Lucene search
K
MalwarebytesRecent

4662 matches found

Malwarebytes
Malwarebytes
added 2021/10/07 10:12 a.m.16 views

Google to auto-enrol users, YouTubers into 2SV

Googles announced some changes to how its helping millions of its users stay safe and secure. The biggest of those changes is that it plans to auto-enrol its users in to two-step verification, or 2SV. 2SV adds an extra layer when logging into your account and the additional step happens after you...

7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/06 2:35 p.m.61 views

What special needs kids need to stay safe online

Online safety is hard enough for most adults. We reuse weak passwords, we click on suspicious links, and we love to share sensitive information that should be kept private and secure. Just go back a few months to watch adults gleefully sharing photos of their vaccine cards. The consequences of...

6.9AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/06 2:23 p.m.122 views

[Updated, again] Apache fixes zero-day vulnerability in HTTP Server

The Apache HTTP Server 2.4.49 is vulnerable to a flaw that allows attackers to use a path traversal attack to map URLs to files outside the expected document root. If files outside of the document root are not protected by "require all denied" these requests can succeed. This issue is known to be...

5CVSS9.6AI score0.99992EPSS
Exploits170
Malwarebytes
Malwarebytes
added 2021/10/06 11:57 a.m.29 views

Twitch compromised: What we know so far, and what you need to do

Update, 7th October: Twitch has now confirmed the breach. The companys statement is as follows: We have learned that some data was exposed to the internet due to an error in a Twitch server configuration change that was subsequently accessed by a malicious third party. At this time, we have no...

7.3AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/05 4:21 p.m.19 views

Facebook shoots own foot, hits Instagram and WhatsApp too

Mark Zuckerberg was left counting the personal cost of bad PR yesterday about $6 billion, according to Bloomberg on a day when his company couldnt get out of the news headlines, for all the wrong reasons. The billionaire Facebook CEOs bad day at the office started with whistleblower Frances Hauge...

6.9AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/05 2:22 p.m.20 views

Criminals were inside Syniverse for 5 years before anyone noticed

"A global privacy disaster", "espionage gold", and "a state-sponsored wet dream" are just some of the comments one can read regarding the breach at Syniverse, a key player in the tech/telecommunications industry that calls itself the "center of the connected world." In a filing with the US Securi...

1.7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/05 9:0 a.m.36 views

Windows 11 is out. Is it any good for security?

Windows 11, the latest operating system OS from Microsoft, launches today, and organizations have begun asking themselves when and if they should upgrade from Windows 10 or older versions. The requirements and considerations of each organization will be different, and many things will inform the...

6.8AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/04 7:24 p.m.27 views

Neiman Marcus data breach affects millions

Millions of Neiman Marcus customers have had their personal and financial information exposed in a data breach. In a press release the company confirmed unauthorized access to customer online accounts. According to the press release 4.6 million customers of Neiman Marcus Group stores, specificall...

0.4AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/04 6:11 p.m.32 views

Police take a piece out of a ransomware gang, but won’t say which one

One of the worlds ransomware groups appears to be a couple of members short today—and about two million dollars less rich—but nobody is sure which one. Police are staying tight-lipped about whos short-handed following the arrest of two individuals in Kyiv, Ukraine. The arrests are part of a joint...

6.7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/04 11:4 a.m.30 views

Does Cybersecurity Awareness Month actually improve security?

October is Cybersecurity Awareness Month, formerly known as National Cybersecurity Awareness Month. The idea is to raise awareness about cybersecurity, and provide resources for people to feel safer and more secure online. The month is a collaboration between the Cybersecurity and Infrastructure...

6.9AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/04 9:15 a.m.27 views

A week in security (Sept 27 – Oct 3)

Last week on Malwarebytes Labs Teaching cybersecurity skills to special needs children with Alana Robinson: Lock and Code S02E18 Phone screenshots accidentally leaked online by stalkerware-type company FoggyWeb, analysis of a Nobelium backdoor Instagram Kids put on hold Microsoft, CISA and NSA...

7.3AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/01 4:15 p.m.21 views

The FCC moves to curb SIM swap attacks

The Federal Communications Commission FCC is going to set new rules to curb the rising threat of SIM swapping, also known as SIMjacking. SIM swapping and the very similar port-out fraud is the unlawful use of someones personal information to steal their phone number and swap or transfer it to...

0.2AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/10/01 2:19 p.m.18 views

Apple Pay vulnerable to wireless pickpockets

Researchers have shown that it is possible for attackers to bypass an Apple iPhones lock screen to access payment services and make contactless transactions. The issue, which only applies to Apple Pay and Visa, is caused by the use of so-called magic bytes, a unique code used to unlock Apple Pay...

