U.S. FTC Vows to Crack Down on illegal Use and Sharing of Citizens’ Sensitive Data

U.S. FTC Vows to Crack Down on illegal Use and Sharing of Citizens’ Sensitive Data

,

The U.S. Federal Trade Commission (FTC) warned this week that it will crack down on tech companies’ illegal use and sharing of highly sensitive data and false claims about data anonymization.
« While many consumers may happily offer their location data in exchange for real-time crowd-sourced advice on the fastest route home, they likely think differently about having their thinly-disguised online

,

The U.S. Federal Trade Commission (FTC) warned this week that it will crack down on tech companies’ illegal use and sharing of highly sensitive data and false claims about data anonymization.
« While many consumers may happily offer their location data in exchange for real-time crowd-sourced advice on the fastest route home, they likely think differently about having their thinly-disguised online

, ,
https://thehackernews.com/2022/07/us-ftc-vows-to-crack-down-on-illegal.html

New UEFI Firmware Vulnerabilities Impact Several Lenovo Notebook Models

New UEFI Firmware Vulnerabilities Impact Several Lenovo Notebook Models,

Consumer electronics maker Lenovo on Tuesday rolled out fixes to contain three security flaws in its UEFI firmware affecting over 70 product models.
« The vulnerabilities can be exploited to achieve arbitrary code execution in the early phases of the platform boot, possibly allowing the attackers to hijack the OS execution flow and disable some important security features, » Slovak cybersecurity

,

Consumer electronics maker Lenovo on Tuesday rolled out fixes to contain three security flaws in its UEFI firmware affecting over 70 product models.
« The vulnerabilities can be exploited to achieve arbitrary code execution in the early phases of the platform boot, possibly allowing the attackers to hijack the OS execution flow and disable some important security features, » Slovak cybersecurity

, ,
https://thehackernews.com/2022/07/new-uefi-firmware-vulnerabilities.html

Microsoft a découvert une campagne de phishing ayant touché 10 000 entreprises

Microsoft a découvert une campagne de phishing ayant touché 10 000 entreprises,

,

tete de mort - matrix - hacker -pirate

La firme de Redmond a publié les détails d’une attaque par hameçonnage capable d’outrepasser les comptes protégés avec une double authentification. Au moins 10 000 entreprises auraient été touchées depuis septembre dernier.

L’article Microsoft a découvert une campagne de phishing ayant touché 10 000 entreprises est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/microsoft-a-decouvert-une-campagne-de-phishing-ayant-touche-10-000-entreprises.html

Microsoft Warns of Large-Scale AiTM Phishing Attacks Against Over 10,000 Organizations

Microsoft Warns of Large-Scale AiTM Phishing Attacks Against Over 10,000 Organizations,

Microsoft on Tuesday disclosed that a large-scale phishing campaign targeted over 10,000 organizations since September 2021 by hijacking Office 365’s authentication process even on accounts secured with multi-factor authentication (MFA).
« The attackers then used the stolen credentials and session cookies to access affected users’ mailboxes and perform follow-on business email compromise (BEC)

,

Microsoft on Tuesday disclosed that a large-scale phishing campaign targeted over 10,000 organizations since September 2021 by hijacking Office 365’s authentication process even on accounts secured with multi-factor authentication (MFA).
« The attackers then used the stolen credentials and session cookies to access affected users’ mailboxes and perform follow-on business email compromise (BEC)

, ,
https://thehackernews.com/2022/07/microsoft-warns-of-large-scale-aitm.html

5 Questions You Need to Ask About Your Firewall Security

5 Questions You Need to Ask About Your Firewall Security,

Often, organizations think of firewall security as a one-and-done type of solution. They install firewalls, then assume that they are « good to go » without investigating whether or not these solutions are actually protecting their systems in the best way possible. « Set it and forget it! »
Instead of just relying on firewalls and assuming that they will always protect their businesses from cyber

,

Often, organizations think of firewall security as a one-and-done type of solution. They install firewalls, then assume that they are « good to go » without investigating whether or not these solutions are actually protecting their systems in the best way possible. « Set it and forget it! »
Instead of just relying on firewalls and assuming that they will always protect their businesses from cyber

, ,
https://thehackernews.com/2022/07/5-questions-you-need-to-ask-about-your.html

