Security News
CISA warns orgs to switch to Exchange Online Modern Auth until October
CISA has urged government agencies and private sector organizations using Microsoft's Exchange cloud email platform to expedite the switch from Basic Authentication legacy authentication methods without multifactor authentication (MFA) support to Modern Authentication alternatives.
Bleepingcomputer
30 Jun 2022 1205 Views
New YTStealer Malware Aims to Hijack Accounts of YouTube Content Creators
Cybersecurity researchers have documented a new information-stealing malware that targets YouTube content creators by plundering their authentication cookies.
The Hacker News
30 Jun 2022 1000 Views
FBI: Stolen PII and deepfakes used to apply for remote tech jobs
The Federal Bureau of Investigation (FBI) warns of increasing complaints that cybercriminals are using Americans' stolen Personally Identifiable Information (PII) and deepfakes to apply for remote work positions. [...]
Bleepingcomputer
29 Jun 2022 1012 Views
Microsoft 365 now prevents data leaks with new session timeouts
Microsoft announced today the general availability of tenant-wide idle session timeout for Microsoft 365 web apps to protect confidential data on shared or non-company devices left unattended. [...]
Bleepingcomputer
29 Jun 2022 1322 Views
Italy Data Protection Authority Warns Websites Against Use of Google Analytics
Following the footsteps of Austria and France, the Italian Data Protection Authority has become the latest regulator to find the use of Google Analytics to be non-compliant with E.U. data protection regulations.
The Hacker News
28 Jun 2022 1085 Views
Microsoft will fix Windows RRAS, VPN issues for all users in July
Microsoft has finally confirmed Internet connectivity issues affecting servers with Routing and Remote Access Service (RRAS) enabled after installing Windows updates released as part of this month's Patch Tuesday.
The Hacker News
28 Jun 2022 1098 Views
Clever phishing method bypasses MFA using Microsoft WebView2 apps
A clever, new phishing technique uses Microsoft Edge WebView2 applications to steal victim's authentication cookies, allowing threat actors to bypass multi-factor authentication when logging into stolen accounts. [...]
Bleepingcomputer
26 Jun 2022 1209 Views
Fake copyright infringement emails install LockBit ransomware
LockBit ransomware affiliates are using an interesting trick to get people into infecting their devices by disguising their malware as copyright claims. [...]
Bleepingcomputer
26 Jun 2022 1149 Views
Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware
A week after it emerged that a sophisticated mobile spyware dubbed Hermit was used by the government of Kazakhstan within its borders, Google said it has notified Android users of infected devices. Additionally, necessary changes have been implemented in Google Play Protect — Android's...
The Hacker News
25 Jun 2022 1102 Views
NSA shares tips on securing Windows devices with PowerShell
The National Security Agency (NSA) and cybersecurity partner agencies issued an advisory today recommending system administrators to use PowerShell to prevent and detect malicious activity on Windows machines. [...]
Bleepingcomputer
24 Jun 2022 1399 Views