6.8AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/30 4:1 p.m.28 views

Android Trojan GriftHorse, the gift horse you definitely should look in the mouth

Researchers at Zimperium have discovered an aggressive mobile premium services campaign with over 10 million victims all over the world. The stolen amount could amass hundreds of millions of Euros. The scam was hidden behind malicious Android apps, and the researchers have named the Trojan...

6.8AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/30 11:11 a.m.29 views

Telegram-powered bots circumvent 2FA

Two-factor authentication is a great way to protect your online accounts, and we always recommend you turn it on. But where users put up walls, you can be sure there are cybercriminals trying to break them down. Yesterday, security intelligence firm, Intel 147, revealed it had noticed an uptick o...

0.3AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/29 4:28 p.m.19 views

Vaccine passport app leaks users’ personal data

Security and privacy advocates may have cause to worry after all: Portpass, a vaccine passport app in Canada, has been found to have been exposing the personal data of its users for an unknown length of time. On Monday, Canadian Broadcasting Corporation CBC received a tip that "the user profiles ...

7.2AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/29 1:23 p.m.30 views

Microsoft, CISA and NSA offer security tools and advice, but will you take it?

Microsoft offers to help you with patching Exchange servers, CISA offers an insider threat tool, and together with the NSA they offer advice on how to choose and harden your VPN. These initiatives from major parties aim to help organizations assess and manage their security needs. But will they...

7.5AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/29 9:58 a.m.19 views

Instagram Kids put on hold

Instagram has announced it is pausing the development of its newest brainchild, Instagram Kids—a version of Instagram aimed at 10-12-year-olds, or "tweens". Adam Mosseri, who heads up Instagram, wrote in a blog post about the idea behind Instagram Kids: "We started this project to address an...

7.1AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/28 3:23 p.m.72 views

FoggyWeb, analysis of a Nobelium backdoor

Microsofts Threat Intelligence Center has been analyzing a custom-built backdoor that has been used by the Nobelium group since April 2021. Nobelium is the name given to the threat actor behind the attacks against SolarWinds, the Sunburst backdoor, TEARDROP malware, GoldMax malware, and other...

7.7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/28 12:47 p.m.15 views

Phone screenshots accidentally leaked online by stalkerware-type company

pcTattleTale hasnt been very careful about securing the screenshots it sneakily takes from its victims phones. pcTattleTale markets itself as "employee and child monitoring software" that is undetectable by the device user, but it can also be used to spy on spouses and partners. It allows its...

1AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/27 11:1 a.m.73 views

A week in security (Sept 20 – Sept 26)

Last week on Malwarebytes Labs Freedom Hosting operator gets 27 years for hosting dark web abuse sites Microsoft makes a bold move towards a password-less future New Mac malware masquerades as iTerm2, remote desktop and other apps Internet safety tips for kids and teens: a comprehensive guide for...

7.5CVSS9AI score0.99999EPSS
Exploits11
Malwarebytes
Malwarebytes
added 2021/09/27 7:10 a.m.27 views

Teaching cybersecurity skills to special needs children with Alana Robinson: Lock and Code S02E18

School is fully back in session for kids all across the world, and for many students, that means logging back online to learn, do homework, submit assignments, and maybe even continue some distance learning, depending on their schools pandemic precautions. But with more Internet activity comes...

0.8AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/27 7:1 a.m.24 views

Malwarebytes research shows an unequal, unsafe Internet

If the Internet was as safe and as private as it is essential for everyday life—increasingly required for job applications, bank transfers, doctor’s appointments, and filing taxes—then we’d likely have fewer online scams, better privacy protections, smaller data breaches, and a lower overall risk...

0.7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/24 4:46 p.m.27 views

Uber security alert scam spoofs real Uber number—Watch out!

This morning Malwarebytes Labs received a scam masquerading as a security alert from Uber. The alert was pretty convincing and used the kind of language were used to seeing in genuine security emails and SMS messages. It read: Your Uber account was recently logged into from iPhone in London. If...

6.9AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/24 11:9 a.m.114 views

SonicWall warns users to patch critical vulnerability “as soon as possible”

SonicWall has issued a security notice about its SMA 100 series of appliances. The vulnerability could potentially allow a remote unauthenticated attacker the ability to delete arbitrary files from a SMA 100 series appliance and gain administrator access to the device. SonicWall SonicWall is a...

9.6AI score0.81137EPSS
Exploits4
Malwarebytes
Malwarebytes
added 2021/09/24 9:58 a.m.20 views

Parents and teachers believe digital surveillance of kids outweighs risks

Schools in the US have been using surveillance software to keep an eye on their students, and such software has grown significantly in popularity since the COVD-19 pandemic closed campuses nationwide. And this is fine—at least according to new research released by the Center for Democracy &...

