23andMe says, er, actually some genetic and health data might have been accessed in recent breach
In October we reported that the data of as many as seven million 23andMe customers were for sale on criminal forums following a password attack…
Category: MalwareBytes
Why a ransomware gang tattled on its victim, with Allan Liska: Lock and Code S04E24
This week on the Lock and Code podcast… Like the grade-school dweeb who reminds their teacher to assign tonight’s homework, or the power-tripping homeowner who…
Update your iPhones! Apple fixes two zero-days in iOS
Apple has released emergency security updates for iOS 17.1.2 and iPadOS 17.1.2 to patch for two zero-day vulnerabilities that may have been actively exploited. Apple…
Social media giants to testify over failing to protect kids
US senators have urgently invited the CEOs of five of the major social media giants to testify about their failure to protect children online. The…
Explained: Domain fronting | Malwarebytes
Domain fronting is a technique of using different domain names on the same HTTPS connection. Put simply, domain fronting hides your traffic when connecting to…
Will ChatGPT write ransomware? Yes.
This morning I decided to write some ransomware, and I asked ChatGPT to help. Not because I wanted to turn to a life of crime,…
Associated Press, ESPN, CBS among top sites serving fake virus alerts
ScamClub is a threat actor who’s been involved in malvertising activities since 2018. Chances are you probably ran into one of their online scams on…
Meta sued over forcing users to pay to stop tracking
Meta is required to get users’ consent in Europe in order to show them targeted ads. For this reason, Meta has to provide European users with…
Update now! Chrome fixes actively exploited zero-day vulnerability
Google has released an update to Chrome which includes seven security fixes including one for a vulnerability which is known to have already been exploited.…
Many major websites allow users to have weak passwords
A new study that examines the current state of password policies across the internet shows that many of the most popular websites allow users to…
Ransomware gangs and Living Off the Land (LOTL) attacks: A deep dive
We’ve told you about ransomware-as-a-service (RaaS) gangs; we’ve told you about living off the Land (LOTL) attacks. What do you get when you bring the…
ownCloud vulnerability can be used to extract admin passwords
ownCloud has warned users about three critical security flaws in its file-sharing software which, if exploited, could reveal sensitive information and modify files. An especially…