Allied Universal Breached by Maze Ransomware, Stolen Data Leaked

Allied Universal Breached by Maze Ransomware, Stolen Data Leaked

After a deadline was missed for receiving a ransom payment, the group behind Maze Ransomware has published almost 700 MB worth of data and files stolen from security staffing firm Allied Universal. We are told this is only 10% of the total files stolen and the rest will be released if a payment is not made.

^{www.bleepingcomputer.com}

Edenred Payment Solutions Giant Announces Malware Incident

Edenred Payment Solutions Giant Announces Malware Incident

Payment solutions giant Edenred today revealed in a statement that a malware incident affected an undisclosed number of its computing systems leading to an investigation for establishing the extent of the infection.

^{www.bleepingcomputer.com}

Windows 10 1909 Drops Exploit Protection From Security Baseline

Windows 10 1909 Drops Exploit Protection From Security Baseline

Microsoft released the final version of its security configuration baseline settings for Windows 10 Version 1909 and Windows Server Version 1909, and also announced the removal of Exploit Protection settings and explicit enforcement of 30-day account password expiration for domain-joined devices.

^{www.bleepingcomputer.com}

T-Mobile Discloses Data Breach Impacting Prepaid Customers

T-Mobile Discloses Data Breach Impacting Prepaid Customers

T-Mobile said today in a data breach notification that the account information of an undisclosed number of customers using the company's prepaid services was accessed by an unauthorized third-party.

^{www.bleepingcomputer.com}

Microsoft 365 Experiencing OneDrive and SharePoint Outages

Microsoft 365 Experiencing OneDrive and SharePoint Outages

Right on the heels of yesterday's four hour outage, Microsoft 365 is once again experiencing problems. This time it is for the SharePoint Online and OneDrive for Business services where content is not loading or sites are not accessible.

^{www.bleepingcomputer.com}

Card Skimmer Group Replaces Checkout Page to Steal Payment Info

Card Skimmer Group Replaces Checkout Page to Steal Payment Info

A payment service platform's checkout page was recently cloned by the threat actors behind a web skimming campaign that harvested and stole credit card information from an online shop's customers.

^{www.bleepingcomputer.com}

Microsoft Outlook for Android Gets Spoofing Vulnerability Fix

Microsoft Outlook for Android Gets Spoofing Vulnerability Fix

Microsoft has released an update for Microsoft Outlook for Android that fixes a spoofing vulnerability in the application that could allow an attacker to compromise the device.

^{www.bleepingcomputer.com}

Google Adds $1.5 Million Top Reward to Android Bug Bounty Program

Google Adds $1.5 Million Top Reward to Android Bug Bounty Program

Google is expanding the Android bug bounty program with new data exfiltration and lockscreen bypass categories as well as a $1 million reward for critical vulnerabilities targeting the Titan M chip.

^{www.bleepingcomputer.com}

DePriMon Malware Registers Itself as a Windows Print Monitor

DePriMon Malware Registers Itself as a Windows Print Monitor

A malware downloader being dubbed DePriMon registers itself as a Windows print monitor in order to gain persistence on infected user's computers.

^{www.bleepingcomputer.com}

New RIPlace Bypass Evades Windows 10, AV Ransomware Protection

New RIPlace Bypass Evades Windows 10, AV Ransomware Protection

A new ransomware bypass technique called RIPlace requires only a few lines of code to bypass ransomware protection features built into many security products and Windows 10.​​​

^{www.bleepingcomputer.com}

Microsoft Warns Customers of DoppelPaymer Ransomware Threat

Microsoft Warns Customers of DoppelPaymer Ransomware Threat

The Microsoft Security Response Center (MSRC) warned customers of the threat behind ongoing DoppelPaymer ​​​​​​​ransomware attacks and reminded them about misleading info on how it spreads.

^{www.bleepingcomputer.com}

Linux Webmin Servers Being Attacked by New P2P Roboto Botnet

Linux Webmin Servers Being Attacked by New P2P Roboto Botnet

Linux servers running unpatched Webmin installations are under attack and slowly getting added to a new peer-to-peer (P2P) botnet dubbed Roboto by security researchers at 360 Netlab who tracked it for roughly three months.