Exploits0
Malwarebytes
Malwarebytes
added 2021/09/23 5:11 p.m.44 views

Microsoft Exchange Autodiscover flaw reveals users’ passwords

Researchers have been able to get hold of 372,072 Windows domain credentials, including 96,671 unique credentials, in slightly over 4 months by setting up a Microsoft Exchange server and using Autodiscover domains. The credentials that are being leaked are valid Windows domain credentials used to...

0.6AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/23 12:55 p.m.29 views

How to clear your cache

The term “cache” refers to a storage container. If you’re familiar with the outdoor recreational activity geocaching, you may be familiar with the term outside of computing. But in website and computer terms, a cache is temporary storage that is used to speed up future requests and load things mo...

Exploits0
Malwarebytes
Malwarebytes
added 2021/09/23 11:43 a.m.74 views

Italian mafia cybercrime sting leads to 100+ arrests

The Spanish National Police Policía Nacional has successfully dismantled an organized crime ring of hundreds of members in a sting operation supported by Europol, the Italian National Police Polizia di Stato, and Eurojust. This is the end result of a year-long investigation. The organized crime...

1.4AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/22 7:16 p.m.93 views

MSHTML attack targets Russian state rocket centre and interior ministry

Malwarebytes has reason to believe that the MSHTML vulnerability listed under CVE-2021-40444 is being used to target Russian entities. The Malwarebytes Intelligence team has intercepted email attachments that are specifically targeting Russian organizations. The first template we found is designe...

6.8CVSS0.97242EPSS
Exploits38
Malwarebytes
Malwarebytes
added 2021/09/22 12:19 p.m.267 views

Patch now! Insecure Hikvision security cameras can be taken over remotely

In a detailed post on Github, security researcher WatchfulIP describes how he found that the majority of the recent camera product ranges of Hikvision cameras are susceptible to a critical, unauthenticated, remote code execution RCE vulnerability, even with the latest firmware. Hikvision Hangzhou...

10AI score0.99869EPSS
Exploits22
Malwarebytes
Malwarebytes
added 2021/09/22 11:27 a.m.99 views

Patch vCenter Server “right now”, VMWare expects CVE-2021-22005 exploitation within minutes of disclosure

VMware is urging users of vCenter server to patch no fewer than 19 problems affecting its products. These updates fix a variety of security vulnerabilities, but and one of them is particularly nasty. That would be CVE-2021-22005, a critical file upload vulnerability with a CVSS score of 9.8 out o...

7.5CVSS9.2AI score0.99999EPSS
Exploits11
Malwarebytes
Malwarebytes
added 2021/09/22 10:54 a.m.18 views

No, Colonel Gaddafi’s daughter isn’t emailing to give you untold riches

It’s not every day you receive a big money offer from someone claiming to sit in political asylum, but here we are. The following missive landed in our spam traps at the weekend. The mail claims to be from the daughter of no less than the late Colonel Gaddafi. Ayesha Gaddafi promises you untold...

Exploits0
Malwarebytes
Malwarebytes
added 2021/09/22 10:43 a.m.20 views

Google, geofence warrants, and you

Another day, another example of how the data sharing choices we make can come back to haunt us. The Guardian reports a Florida resident finding his bike ride data requested by law enforcement. This is due to his route taking him close to the scene of a burglary a year earlier. According to the...

6.8AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/21 3:30 p.m.13 views

Internet safety tips for kids and teens: A comprehensive guide for the modern parent

When it comes to picking a new device for your child, its often difficult to know where to start. Whether youre looking for a smartphone, a laptop, a gaming device or something else, or even just signing up for an account online, you want to make sure your kids are protected. Its important to get...

7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/21 11:21 a.m.24 views

New Mac malware masquerades as iTerm2, Remote Desktop and other apps

Last week, security researcher Patrick Wardle released details of a new piece of malware masquerading as the legitimate app iTerm2. The malware was discovered earlier the same day by security researcher Zhi @CodeColorist on Twitter, and detailed on a Chinese-language blog. For those who dont spea...

0.1AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/20 12:17 p.m.27 views

Microsoft makes a bold move towards a password-less future

In a recent blog Microsoft announced that as of September 15, 2021 you can completely remove the password from your Microsoft account and use the Microsoft Authenticator app, Windows Hello, a security key, or a verification code sent to your phone or email to sign in to Microsoft apps and service...

7.3AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/20 11:20 a.m.26 views

Freedom Hosting operator gets 27 years for hosting Dark Web child abuse sites

The wheels of justice have turned, if perhaps a bit slower than you may have expected. A Dublin resident, Eric Eoin Marques, has been sentenced to 27 years in federal prison. The reason is the frankly terrifying tally of child sexual abuse material CSAM he helped to distribute. Eoin helped to mak...

