My Password Manager was Hacked! How to Prevent a Catastrophe
The LastPass security breach in late 2022 sent a shockwave through the security community. Password managers are typically seen as the most secure and trusted…
Category: Bleeping Computer
City of Oakland declares state of emergency after ransomware attack
Oakland has declared a local state of emergency because of the impact of a ransomware attack that forced the City to take all its IT…
Hackers start using Havoc post-exploitation framework in attacks
Security researchers are seeing threat actors switching to a new and open-source command and control (C2) framework known as Havoc as an alternative to paid…
Russian hacker convicted of $90 million hack-to-trade charges
Russian national Vladislav Klyushin was found guilty of participating in a global scheme that involved hacking into U.S. computer networks to steal confidential earnings reports,…
GitHub Copilot update stops AI model from revealing secrets
GitHub has updated the AI model of Copilot, a programming assistant that generates real-time source code and function recommendations in Visual Studio, and says it’s…
Citrix fixes severe flaws in Workspace, Virtual Apps and Desktops
Citrix Systems has released security updates for vulnerabilities in its Virtual Apps and Desktops, and Workspace Apps products. The addressed security problems are categorized as…
Hyundai, Kia patch bug allowing car thefts with a USB cable
Automakers Hyundai and KIA are rolling out an emergency software update on several of their car models impacted by an easy hack that makes it…
Emsisoft says hackers are spoofing its certs to breach networks
A hacker is using fake code-signing certificates impersonating cybersecurity firm Emsisoft to target customers using its security products, hoping to bypass their defenses. Code signing…
NPM packages posing as speed testers install crypto miners instead
A new set of 16 malicious NPM packages are pretending to be internet speed testers but are, in reality, coinminers that hijack the compromised computer’s…
Microsoft Edge update starts disabling Internet Explorer 11 today
Microsoft says the Internet Explorer 11 desktop web browser will be disabled on some Windows 10 systems starting today via a Microsoft Edge update. This…
Microsoft February 2023 Patch Tuesday fixes 3 exploited zero-days, 77 flaws
Tag CVE ID CVE Title Severity .NET and Visual Studio CVE-2023-21808 .NET and Visual Studio Remote Code Execution Vulnerability Critical .NET Framework CVE-2023-21722 .NET Framework…
Windows 10 KB5022834 and KB5022840 updates released
It’s Microsoft’s February 2023 Patch Tuesday, and the new Windows 10 KB5022834 and KB5022840 cumulative updates are now available for versions 22H2, version 21H2, version…