Over 22,000 Container Orchestration Systems Connected to the Internet

Security - Posted On:2018-06-19 06:44:57 Source: bleepingcomputer

The admin consoles of over 22,000 container orchestration and API management systems are currently exposed online, according to a report published on Monday by Lacework, a company specialized in cloud security. [...]

Read More

Senate Votes to Reimpose ZTE Ban Despite President Trump's Efforts

Security - Posted On:2018-06-19 04:44:57 Source: bleepingcomputer

The US Senate passed the National Defense Authorization Act (NDAA) yesterday that includes a clause to reinstate a ban on Chinese hardware vendor ZTE. [...]

Read More

Ex-CIA Employee Charged with Leak of Classified CIA Vault 7 Hacking Tools

Security - Posted On:2018-06-18 22:29:59 Source: bleepingcomputer

The Department of Justice has announced new charges against former CIA software engineer Joshua Schulte for allegedly leaking classified CIA documents, software projects, and hacking utilities called Vault 7 to WikiLeaks. [...]

Read More

Upcoming iOS 12 Will Share Emergency Location With 911 Services

Security - Posted On:2018-06-18 17:15:00 Source: bleepingcomputer

Apple announced today that the next version of the iOS operating system —iOS 12— would automatically and securely share a caller's geo-location with 911 emergency services across the US. [...]

Read More

75% of Malware Uploaded on “No-Distribute” Scanners Is Unknown to Researchers

Security - Posted On:2018-06-18 12:45:00 Source: bleepingcomputer

Three-quarters of malware samples uploaded to "no-distribute scanners" are never shared on "multiscanners" like VirusTotal, and hence, they remain unknown to security firms and researchers for longer periods of time. [...]

Read More

Vendor Patches Seven Vulnerabilities Across 392 Camera Models

Security - Posted On:2018-06-18 09:14:57 Source: bleepingcomputer

Axis Communications AB, a Swedish manufacturer of network cameras for physical security and video surveillance, has patched seven security flaws across nearly 400 security camera models. [...]

Read More

Rootkit-Based Adware Wreaks Havoc Among Windows 10 Users in the US

Security - Posted On:2018-06-18 08:14:57 Source: bleepingcomputer

Security researchers from Romania-based antivirus vendor Bitdefender have detailed the operations of an adware strain named Zacinlo that uses a rootkit component to gain persistence across OS reinstalls, a rootkit component that's even effective against Windows 10 installations. [...]

Read More

macOS Breaks Your OpSec by Caching Data From Encrypted Hard Drives

Security - Posted On:2018-06-18 08:14:57 Source: bleepingcomputer

Apple's macOS surreptitiously creates and caches thumbnails for images and other file types stored on password-protected / encrypted containers (hard drives, partitions), according to Wojciech Reguła and Patrick Wardle, two macOS security experts. [...]

Read More

Andy OS Android Emulator Reportedly Installing a GPU Miner

Security - Posted On:2018-06-17 21:44:59 Source: bleepingcomputer

Reports are coming in that a GPU Miner Trojan is being installed along with the popular Andy Android emulator and its users are rightfully concerned. This miner reportedly will use the graphics processing unit, or GPU, on the computer's graphic's card in order to mine cryptocurrency. [...]

Read More

Gaming Companies Remove Analytics App After Massive User Outcry

Security - Posted On:2018-06-17 07:29:57 Source: bleepingcomputer

Several gaming companies have announced plans to remove support for an analytics app they have bundled with their games. The decision to remove the app came after several Reddit and Steam users noticed that many game publishers have recently embedded a controversial analytics SDK part of recent updates to their games. [...]

Read More

Android App Devs Find Clever Trick for Fooling Users Into Installing Their Crapware

Security - Posted On:2018-06-16 03:59:59 Source: bleepingcomputer

An expert in Android security is warning users that some developers of crappy Android apps have come up with a new trick for fooling users into installing their apps. [...]

Read More

The Week in Ransomware - June 15th 2018 - DBGer, Scarab, and More

Security - Posted On:2018-06-15 19:00:00 Source: bleepingcomputer

Mostly new variants of the same ransomware this week, with little new ransomware campaigns being conducted. Of particular interest was Kaspersky temporarily withdrawing their participation in the NoMoreRansom project and the rebranding of Satan Ransomware as DBGer Ransomware. [...]

Read More

Europol Dismantles One of the Internet's Oldest Hacker Groups

Security - Posted On:2018-06-15 19:00:00 Source: bleepingcomputer

Europol, French, UK, and Thai police arrested eight people they suspect to have been involved or to have been part of a notorious hacker group known as Rex Mundi (Latin for "King of the World"). [...]

Read More

All That Port 8000 Traffic This Week! Yeah, That's Satori Looking for New Bots

Security - Posted On:2018-06-15 16:44:59 Source: bleepingcomputer

The mystery of the recent surge in port 8000 scan activity has been solved today by security researches from Qihoo 360 Netlab, who tracked this week's mystery traffic to an old foe —the Satori IoT botnet. [...]

Read More

Police Use of Minority Report-Style Pre-Crime Tech Raises Inaccuracy Concerns

Security - Posted On:2018-06-15 16:14:59 Source: bleepingcomputer

Pre-crime, is a vast potpourri of information, on everyday activities, used to try to predict and prevent future behavior. In "predictive" policing, computer algorithms identify signs of pre-crime in a realm in which we are all potential suspects. [...]

Read More

Hacker Breaches Syscoin GitHub Account and Poisons Official Client

Security - Posted On:2018-06-15 12:30:01 Source: bleepingcomputer

A hacker gained access to the GitHub account of the Syscoin cryptocurrency and replaced the official Windows client with a version containing malware. The poisoned Syscoin Windows client contained Arkei Stealer, a malware strain specialized in dumping and stealing passwords and wallet private keys. [...]

Read More

Chinese Cyber-Espionage Group Hacked Government Data Center

Security - Posted On:2018-06-15 10:14:57 Source: bleepingcomputer

A Chinese-linked cyber-espionage unit has hacked a data center belonging to a Central Asian country and has embedded malicious code on government sites. The hack of the data center happened sometime in mid-November 2017, according to a report published by Kaspersky Lab earlier this week. [...]

Read More

Clipboard Hijacker Targeting Bitcoin & Ethereum Users Infects Over 300,0000 PCs

Security - Posted On:2018-06-15 05:29:58 Source: bleepingcomputer

A malware campaign spreading a clipboard hijacker has infected over 300,000 computers, according to Chinese security firm Qihoo 360 Total Security. The campaign has been raging for the past week and has spread a malware which Qihoo researchers have named ClipboardWalletHijacker. [...]

Read More

Decryptor Released for the Everbe Ransomware

Security - Posted On:2018-06-14 19:29:59 Source: bleepingcomputer

A decryptor for the Everbe Ransomware was released by Michael Gillespie that allows victims to get their files back for free.  It is not known how this ransomware is currently being distributed, but as long as victims have an unencrypted version of an encrypted file, they can use them to brute force the decryption key. [...]

Read More

Following Chrome's Lead, Microsoft Edge Also Moves to Block Autoplay Videos

Security - Posted On:2018-06-14 18:14:59 Source: bleepingcomputer

The Microsoft Edge browser will gain the ability to block auto-playing media, such as sounds and web videos. The feature was announced today for Edge browsers part of Insiders program, Microsoft's testing ground for new Windows 10 features. [...]

Read More