Subterms
Microsoft is working on developing comprehensive mitigation for a class of Windows bugs that have plagued the operating system for more than two decades. Israeli security researcher Gil Dabah told ZDNet that a fix is currently in the works. Earlier today, Dabah published proof-of-concept code and a report detailing 25 bugs, all exploiting variations on […] More
Amazon’s cloud services business AWS has announced that security tool Amazon Detective, which uses machine learning to help visualize anomalies in customers’ resources, is now generally available. Launched as a preview at last year’s re:Invent event, the feature is likely to put an end to many security team’s woes. Amazon Detective collects large quantities of […] More
Microsoft says it has issued its first-ever targeted warning to several dozen hospitals, alerting them to vulnerabilities in their virtual private network (VPN) appliances after spotting a ransomware gang targeting them. The warning follows the recent discovery that Iranian hackers have been targeting vulnerabilities in VPN servers from Pulse Secure, Palo Alto Networks, Fortinet, and […] More
A new campaign is spreading the LimeRAT Remote Access Trojan by harnessing an old encryption technique in Excel files. LimeRAT is a simple Trojan designed for Windows machines. The malware is able to install backdoors on infected machines and encrypt files in the same way as typical ransomware strains, add PCs to botnets, and install […] More
Image: Peter Kruse Since May 2018, a malware botnet has been launching brute-force attacks against Microsoft SQL (MSSQL) databases to take over admin accounts and then install cryptocurrency mining scripts on the underlying operating system. The botnet, detailed in a report published today by cyber-security firm Guardicore and shared with ZDNet, is still active and […] More
Business email compromise (BEC) attacks have more than doubled in the past year as cyber criminals try to use their email scams against big businesses. This form of cyber crime is often based around scammers pretending to be someone known to the victim – a colleague, a contractor, or maybe even their boss – and […] More
On the heels of Zoom’s iPhone privacy blunder, a security researcher has found that attackers can use the Zoom Windows client’s group chat feature to share links that will leak the Windows network credentials of anyone who clicks on them. Zoom is under extra scrutiny as usage of the video conference app has surged during […] More
Before you get comfortable in front of the TV, ready to ride out your life under lockdown, are you aware of all the data Netflix stores on you? Although the predominant method of streaming is still TV, watching on-the-go has seen a rise with 15% of people using Netflix on their smartphones or tablet devices. […] More
