Author Topic: SECURITY WARNINGS & Notices - Please post them here (Read 2896074 times)

Asyn · « **Reply #5655 on:** March 23, 2018, 11:27:25 AM »

GitLab Critical Security Release: 10.5.6, 10.4.6, and 10.3.9
https://about.gitlab.com/2018/03/20/critical-security-release-gitlab-10-dot-5-dot-6-released/

Pondus · « **Reply #5656 on:** March 25, 2018, 12:36:40 AM »

The AVCrypt Ransomware Tries To Uninstall Your AV Software
https://www.bleepingcomputer.com/news/security/the-avcrypt-ransomware-tries-to-uninstall-your-av-software/

polonus · « **Reply #5657 on:** April 02, 2018, 01:19:12 PM »

Why Google does not do a better job of keeping this crap and insecurity from their webstore?

Read and shiver: https://www.av-comparatives.org/mobile-security/

That's why we should stick to avast mobile security and their accompanying tools!

Be aware there is many an insecure dark alleyway on the Interwebs, folks

polonus

bob3160 · « **Reply #5658 on:** April 02, 2018, 03:09:03 PM »

Same problem exists on Microsoft store and the Apple store.

Be Secure · « **Reply #5659 on:** April 04, 2018, 06:15:28 AM »

Decrypters for Some Versions of Magniber Ransomware Released
https://www.bleepingcomputer.com/news/security/decrypters-for-some-versions-of-magniber-ransomware-released/

Be Secure · « **Reply #5660 on:** April 08, 2018, 04:40:12 AM »

New Matrix Ransomware Variants Installed Via Hacked Remote Desktop Services
https://www.bleepingcomputer.com/news/security/new-matrix-ransomware-variants-installed-via-hacked-remote-desktop-services/

Unfortunately, this variants of Matrix Ransomware cannot be decrypted for free.

bob3160 · « **Reply #5661 on:** April 10, 2018, 09:22:00 PM »

Sometimes having Facebook Friends, isn't such a good idea.
https://bob3160.blogspot.com/2018/04/sometimes-having-facebook-friends-isnt.html

Pondus · « **Reply #5662 on:** April 14, 2018, 10:39:07 PM »

PowerHammer: Exfiltrating Data from Air-Gapped Computers through Power Lines
https://arxiv.org/abs/1804.04014

Asyn · « **Reply #5663 on:** April 18, 2018, 06:23:32 AM »

Russian State-Sponsored Cyber Actors Targeting Network Infrastructure Devices
https://www.us-cert.gov/ncas/alerts/TA18-106A

Pondus · « **Reply #5664 on:** April 20, 2018, 08:16:43 AM »

Google is listening

https://m.youtube.com/watch?v=zBnDWSvaQ1I

https://www.unilad.co.uk/technology/google-is-listening-to-everything-we-say-and-you-can-hear-it-back/

bob3160 · « **Reply #5665 on:** April 23, 2018, 11:27:23 PM »

Quote from: Pondus on April 20, 2018, 08:16:43 AM

Google is listening https://m.youtube.com/watch?v=zBnDWSvaQ1I

https://www.unilad.co.uk/technology/google-is-listening-to-everything-we-say-and-you-can-hear-it-back/

https://privacy.google.com/#
It's always nice to know the whole story not just the headlines.

polonus · « **Reply #5666 on:** April 24, 2018, 12:35:06 PM »

Websites with unpatched Drupal framework should consider themselves to be compromised.

See: https://github.com/rapid7/metasploit-framework/issues/9789
POC: https://github.com/nixawk/labs/issues/19

The hack is embroidering further on the schemes of a previous exploit dating back to 2014.

Always remember folks, there is nothing new in this ol' world, polonus has been long enough around to know,
the devil is always going to play out a variant of the same old trick.

polonus (volunteer website security analyst and website error-hunter)

bob3160 · « **Reply #5667 on:** April 27, 2018, 03:20:58 PM »

https://blog.avast.com/amazon-hacked-for-ethereum-heist-and-new-security-laws-affect-uk-avast

Asyn · « **Reply #5668 on:** May 04, 2018, 09:27:54 AM »

Keeping your account secure
https://blog.twitter.com/official/en_us/topics/company/2018/keeping-your-account-secure.html

Asyn · « **Reply #5669 on:** May 04, 2018, 11:52:29 AM »

A Vulnerability in 7-Zip Could Allow for Arbitrary Code Execution
https://www.cisecurity.org/advisory/a-vulnerability-in-7-zip-could-allow-for-arbitrary-code-execution_2018-049/