~hackernews | Bookmarks (68)

clear filters

bleepingcomputer.com ×

Mitre says state hackers breached its network via Ivanti zero-days

bleepingcomputer.com

The MITRE Corporation says that a state-backed hacking group breached its systems in January 2024 by...
The MITRE Corporation says that a state-backed hacking group breached its systems in January 2024 by chaining two Ivanti VPN zero-days. The incident was discovered after suspicious activity was detected on MITRE's Networked Experimentation, Research, and Virtualization Environment (NERVE), an unclassified collaborat...

breach infosec ivanti mitre security
1
HelloKitty ransomware rebrands, releases CD Projekt and Cisco data

bleepingcomputer.com

An operator of the HelloKitty ransomware operation announced they changed the name to 'HelloGookie,' releasing passwords...
An operator of the HelloKitty ransomware operation announced they changed the name to 'HelloGookie,' releasing passwords for previously leaked CD Projekt source code, Cisco network information, and decryption keys from old attacks. The threat actor who made the announcement goes by the name ‘Gookee/kapuchin0’ and cl...

data leak decryption key hellogookie hellokitty ransomware
1
GitHub comments abused to push malware via Microsoft repo URLs

bleepingcomputer.com

A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute...
A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository, making the files appear trustworthy. While most of the malware activity has been based around the Microsoft GitHub URLs, this "flaw" could be abused with any public ...

cdn comment file upload github malware
1
Medium bans AI-generated content from its paid Partner Program

bleepingcomputer.com

Medium is banning AI-generated content from its paid Partner program, notifying users that the new policy...
Medium is banning AI-generated content from its paid Partner program, notifying users that the new policy goes into effect on May 1, 2024. Stories entirely generated using AI will be taken off paywalls and might even result in users getting kicked out of the monetization program. "We are writing to notify you of pol...

ai ai text classifier email medium technology
1
OpenTable is adding your first name to previously anonymous reviews

bleepingcomputer.com

Restaurant reservation platform OpenTable says that all reviews on the platform will no longer be fully...
Restaurant reservation platform OpenTable says that all reviews on the platform will no longer be fully anonymous starting May 22nd and will now show members' profile pictures and first names. OpenTable notified members of this new policy change today in emails to members who had previously left a review on the plat...

opentable personal information privacy review technology
1
Critical Rust flaw enables Windows command injection attacks

bleepingcomputer.com

Threat actors can exploit a security vulnerability in the Rust standard library to target Windows systems...
Threat actors can exploit a security vulnerability in the Rust standard library to target Windows systems in command injection attacks. Tracked as CVE-2024-24576, this flaw is due to OS command and argument injection weaknesses that can let attackers execute unexpected and potentially malicious commands on the opera...

command injection library rust security update vulnerability
3
Critical RCE bug in 92,000 D-Link NAS devices now exploited in attacks

bleepingcomputer.com

Image: Midjourney Attackers are now actively targeting over 92,000 end-of-life D-Link Network Attached Storage (NAS) devices...
Image: Midjourney Attackers are now actively targeting over 92,000 end-of-life D-Link Network Attached Storage (NAS) devices exposed online and unpatched against a critical remote code execution (RCE) zero-day flaw. As BleepingComputer first reported on Saturday, this security vulnerability (CVE-2024-3273) is the r...

actively exploited backdoor command injection d-link nas
1
Notepad++ wants your help in "parasite website" shutdown

bleepingcomputer.com

The Notepad++ project is seeking the public's help in taking down a copycat website that closely...
The Notepad++ project is seeking the public's help in taking down a copycat website that closely impersonates Notepad++ but is not affiliated with the project. Although, at the time of writing, the lookalike website takes visitors to the official Notepad++ downloads page, there is some concern that it could pose sec...

infosec lookalike notepad++open source phishing
1
New Windows driver blocks software from changing default web browser

bleepingcomputer.com

default browser default program digital markets act microsoft registry
1
Over 92,000 exposed D-Link NAS devices have a backdoor account

bleepingcomputer.com

A threat researcher has disclosed a new arbitrary command injection and hardcoded backdoor flaw in multiple...
A threat researcher has disclosed a new arbitrary command injection and hardcoded backdoor flaw in multiple end-of-life D-Link Network Attached Storage (NAS) device models. The researcher who discovered the flaw, 'Netsecfish,' explains that the issue resides within the'/cgi-bin/nas_sharing.cgi' script, impacting its...

backdoor command injection d-link eol nas
1
Microsoft warns that Gmail blocks some Outlook emails as 'spam'

bleepingcomputer.com

Microsoft has confirmed that some Outlook.com users are experiencing issues with emails being blocked and marked...
Microsoft has confirmed that some Outlook.com users are experiencing issues with emails being blocked and marked as spam when trying to email Gmail accounts. This known issue only impacts users with Outlook.com country domains, according to a support document published by Redmond on Tuesday. Affected Outlook users a...

email gmail google known issue outlook
1
New XZ backdoor scanner detects implant in any Linux binary

bleepingcomputer.com

Firmware security firm Binarly has released a free online scanner to detect Linux executables impacted by...
Firmware security firm Binarly has released a free online scanner to detect Linux executables impacted by the XZ Utils supply chain attack, tracked as CVE-2024-3094. CVE-2024-3094 is a supply chain compromise in XZ Utils, a set of data compression tools and libraries used in many major Linux distributions. Late last...

