News in the Security category

Unsecured Database Servers Expose 13M MacKeeper Accounts

Unsecured MongoDB database servers allowed a "white-hat" hacker to access the account information for over 13 million MacKeeper users. MacKeeper is a program that supposedly optimizes your Mac so that it runs faster and safer..
- Lawrence Abrams
- December 14, 2015
- 11:28 PM
- 0
New variant of TeslaCrypt released with Minor Changes

A new version of TeslaCrypt was released on Tuesday that contains some minor changes such as new ransom note names, a new name for the autorun entry, and a slight change to how it removes the Shadow Volume Copies.
- Lawrence Abrams
- December 10, 2015
- 09:29 AM
- 8
Anonymous leaks account information for 1,450 United Nations Climate Change Officials

In protest of the arrests of over 200 protesters at the Global Climate March in Paris, Anonymous has leaked account information for over 1,400 UN officials. This information includes login credentials, phone numbers, email address, and names.
- Lawrence Abrams
- December 09, 2015
- 06:35 PM
- 0
Microsoft leaks Xboxlive.com Certificate and what you need to know to Protect Yourself

Microsoft released an advisory yesterday about an accidental leak of their xboxlive.com SSL certificate's private key. This would potentially allow an attacker to perform a man-in-the-middle attack to sniff the encrypted communication.
- Lawrence Abrams
- December 09, 2015
- 06:09 PM
- 0
Apple Releases Security Updates for All of their Core Products

Not to be outdone by Adobe or Microsoft, Apple also released security updates today for all it's core products including Xcode, Safari, watchOS, tvOS, OS X El Capitan, and iOS. These updates resolve 80 different vulnerability ranging from remote code execution to the ability to access a user's keychain items. Any users of Apple produ
- Lawrence Abrams
- December 08, 2015
- 04:42 PM
- 0
Adobe Patches 78 Vulnerabilities in Today's Flash Update

Adobe has released an update for Adobe Flash that resolves a whopping 78 vulnerabilities. This is a required update for anyone who has Flash installed as these vulnerabilities are known to be used in the wild to install malware and other attacks.
- Lawrence Abrams
- December 08, 2015
- 02:37 PM
- 0
Microsoft Releases 12 Security Updates for December's Patch Tuesday

Today Microsoft released their October Patch Tuesday updates that consists of 12 security updates, with eight of them being marked as critical due to vulnerabilities allowing remote code execution. All Windows users should install these security updates immediately.
- Lawrence Abrams
- December 08, 2015
- 01:47 PM
- 0
CryptoWall 4.0 being distributed by Angler Exploit Kit as part of large Malware Campaign

Heimdall Security has discovered that a large campaign utilizing the Angler Exploit kit is underway that is distributing CryptoWall 4.0 along with other malware. This campaign utilizes hacked websites that have been compromised to display the Angler exploit kit to unwitting visitors.
- Lawrence Abrams
- December 02, 2015
- 06:19 PM
- 2
VTech Breach contained Pictures of Children and texts with Parents

A security breach in VTech has allowed a hacker to get the personal information of about 5 million parents and over 200,000 children. To make matters worse, it was discovered this weekend that picture's of children who use the VTech service and their text messages with their parents were obtained as well.
- Lawrence Abrams
- December 01, 2015
- 03:25 PM
- 0
New TeslaCrypt version adds the .VVV Extension to Encrypted Files

A new version of the TeslaCrypt ransomware has been released that changes the ransom note filenames and uses the new .vvv extension for encrypted files. Unfortunately, at this time there is still no way of decrypting files encrypted by this version of TeslaCrypt.
- Lawrence Abrams
- November 30, 2015
- 05:28 PM
- 840
CryptoWall 4 being distributed as a NSIS installer through Exploit Kits

CryptoWall 4.0 has been discovered being installed via the Nuclear Exploit kit. As an added twist, the malware payload is also being delivered as a NSIS installer that when executed installs the CryptoWall 4.0 ransomware.
- Lawrence Abrams
- November 25, 2015
- 05:06 PM
- 0
CryptInfinite or DecryptorMax Ransomware Decrypted

A new file-encrypting ransomware has been floating around this past week called CryptInfinite or DecryptorMax. At first this ransomware looked secure, but with further analysis by Fabian Wosar, it was discovered that a decrypter could be made that would recover your files for free.
- Lawrence Abrams
- November 20, 2015
- 04:21 PM
- 0
Chimera Ransomware uses a Peer-To-Peer Decryption Service

The Chimera Ransomware uses a new technique for distributing decryption keys through a peer-to-peer messaging application called Bitmessage. This method provides a very easy method of pushing decryption keys out to the victim while staying anonymous behind the peer-to-peer network.
- Lawrence Abrams
- November 17, 2015
- 01:56 PM
- 0
New TeslaCrypt version Released with Minimal Changes

A new variant of TeslaCrypt has been released that utilizes the same .CCC extension for encrypted files, but now uses the _how_recover_.HTML and _how_recover_.TXT filenames for the ransom notes.
- Lawrence Abrams
- November 17, 2015
- 10:04 AM
- 6
Google Updates Safe Browsing to warn about Deceptive Sites

Google has updated their Safe Browsing feature to warn visitors of sites that are considered deceptive. Google categorizes deceptive sites as ones that pretend to act, or try to look and feel, like a trusted company or ones that try to trick you into doing something like calling for tech support or installing software.
- Lawrence Abrams
- November 16, 2015
- 11:53 AM
- 0
New Ransomware as a Service announced called Cryptolocker Service

A new Ransomware as a Service has been discovered called the Cryptolocker Service. This service states it will go live in the next few days and allow affiliates to distribute their ransomware for a 10% commission.
- Lawrence Abrams
- November 13, 2015
- 12:59 PM
- 0
Kaspersky Releases 14K Private Decryption Keys for CoinVault Victims

Kaspersky has released 14,000 additional decryption keys for users infected with the CoinVault or BitCryptor ransomware infections. Using their decryption tool you may be able to recover your encrypted files for free.
- Lawrence Abrams
- November 10, 2015
- 07:37 PM
- 3
Adobe Releases Update for Adobe Flash that Resolves 17 Vulnerabilities

Adobe releases security updates for Adobe Flash that fix 17 security vulnerabilities. Out of these 17 vulnerabilities, 16 of them could lead to remote code execution. It is important that everyone update Adobe Flash to the recommended versions so they are no longer affected by these security holes.
- Lawrence Abrams
- November 10, 2015
- 04:30 PM
- 0
Microsoft Releases 12 Security Updates for November's Patch Tuesday

Today Microsoft released 12 security updates, with four of them being marked as critical. Microsoft updates are labeled critical when the vulnerability could be exploited by a remote user to execute code on the attacked machine.
- Lawrence Abrams
- November 10, 2015
- 03:42 PM
- 0
Why Everyone Should disable VSSAdmin.exe Now!

Vssadmin.exe is a utility bundled with Windows that allows you to administer Shadow Volume Copies. Unfortunately, this tool is also being used by Ransomware developers to make it harder for you to recover your files. This article explains how Shadow Volume Copies work and why it is important for every user to disable vssadmin.exe.
- Lawrence Abrams
- November 06, 2015
- 02:55 PM
- 76