID = 'Your_KB_Number’ ############################################################################ $installed = Get-Hotfix -Id $kbID -ErrorAction SilentlyCo

8
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Comodo Forums Hack Exposes 245,000 Users' Data — Recent vBulletin 0-day Used

The Hacker News Comodo Forums Hack Exposes 245,000 Users' Data — Recent vBulletin 0-day Used An anonymous hacker exploited recent vBulletin zero-day vulnerability to hack Comodo Forums and steal over 245,000 users' data. They’re using vBulletin, which is a rather ancient community platform: It’s worth noting that Comodo forum was hacked on September 29, almost four days after vBulletin developers released a patch to let administrators address the vulnerability, but the company failed to apply the patches on time. #PatchYourShit

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

How many of you have gotten phishing emails or phone calls from your CEO?

I just got my first one today. I checked my spam folder and found an email purporting to be from our CEO @jay 29%20AM1571×572 39.1 KB Apparently the latest trick is to use deep fake technology to impersonate your CEO’s voice over the phone. Most CEOs have done a lot of public speaking so there’s lots of recordings online for them to train with: ZDNet Forget email: Scammers use CEO voice 'deepfakes' to con workers into wiring... AI-generated audio was used to trick a CEO into wiring $243,000 to a scammer's bank account.

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Former Yahoo engineer pleads guilty to hacking user emails in search for porn

ZDNet Former Yahoo engineer pleads guilty to hacking user emails in search for porn... Former Yahoo engineer accessed about 6,000 email accounts, primarily belonging to young women. He pleaded guilty yesterday to one count of computer intrusion, under which he faces a maximum prison sentence of five years and a fine of up to $250,000. Ruiz’s sentencing is scheduled for February 3, 2020. The former engineer has been released under a $200,000 bond. Ruiz stopped working at Yahoo! in July 2018. He’s currently employed at a Silicon Valley tech company specialized in SSO (single sign-on) solutions. So not only is he still working in tech, he’s now working at a company that specializes in SSO? That’ll give him even more logins to hack into!

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

DoorDash confirms data breach affected 4.9 million customers, workers and merchants

TechCrunch DoorDash confirms data breach affected 4.9 million customers, workers and... DoorDash has confirmed a data breach. The food delivery company said in a blog post Thursday that 4.9 million customers, delivery workers and merchants had their information stolen by hackers. The breach happened on May 4, the company said, but added... Users who joined the platform before April 5, 2018 had their name, email and delivery addresses, order history, phone numbers and hashed and salted passwords stolen. DoorDash is claiming they didn’t make off with any credit card info and blaming the breach on “a third-party service provider." DoorDash probably forgot to tip said service provider 🙂

3
dimforest
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Cisco Patches 13 High-Severity Router and Switch Bugs

threatpost.com Cisco Patches 13 High-Severity Router and Switch Bugs One Cisco bug impacting its 800 and 1000 series routers had a CVSS severity score of 9.9. Cisco Systems released patches for 29 bugs Wednesday that addressed flaws in a wide range of its products including routers and switches running the IOS XE networking software. Thirteen of the vulnerabilities revealed are rated high severity. Make sure you patch your Cisco gear (if you can afford Cisco 🙂 )

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Reddit discussion about an open redirect exploit on Adobe's site

reddit r/sysadmin - Here's a phishing URL to give you nightmares... 714 votes and 110 comments so far on Reddit TL;DR - you can put a phishing URL at the end of a legit Adobe domain and with the right flags it will redirect the user to the phishing URL.

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Windows 10 Security Warning As Microsoft Confirms Update Breaks Windows Defender

Forbes Windows 10 Security Warning As Microsoft Confirms Update Breaks Windows Defender Microsoft has rightly been getting a lot of stick for updates that break, rather than improve, the Windows 10 experience. The latest managed to break Windows Defender. Windows Defender appears to run a scan, but finishes way too quickly and doesn’t actually complete a scan, when you run a scan as Administrator. Microsoft has a fix out already: https://www.microsoft.com/en-us/wdsi/defenderupdates

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

Don't Forget About Legacy Systems

Good article from Forbes around protecting your legacy systems: Forbes Council Post: Don't Forget About Legacy Systems The retention of legacy IT systems comes with a unique set of risks. This stat in particular boggled my mind: In fact, most of the U.S. government’s IT budget is allocated toward protecting its legacy systems. Did you know that we support patching XP systems? How many of you are still having to run ancient technology in your environments?

5
dimforest
3 years ago
TaylorT-Automox
TaylorT-AutomoxAutomox Employee
posted in Security News

WannaCry Detections at an All-Time High

Even though it’s been more than two years since the WannaCry disaster, detection of the malware has reached an all-time high. It’s crazy that the vulnerability remains unpatched on so many systems given how public the event was. Dark Reading WannaCry Detections At An All-Time High More than 12,000 variants of the infamous malware are targeting systems that are still open to the EternalBlue exploit - but the potential danger is low, Sophos warns. Naked Security – 18 Sep 19 WannaCry – the worm that just won’t die WannaCry never went away – it just became less obvious.

1
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

125 New Flaws Found in Routers and NAS Devices from Popular Brands

The Hacker News 125 New Flaws Found in Routers and NAS Devices from Popular Brands Cybersecurity experts discover a total of 125 different security vulnerabilities across 13 small office and home office (SOHO) routers and Network Attached Storage (NAS) devices. Here’s the list of manufacturers who are possibly affected: SOHO routers and NAS devices tested by the researchers are from the following manufacturers: Buffalo Synology TerraMaster Zyxel Drobo ASUS and its subsidiary Asustor Seagate QNAP Lenovo Netgear Xiaomi Zioncom (TOTOLINK)

0
Nic-Automox
3 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Security News

LastPass bug leaks credentials from previous site

ZDNet LastPass bug leaks credentials from previous site | ZDNet LastPass has released a fix last week. Vulnerability details are now public. Users advised to update. There’s a fix out, so make sure you update your LastPass if you’re a customer of theirs!

1
dimforest
3 years ago

Badge winners

Show all badges
Terms & ConditionsCookie settings