Microsoft offers an explanation for the hack of its cloud
Bugs and coincidences seem to have allowed Chinese-based hacking group Storm-0558 to steal a private MSA key from Microsoft and gain access to the accounts of o
Security - Latest Posts
-
-
UK Government withdraws proposal for controversial spy clause in its Online Safety Bill
The UK Government has announced that it will not scan users' messages for harmful content.
-
Okta warns against attacks targeting IT service desk agents
Okta, an identity and access management company, has issued a warning about a new wave of social engineering attacks targeting IT service desk agents at U.
-
Critical security vulnerabilities in ASUS routers -- update immediately
Three ASUS Wi-Fi routers are vulnerable to three critically rated remote code execution vulnerabilities that can be exploited by malicious actors to take over t
-
An evolved LockBit variant emerges
Kaspersky, a cybersecurity company, found a new version of LockBit ransomware that's different from the original.
-
Microsoft publishes mitigation instructions for Downfall vulnerability in Windows
Microsoft published a support article about the recently disclosed CVE-2022-40982 vulnerability, commonly referred to as Downfall, that affects Windows devices.
-
WinRAR security issue more wide-reaching than thought [Update]
A recently disclosed security issue in the archiving software WinRAR is affecting other software programs as well.
-
Bitwarden launches Secrets Manager for teams
Bitwarden Secrets Manager is an open source end-to-end encrypted service that teams may use to "store, manage, automate, and share secrets at scale".
-
Privacy.sexy (Privacy is Sexy): free privacy scripts for Windows, macOS and Linux
Privacy.
-
Proton Sentinel: next level account security protection for (almost) everyone
Proton, maker of Proton Mail, VPN and several other services, announced the launch of Proton Sentinel earlier today.
-
LinkedIn hack: You need to check your LinkedIn account
If you want to understand the ongoing LinkedIn hack easily, picture this: profiles locked, passwords changed, and the unsettling realization that unseen hands h
-
Discord.io data breach: 760K users affected
Following the Discord.
-
LastPass improves passwordless logins with FIDO2 authenticator support for desktops
Lastpass, maker of the password management service of the same name, announced today that customers may now use FIDO2 compatible authenticators on desktop devic
-
Microsoft Authenticator will soon provide codes via WhatsApp
Microsoft is working on two improvements for its Microsoft Authenticator application.
-
0Patch promises to support Windows Server 2012 and 2012 R2 with 3 years of security updates
Microsoft is ending support for Windows Server 2012 and Windows Server 2012 R2 in October 2023.
-
PSNI data breach left officers vulnerable
A huge data breach, including the personal information of every officer in the Northern Ireland Police Service (PSNI), has left personnel concerned for their sa
-
Avast Free Antivirus: Features, Requirements and Paid Tiers
Avast Free Antivirus is a no-cost security suite for Windows 7 to Windows 11 that combines on-access malware scanning (File Shield), behavior monitoring, a Web
-
AI knows what you type by simply listening
Researchers have trained an AI deep learning model to detect computer keyboard keystrokes with up to 95% accuracy.
-
Hackers targeting air-gapped devices in Eastern Europe with new malware
A concerning cyber threat has emerged in Eastern Europe, where Chinese state-sponsored hackers are employing a new and sophisticated malware to breach air-gappe
-
Google: 0-Day vulnerabilities down in 2022, but still higher than average
Google published a summary of 0-day exploits in the wild in 2022 on the company's official Google Security Blog this week.
-
How to migrate your Bitwarden vaults from US to EU storage
When Bitwarden users sign-up for an account, they have the choice between storing their vault data on Bitwarden's US or EU servers.
-
Roblox data leak may have affected nearly 4000 users
On July 19, 2023, a data breach at Roblox exposed sensitive user information from attendees of the 2017-2020 Roblox Developers Conferences.
-
Proton Pass password manager apps released as open source
Proton announced today that its password manager Proton Pass is now open source and that the apps have been audited for security.
-
Malware with faked timestamps on the rise to bypass Windows protections
Microsoft banned more 100 signed malicious Windows drivers just last week after it was informed that malicious actors had joined the company's Windows Hardware
-
Latest macOS malware can steal your banking information
On macOS, a recently discovered security risk operates in the background to access logins, banking information, and other sensitive information.
-
Chinese hackers breach US government emails using a Microsoft cloud bug
According to Microsoft, hackers from China have accessed the email accounts of about 25 organizations, including government organizations.
-
Malware found in over 100 signed Windows drivers
Yesterday's security updates for Windows and other Microsoft products came with an advisory regarding the malicious use of Microsoft signed drivers.
-
"Big Head" ransomware fakes Windows Update to trick users
Security researchers at FortiGuard Labs have discovered a new type of ransomware that is targeting home computer users.
-
RustBucket malware: A PDF could finish your Mac
Cybersecurity research conducted by the illustrious team at Elastic Security Labs has brought to light a virulent new strain of the RustBucket malware, a notori
-
Proton Pass password manager leaves beta: here is our take
Proton, the organization behind Proton Mail, VPN and other services, has released the first stable version of Proton Pass today after a beta period.
-
Microsoft Teams vulnerability discovered to bypass file sending restrictions
A newly discovered vulnerability in Microsoft Teams allows attackers to push malware onto the devices of other Microsoft Teams users, even if they are considere
-
Some LastPass users are locked out of their accounts after trying to reset their authenticator app
Password management service LastPass started to prompt its customers to reset their two-factor authentication method on May 9th, 2023.
-
1Password adds Telemetry to its password manager, but it is opt-in, sort of
The makers of the password management service 1Password announced the rollout of what they call a "privacy-preserving telemetry system" in the application today.
-
Asus releases firmware updates for routers to address critical security issues
Asus has released new firmware for a wide range of its routers that address nine different security issues, some of which rated critical.
-
New Bitwarden update fix a huge vulnerability on Windows.... update now!
The open source Bitwarden password manager supports biometric authentication.
-
KeePass password manager update improves security
Dominik Reichl, the lead developer of the KeePass password manager, has released KeePass 2.
-
MOVEit file transfer vulnerability exploited by hackers
Security researchers have discovered that threat actors are using a serious zero-day flaw in the MOVEit file transfer product in a number of client scenarios.
-
Critical vulnerability in Gigabyte Motherboards discovered
Millions of PC devices with Gigabyte motherboards are in danger.
-
1Password tightens the thumbscrews for users of the old version of the password manager
Password management service 1Password has deleted the classic browser extensions from the Google Chrome Web Store and Mozilla's Firefox Add-ons repository.
-
How to save money on flights, hotels, car rentals: VPNs
If you enjoy traveling, you probably know how costly it can be to reserve hotels, rental cars, and flights.