^{www.bleepingcomputer.com}

Intel Posts Letter Apologizing for Continued CPU Shortages

Intel Posts Letter Apologizing for Continued CPU Shortages

In a letter posted to their web site, Intel apologizes for their continued CPU shortage, and while they have invested record levels of capital expenditure in their manufacturing, it has not been enough to meet demands.

^{www.bleepingcomputer.com}

Massive Android Exploit Lets Hackers Control Your Camera, Affects 'Hundreds of Millions' of Users | PetaPixel

A security firm has discovered a major Android exploit that would allow hackers to take control of your smartphone’s camera in the background and use it to take pictures or record video while the phone is locked. The security report reveals that the exploit affects Google and Samsung smartphones, bringing the tally of affected users into the “hundreds of millions.”

Millions of Sites Exposed by Flaw in Jetpack WordPress Plugin

Millions of Sites Exposed by Flaw in Jetpack WordPress Plugin

Admins and owners of WordPress websites are urged to immediately apply the Jetpack 7.9.1 critical security update to prevent potential attacks that could abuse a vulnerability present since Jetpack 5.1.

^{www.bleepingcomputer.com}

uBlock Origin Now Blocks Sneaky First-Party Trackers in Firefox

uBlock Origin Now Blocks Sneaky First-Party Trackers in Firefox

uBlock Origin on Firefox can now block first-party tracking scripts that attempt to bypass filters and rules by utilizing DNS CNAME records to load scripts from a third-party domain.

^{www.bleepingcomputer.com}

New Banking Trojan Infects Victims via McDonald’s Malvertising

New Banking Trojan Infects Victims via McDonald’s Malvertising

A new banking Trojan distributed via malvertising and malspam campaigns using fake McDonald's coupons as lures was observed while attempting to steal financial information from potential Latin American victim.

^{www.bleepingcomputer.com}

Ransomware Gangs Adopt APT Tactics in Targeted Attacks

Ransomware Gangs Adopt APT Tactics in Targeted Attacks

Ransomware operators are moving away from mass volume attacks and partnering with specialists who use APT techniques to provide stealthy infiltration and network-wide encryption capabilities.

^{www.bleepingcomputer.com}

Human patient put in suspended animation for the first time | Engadget

According to New Scientist, doctors have successfully placed humans in suspended animation for the first time, in a trial that could have an enormous influence on the future of emergency room surgery.

Human patient put in suspended animation for the first time

Blood is replaced with ice-cold saline.

^{www.engadget.com}

Microsoft is bringing Gmail, Google Drive, and Calendar to Outlook.com | The Verge

Microsoft is planning to integrate Gmail, Google Drive, and Google Calendar into its Outlook.com web mail client. The software maker has started testing this integration on some accounts recently, and Twitter user Florian B was able to access it today. After a quick setup process, you simply link a Google Account to an Outlook.com account, and Gmail, Drive documents, and Google Calendar will all be automatically displayed inside Outlook.com on the web.

Microsoft is bringing Gmail, Google Drive, and Calendar to Outlook.com

Outlook is getting full Google integration on the web with the best features from Gmail, Drive, and Calendar

^{www.theverge.com}

Invasive scheme spotted that foxes tracker blockers | TechCrunch

The tracker in question was spotted being deployed by French national newspaper, Liberation, which in October promised subscribers an entirely tracker-free experience.

That promise garnered it a bunch of attention from privacy experts who dug around and found a first-party tracker embedded on its site which uses a subdomain (that’s mostly random) in order to redirect to a third party — thereby making it difficult to block (i.e. without also blocking Liberation’s own domain).

Desktop Linux Apps Running on the PinePhone [Video]| OMG! Ubuntu!

A big selling point of the PinePhone is that it supports the mainline Linux kernel, thus traditional Linux distros and regular desktop Linux software.
Now, desktop Linux apps are rarely tailored for touch input on a desktop, laptop or tablet screen, much less touch input on a space constrained mobile one.
But the ability to run Linux apps on the PinePhone device is something a fair few folks are curious about.

Senators ask Zuckerberg to explain Facebook location-tracking policies | CNBC

Sens. Josh Hawley, R-Mo., and Chris Coons, D-Del., have asked Facebook CEO Mark Zuckerberg to explain how the company tracks users’ locations under restricted settings.
In a letter sent Tuesday, the senators say Zuckerberg should address concerns with the location-tracking policy announced in response to privacy updates made in the latest versions of Apple and Google’s mobile operating systems.
In a September post explaining the policy, Facebook said it can determine users’ locations from factors like their internet connection, even if they have their location settings restricted.