7.1AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/20 10:28 a.m.26 views

A week in security (Sept 13 – Sept 19)

Last week on Malwarebytes Labs Why backups aren’t a “silver bullet” against ransomware, with Matt Crape: Lock and Code S02E17 The many tentacles of Magecart Group 8 Apple releases emergency update: Patch, but don’t panic Update now! Google Chrome fixes two in-the-wild zero-days Parts of the Dark...

0.3AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/17 2:34 p.m.11 views

Facebook’s own research reveals the harm that Instagram can inflict

For years, people have accused social media, and particularly image-driven sites like Instagram, of being bad for young people, particularly young women. It turns that Instagrams owner, Facebook, agrees. Thirty-two percent of teen girls said that when they felt bad about their bodies, Instagram...

7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/17 1:48 p.m.186 views

FBI and CISA warn of APT groups exploiting ADSelfService Plus

In a joint advisory the FBI, the United States Coast Guard Cyber Command CGCYBER, and the Cybersecurity and Infrastructure Security Agency CISA warn that advanced persistent threat APT cyber-actors may be exploiting a vulnerability in ManageEngines single sign-on SSO solution. The vulnerability...

7.5CVSS10AI score0.9896EPSS
Exploits8
Malwarebytes
Malwarebytes
added 2021/09/17 7:42 a.m.27 views

What is the Dark Web? The Dark Web explained

You may have seen the Dark Web referenced in popular TV shows and have gotten the wrong idea, or if you already knew about it, you may have snorted in derision. The Dark Web is also sometimes called the Deep Web, when in fact the Dark Web is only a part of the Deep Web. Terminology Surface Web is...

7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/16 4:8 p.m.20 views

What are computer cookies?

We all know cookies as tasty baked treats that we love to eat, but computer cookies are quite different. Although they’re most popularly known as just "cookies", they may be referred to as browser cookies, Internet cookies, HTTP cookies, web cookies, computer cookies, or digital cookies. What are...

6.7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/16 12:33 p.m.29 views

3 security lessons from an MSP that survived the Kaseya VSA attack

Jay Tipton, chief executive for the Managed Service Provider MSP Technology Specialists, remembers his Fourth of July weekend this year like many MSP employees likely remember theirs: As a bit of a nightmare. “That’s like the worst feeling you’ll ever have,” Tipton said about his initial...

7.3AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/16 10:30 a.m.35 views

HP OMEN users, update your driver now!

HP has released a patch to fix a flaw in the HP OMEN driver. As far as we know the flaw isnt being actively exploited, but its worth applying the patch as soon as you can. The flaw, the fix The driver vulnerability, which is tracked as CVE-2021-3437, was found by Kasif Dekel, a senior security...

8.7AI score0.15551EPSS
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/16 10:28 a.m.29 views

Ransomware scammers target artists with fake Krita revenue deals

The Krita digital painting application is currently being targeted by ransomware authors. Available on Steam and other platforms, it’s a powerful tool with a very cheap purchase price and great reviews. A perfect bit of bait to start reeling in potential victims, in other words. How does the scam...

6.7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/15 5:17 p.m.16 views

What are SSL certificates?

Secure Sockets Layer SSL certificates are what cause your browser to display a padlock icon, indicating that your connection to a websites is secure. Although the padlock may soon be hidden from view, certificates arent going anywhere. Lets start with some definitions and explain some of the...

6.4AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/15 1:19 p.m.170 views

[updated] Patch now! PrintNightmare over, MSHTML fixed, a new horror appears … OMIGOD

The September 2021 Patch Tuesday could be remembered as the final patching attempt in the PrintNightmare… nightmare. The ease with which the vulnerabilities shrugged off the August patches doesn’t look to get a rerun. So far we haven’t seen any indications that this patch is so easy to circumvent...

9.3CVSS9.2AI score0.99723EPSS
Exploits58
Malwarebytes
Malwarebytes
added 2021/09/14 7:49 p.m.22 views

Parts of the Dark Web “awash” with school children’s personal data

NBC News has collected and analyzed a trove of childrens personal information it discovered on the Dark Web. Even though this information may not be as useful to cybercriminals as credit card details or login credentials, the information is still out there, where we don’t want it. So what is it,...

6.8AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/09/14 4:28 p.m.93 views

Update now! Google Chrome fixes two in-the-wild zero-days

Google announced on Monday that it will be issuing patches for 11 high severity vulnerabilities found in Chrome, including two that are currently being exploited in the wild. The patch, which is part of the Stable Channel Update for Chrome 93 93.0.4577.82, will be released for Windows, Mac, and...

6.8CVSS9.1AI score0.70435EPSS
Exploits12
Total number of security vulnerabilities4662