Researchers Uncover New Variants of the ChromeLoader Browser Hijacking Malware

Researchers Uncover New Variants of the ChromeLoader Browser Hijacking Malware,

Cybersecurity researchers have uncovered new variants of the ChromeLoader information-stealing malware, highlighting its evolving feature set in a short span of time.
Primarily used for hijacking victims’ browser searches and presenting advertisements, ChromeLoader came to light in January 2022 and has been distributed in the form of ISO or DMG file downloads advertised via QR codes on Twitter

,

Cybersecurity researchers have uncovered new variants of the ChromeLoader information-stealing malware, highlighting its evolving feature set in a short span of time.
Primarily used for hijacking victims’ browser searches and presenting advertisements, ChromeLoader came to light in January 2022 and has been distributed in the form of ISO or DMG file downloads advertised via QR codes on Twitter

, ,
https://thehackernews.com/2022/07/researchers-uncover-new-variants-of.html

Researchers Uncover New Attempts by Qakbot Malware to Evade Detection

Researchers Uncover New Attempts by Qakbot Malware to Evade Detection,

The operators behind the Qakbot malware are transforming their delivery vectors in an attempt to sidestep detection.
« Most recently, threat actors have transformed their techniques to evade detection by using ZIP file extensions, enticing file names with common formats, and Excel (XLM) 4.0 to trick victims into downloading malicious attachments that install Qakbot, » Zscaler Threatlabz

,

The operators behind the Qakbot malware are transforming their delivery vectors in an attempt to sidestep detection.
« Most recently, threat actors have transformed their techniques to evade detection by using ZIP file extensions, enticing file names with common formats, and Excel (XLM) 4.0 to trick victims into downloading malicious attachments that install Qakbot, » Zscaler Threatlabz

, ,
https://thehackernews.com/2022/07/researchers-uncover-new-attempts-by.html

Microsoft Releases Fix for Zero-Day Flaw in July 2022 Security Patch Rollout

Microsoft Releases Fix for Zero-Day Flaw in July 2022 Security Patch Rollout,

Microsoft released its monthly round of Patch Tuesday updates to address 84 new security flaws spanning multiple product categories, counting a zero-day vulnerability that’s under active attack in the wild.
Of the 84 shortcomings, four are rated Critical, and 80 are rated Important in severity. Also separately resolved by the tech giant are two other bugs in the Chromium-based Edge browser, one

,

Microsoft released its monthly round of Patch Tuesday updates to address 84 new security flaws spanning multiple product categories, counting a zero-day vulnerability that’s under active attack in the wild.
Of the 84 shortcomings, four are rated Critical, and 80 are rated Important in severity. Also separately resolved by the tech giant are two other bugs in the Chromium-based Edge browser, one

, ,
https://thehackernews.com/2022/07/microsoft-releases-fix-for-zero-day.html

TikTok Postpones Privacy Policy Update in Europe After Italy Warns of GDPR Breach

TikTok Postpones Privacy Policy Update in Europe After Italy Warns of GDPR Breach,

Popular video-sharing platform TikTok on Tuesday agreed to pause a controversial privacy policy update that could have allowed it to serve targeted ads based on users’ activity on the social video platform without their permission to do so.
The reversal, reported by TechCrunch, comes a day after the Italian data protection authority — the Garante per la Protezione dei Dati Personali — warned the

,

Popular video-sharing platform TikTok on Tuesday agreed to pause a controversial privacy policy update that could have allowed it to serve targeted ads based on users’ activity on the social video platform without their permission to do so.
The reversal, reported by TechCrunch, comes a day after the Italian data protection authority — the Garante per la Protezione dei Dati Personali — warned the

, ,
https://thehackernews.com/2022/07/tiktok-postpones-privacy-policy-update.html

Avoiding Death by a Thousand Scripts: Using Automated Content Security Policies

Avoiding Death by a Thousand Scripts: Using Automated Content Security Policies,

Businesses know they need to secure their client-side scripts. Content security policies (CSPs) are a great way to do that. But CSPs are cumbersome. One mistake and you have a potentially significant client-side security gap. Finding those gaps means long and tedious hours (or days) in manual code reviews through thousands of lines of script on your web applications. Automated content security

,

Businesses know they need to secure their client-side scripts. Content security policies (CSPs) are a great way to do that. But CSPs are cumbersome. One mistake and you have a potentially significant client-side security gap. Finding those gaps means long and tedious hours (or days) in manual code reviews through thousands of lines of script on your web applications. Automated content security

, ,
https://thehackernews.com/2022/07/avoiding-death-by-thousand-scripts.html