Senators want Zuckerberg to explain why Facebook still tracks your location even when you ask it not to

Sens. Josh Hawley, R-Mo., and Chris Coons, D-Del., asked how Facebook tracks users' locations under restricted settings.

^www.cnbc.com

Thousands of Enterprises At Risk Due to Oracle EBS Critical Flaws

Thousands of Enterprises At Risk Due to Oracle EBS Critical Flaws

Two critical security vulnerabilities discovered in Oracle's E-Business Suite (EBS) could allow potential attackers to take full control over a company's entire enterprise resource planning (ERP) solution.

^{www.bleepingcomputer.com}

NSA Publishes Advisory Addressing Encrypted Traffic Inspection Risks

NSA Publishes Advisory Addressing Encrypted Traffic Inspection Risks

The National Security Agency (NSA) published an advisory that addresses the risks behind Transport Layer Security Inspection (TLSI) and provides mitigation measures for weakened security in organizations that use TLSI products.

^{www.bleepingcomputer.com}

Microsoft Fixes Office 2016 Access Query Error, More Fixes Coming

Microsoft Fixes Office 2016 Access Query Error, More Fixes Coming

Microsoft fixed a known issue occurring for Update queries in Click-2-Run and Windows Installer (MSI) editions of Access 2016, triggering errors when accessing databases and breaking functionality for various apps using Access databases.

^{www.bleepingcomputer.com}

You can now use the Windows Update Assistant to install the November 2019 Update | OnMSFT.com

Perhaps feeling pretty confident about this current update, Microsoft is now enabling more ways for users to modify their current Windows 10 operating system.

Aside from going to the settings menu and hoping it shows up, Windows 10 users can now update their system using the Windows Update Assistant according to a report from MSPU.

Critical Windows Update Spam Fails at Delivering Ransomware

Critical Windows Update Spam Fails at Delivering Ransomware

A new spam campaign pretending to be a 'Critical Microsoft Windows Update' has been discovered that attempts to deliver the Cyborg Ransomware, but turns out to be an utter failure.

^{www.bleepingcomputer.com}

Coin Stealer Found in Monero Linux Binaries From Official Site

Coin Stealer Found in Monero Linux Binaries From Official Site

The Monero Project is currently investigating a potential compromise of the official website after a coin stealer was found in the Linux 64-bit command line (CLI) Monero binaries downloaded from the download page.

^{www.bleepingcomputer.com}

Android Camera App Bug Lets Apps Record Video Without Permission

Android Camera App Bug Lets Apps Record Video Without Permission

A new vulnerability has been found in the Camera apps for millions, if not hundreds of millions, of Android devices that could allow other apps to record video, take pictures, and extract GPS data from media without having the required permissions.

^{www.bleepingcomputer.com}

Shade Ransomware Is the Most Actively Distributed Malware via Email

Shade Ransomware Is the Most Actively Distributed Malware via Email

During the first half of 2019, the Shade Ransomware (also known as Troldesh) was the most actively distributed malware via malicious email phishing campaigns according to Singapore-based Group-IB security outfit.

^{www.bleepingcomputer.com}

Google, Samsung Camera App Bug Lets Other Apps Record Video, Take Pictures

Google, Samsung Camera App Bug Lets Other Apps Record Video, Take Pictures

A new vulnerability has been found in the Camera apps for millions, if not hundreds of millions, of Android devices that could allow other apps to record video, take pictures, and extract GPS data from media without having the required permissions.

^{www.bleepingcomputer.com}

Louisiana Government Suffers Outage Due to Ransomware Attack

Louisiana Government Suffers Outage Due to Ransomware Attack

The state government of Louisiana was hit by a ransomware attack today that impacted numerous state services including the Office of Motor Vehicles, the Department of Health, and the Department of Transportion and Development.

^{www.bleepingcomputer.com}

Macy's Customer Payment Info Stolen in Magecart Data Breach

Macy's Customer Payment Info Stolen in Magecart Data Breach

Macy's has announced that they have suffered a data breach due to their web site being hacked with malicious scripts that steal customer's payment information.