backdoor linux scanner security software
1
AT&T confirms data for 73M customers leaked on hacker forum

bleepingcomputer.com

AT&T has finally confirmed it is impacted by a data breach affecting 73 million current and...
AT&T has finally confirmed it is impacted by a data breach affecting 73 million current and former customers after initially denying the leaked data originated from them. This comes after AT&T has repeatedly denied for the past two weeks that a massive trove of leaked customer data originated from them and or that t...

at&t data breach data leak date of birth hacking forum
1
Google Podcasts service shuts down in the US next week

bleepingcomputer.com

U.S. users have just a few more days to make the transition from Google Podcasts as...
U.S. users have just a few more days to make the transition from Google Podcasts as the company moves forward with the process of discontinuing the service globally. Google is currently sending in-app notifications to users in the U.S. that starting April 2nd they will no longer be able to use Google Podcasts and is...

discontinued google google podcasts software
1
Microsoft to shut down 50 cloud services for Russian businesses

bleepingcomputer.com

Microsoft plans to limit access to over fifty cloud products for Russian organizations by the end...
Microsoft plans to limit access to over fifty cloud products for Russian organizations by the end of March as part of the sanctions requirements against the country issued by EU regulators last December. The suspension was initially scheduled for March 20, 2024, but it was moved to the end of the month to give impac...

cloud cloud services legal microsoft russia
1
Apex Legends players worried about RCE flaw after ALGS hacks

bleepingcomputer.com

Electronic Arts has postponed the North American (NA) finals of the ongoing Apex Legends Global Series...
Electronic Arts has postponed the North American (NA) finals of the ongoing Apex Legends Global Series (ALGS) after hackers compromised players mid-match during the tournament. ALGS is an esports tournament series where players compete in a fast-paced, strategic battle royale game. The series is structured around ma...

anti-cheat apex legends esports game cheat gaming
1
Opera sees big jump in EU users on iOS, Android after DMA update

bleepingcomputer.com

Opera has reported a substantial 164% increase in new European Union users on iOS devices after...
Opera has reported a substantial 164% increase in new European Union users on iOS devices after Apple introduced a new feature to comply with the EU's Digital Markets Act (DMA). With iOS 17.4, Apple introduced a new choice screen that asks EU users to select a default web browser from a list of randomly listed brows...

android apple brave dma eu
1
Hackers exploit Aiohttp bug to find vulnerable networks

bleepingcomputer.com

The ransomware actor 'ShadowSyndicate' was observed scanning for servers vulnerable to CVE-2024-23334, a directory traversal vulnerability...
The ransomware actor 'ShadowSyndicate' was observed scanning for servers vulnerable to CVE-2024-23334, a directory traversal vulnerability in the aiohttp Python library. Aiohttp is an open-source library built on top of Python's asynchronous I/O framework, Asyncio, to handle large amounts of concurrent HTTP requests...

actively exploited aiohttp path traversal ransomware shadowsyndicate
1
AT&T says leaked data of 70M people is not from its systems

bleepingcomputer.com

AT&T says a massive trove of data impacting 71 million people did not originate from its...
AT&T says a massive trove of data impacting 71 million people did not originate from its systems after a hacker leaked it on a cybercrime forum and claimed it was stolen in a 2021 breach of the company. While BleepingComputer has not been able to confirm the legitimacy of all the data in the database, we have confir...

at&t data breach data leak hacking forum mobile number
1
Microsoft again bothers Chrome users with Bing popup ads in Windows

bleepingcomputer.com

Microsoft is once again harassing Google Chrome users on Windows 10 and Windows 11 with popup...
Microsoft is once again harassing Google Chrome users on Windows 10 and Windows 11 with popup desktop advertisements promoting Bing and its GPT-4 Bing Chat platform. However, due to the quality of the pixelated ads, some who received them were concerned that they were being displayed by malware, even though the embe...

advertisement bing bing chat browser extension google
1
International Monetary Fund email accounts hacked in cyberattack

bleepingcomputer.com

The International Monetary Fund (IMF) disclosed a cyber incident on Friday after unknown attackers breached 11...
The International Monetary Fund (IMF) disclosed a cyber incident on Friday after unknown attackers breached 11 IMF email accounts earlier this year. This international financial institution, funded by 190 member countries, is also a major United Nations financial agency headquartered in Washington, D.C. According to...

computer security cyber attack cyber incident imf infosec
1
SIM swappers hijacking phone numbers in eSIM attacks

bleepingcomputer.com

SIM swappers have adapted their attacks to steal a target's phone number by porting it into...
SIM swappers have adapted their attacks to steal a target's phone number by porting it into a new eSIM card, a digital SIM stored in a rewritable chip present on many recent smartphone models. Embedded Subscriber Identity Modules (eSIMs) are digital cards stored on the chip of the mobile device and serve the same ro...

account takeover credential theft esim hijack security
1
Former telecom manager admits to doing SIM swaps for $1k

bleepingcomputer.com

A former manager at a telecommunications company in New Jersey pleaded guilty to conspiracy charges for...
A former manager at a telecommunications company in New Jersey pleaded guilty to conspiracy charges for accepting money to perform unauthorized SIM swaps that enabled an accomplice to hack customer accounts. SIM swapping is an unauthorized porting of a targeted person's phone number to another physical SIM card or e...

account takeover court case hijack legal sim
1
Tor's new WebTunnel bridges mimic HTTPS traffic to evade censorship

bleepingcomputer.com

censorship https infosec security tor
1