^{www.bleepingcomputer.com}

Microsoft Is Adding DNS-Over-HTTPS (DoH) to Windows 10

Microsoft Is Adding DNS-Over-HTTPS (DoH) to Windows 10

Microsoft announced that it's working on adding support for the privacy-focused DNS over HTTPS (DoH) protocol in a future Windows 10 release, while also keeping the addition of DNS over TLS (DoT) on the table.

^{www.bleepingcomputer.com}

IRS Publishes Guidance to Help Taxpayers Fight Identity Theft

IRS Publishes Guidance to Help Taxpayers Fight Identity Theft

Security Summit partners including the Internal Revenue Service (IRS), the US tax industry, and several state tax agencies published security guidance and updated content to highlight identity theft precautions to be taken during the incoming holiday shopping season.

^{www.bleepingcomputer.com}

Google Chrome's 'Close Other Tabs' Option Is Back!

Google Chrome's 'Close Other Tabs' Option Is Back!

Google just released Google Chrome 78.0.3904.108 and with it is the return of the 'Close other tabs' feature that Google mistakenly took out in previous versions.

^{www.bleepingcomputer.com}

Buran Ransomware Infects PCs via Microsoft Excel Web Queries

Buran Ransomware Infects PCs via Microsoft Excel Web Queries

A new spam campaign has been spotted distributing the Buran Ransomware through IQY file attachments. When opened, these Microsoft Excel Web Query attachments will execute a remote command that installs the ransomware onto a victim's computer.

^{www.bleepingcomputer.com}

Linux, Windows Users Targeted With New ACBackdoor Malware

Linux, Windows Users Targeted With New ACBackdoor Malware

Researchers have discovered a new multi-platform backdoor that infects Windows and Linux systems allowing the attackers to run malicious code and binaries on the compromised machines.

^{www.bleepingcomputer.com}

Dad on How Apple Watch Noise App Helped Son with Autism | PEOPLE.com

Scott Bennett had run out of ideas to get his youngest son Sam to keep his voice down.
Sam, 21, is on the autism spectrum, and though he’s the epitome of a social butterfly — “People just fall in love with him,” Scott tells PEOPLE — he’s long struggled with an exceptionally loud speaking voice.

Texas Dad Says Apple Watch Changed the Life of His Son with Autism: 'We Had Tried Everything'

Sam Bennett, 21, had long struggled to control the volume of his voice

^people.com

Thousands flock to Wikipedia founder's 'Facebook rival' | BBC News

The founder of Wikipedia, Jimmy Wales, says his new social network, WT:Social, now has more than 160,000 members.

Thousands flock to Wikipedia's 'Facebook rival'

Jimmy Wales says his new social network, WT:Social, now has more than 160,000 members.

^{www.bbc.co.uk}

Intel is Removing End of Life Drivers and BIOS Downloads

Intel is Removing End of Life Drivers and BIOS Downloads

If you are user of old Intel hardware, be sure to create a backup of your drivers or BIOS updates as Intel will no longer make them available for download once they reach end of life.

^{www.bleepingcomputer.com}

Intel Removes End of Life Drivers and Bios Downloads

Intel Removes End of Life Drivers and Bios Downloads

If you are user of old Intel hardware, be sure to create a backup of your drivers or BIOS updates as Intel will no longer make them available for download once they reach end of life.

^{www.bleepingcomputer.com}

Microsoft to Stop Supporting Cortana on Android and iOS

Microsoft to Stop Supporting Cortana on Android and iOS

Microsoft has announced that they will no longer support the Cortana digital personal assistant app on Android and iOS devices starting in 2020.

^{www.bleepingcomputer.com}

Cortana app will stop working on phones in some countries (updated) | Engadget

Microsoft's changing Cortana strategy is about to have consequences for some phone users. The company has revealed that the Cortana app will stop working after January 31st, 2020 for people in Australia, Canada and the UK. Lists, reminders and other Cortana content won't pop up in either the app or Microsoft Launcher, and a version of the Launcher will arrive after January with Cortana removed. You can still expect Cortana material to show up in the To Do app, but you won't have a central place to create it on your phone.

Cortana app will stop working on phones in some countries (updated)

Microsoft won't offer the voice helper in those areas after January 2020.

^{www.engadget.com}