Malwarebytes
- 18 avril 2024 Law enforcement reels in phishing-as-a-service whopper
A major international law enforcement effort involving agencies from 19 countries has disrupted the notorious LabHost phishing-as-a-service platform. Europol reports that the organization’s infrastructure has been compromised, its website shut down, and 37 suspects arrested, including four people in the UK linked to the running of the site, which also allegedly included the original develope … - 18 avril 2024 Mental health company Cerebral failed to protect sensitive personal data, must pay $7 million
The Federal Trade Commission (FTC) has reached a settlement with online mental health services company Cerebral after the company was charged with failing to secure and protect sensitive health data. Cerebral has agreed to an order that will restrict how the company can use or disclose sensitive consumer data, as well as require it to provide consumers with a simple way to cancel services. After a … - 18 avril 2024 Cannabis investment scam JuicyFields ends in 9 arrests
Europol and its associates have arrested 9 people in conjunction with a cannabis investment scam known as “JuicyFields”. The suspects used social media to lure investors to their website. There they found information about a “golden opportunity” to invest in the cultivation, harvesting and distribution of cannabis plants to be used for medicinal purposes. Taken from the JuicyFields web … - 17 avril 2024 Should you share your location with your partner?
Every relationship has its disagreements. Who takes out the trash and washes the dishes? Who plans the meals and writes out the grocery list? And when is it okay to start tracking one another’s location? Location sharing is becoming the norm between romantic partners—50% of people valued location sharing in their relationships, according to recent research from Malwarebytes—and plenty of co … - 16 avril 2024 Giant Tiger breach sees 2.8 million records leaked
Someone has posted a database of over 2.8 million records to a hacker forum, claiming they originated from a March 2024 hack at Canadian retail chain Giant Tiger. When asked, they posted a small snippet as proof. The download of the full database is practically free for other active members of that forum. In March, one of Giant Tiger‘s vendors, a company used to manage customer communications and … - 15 avril 2024 A week in security (April 8 – April 14)
Last week on Malwarebytes Labs: How to change your Social Security Number Apple warns people of mercenary attacks via threat notification system How to check if your data was exposed in the AT&T breach Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities How to protect yourself from online harassment Introducing the Digital Footprint Portal New ransomwa … - 12 avril 2024 How to change your Social Security Number
After seeing their Social Security Number (SSN) leaked in the AT&T breach, some US citizens are wondering if and how they can change their SSN. The good news is that even though it’s a challenging process, it is possible. But if you’ve ever had to abandon an email address that you used for years, imagine all of the hassle that came with that, and then imagine it being about 10 times wors … - 11 avril 2024 Apple warns people of mercenary attacks via threat notification system
Apple has reportedly sent alerts to individuals in 92 nations on Wednesday, April 10, to say it’s detected that they may have been a victim of a mercenary attack. The company says it has sent out these types of threat notifications to over 150 countries since the start in 2021. Mercenary spyware is used by governments to target people like journalists, political activists, and similar target … - 11 avril 2024 How to check if your data was exposed in the AT&T breach
AT&T has notified US state authorities and regulators about its recent (or not) data breach, saying 51,226,382 people were affected. For those that have missed the story so far: Back in 2021, a hacker named Shiny Hunters claimed to have breached AT&T. On March 20, 2024, we reported how the data of over 70 million people was posted for sale on an online cybercrime forum. The seller claimed … - 11 avril 2024 Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities
The April 2024 Patch Tuesday update includes patches for 149 Microsoft vulnerabilities and republishes 6 non-Microsoft CVEs. Three of those 149 vulnerabilities are listed as critical, and one is listed as actively exploited by Microsoft. Another vulnerability is claimed to be a zero-day by researchers that have found it to be used in the wild. Let’s first have a look at the two zero-days. The Comm …
ESET
- 29 mars 2024RDP remains a security concern – Week in security with Tony Anscombe
Much has been written about the risks that poorly-secured RDP connections entail, but many organizations continue to leave themselves at risk and get hit by data breaches as a result - 22 mars 2024AceCryptor attacks surge in Europe – Week in security with Tony Anscombe
The second half of 2023 saw massive growth in AceCryptor-packed malware spreading in the wild, including courtesy of multiple spam campaigns where AceCryptor packed the Rescoms RAT - 26 mars 2024Borrower beware: Common loan scams and how to avoid them
Personal loan scams prey on your financial vulnerability and might even trap you in a vicious circle of debt. Here’s how to avoid being scammed when considering a loan. - 28 mars 2024Cybercriminals play dirty: A look back at 10 cyber hits on the sporting world
This rundown of 10 cyberattacks against the sports industry shows why every team needs to keep its eyes on the ball when it comes to cybersecurity - 25 mars 2024Cybersecurity starts at home: Help your children stay safe online with open conversations
Struggle to know how to help children and teens stay safe in cyberspace? A good ol’ fashioned chat is enough to put them on the right track. - 19 mars 2024A prescription for privacy protection: Exercise caution when using a mobile health app
Given the unhealthy data-collection habits of some mHealth apps, you’re well advised to tread carefully when choosing with whom you share some of your most sensitive data - 15 mars 2024Healthcare still a prime target for cybercrime gangs – Week in security with Tony Anscombe
Healthcare organizations remain firmly in attackers’ crosshairs, representing 20 percent of all victims of ransomware attacks among critical infrastructure entities in the US in 2023 - 14 mars 2024Threat intelligence explained | Unlocked 403: A cybersecurity podcast
We break down the fundamentals of threat intelligence and its role in anticipating and countering emerging threats - 20 mars 2024Rescoms rides waves of AceCryptor spam
Insight into ESET telemetry statistics about AceCryptor in H2 2023 with a focus on Rescoms campaigns in European countries - 13 mars 2024How to share sensitive files securely online
Here are a few tips for secure file transfers and what else to consider when sharing sensitive documents so that your data remains safe
ESET Support
- 18 avril 2024ESET MSP Administrator version 2.6.43 has been released
ESET MSP Administrator version 2.6.43 has been released. - 16 avril 2024ESET Inspect On-Prem version 2.1.3779.0 has been released
ESET Inspect On-Prem version 2.1.3779.0 has been released and is available for download. - 16 avril 2024ESET Endpoint Encryption version 5.2.54.0 has been released
ESET Endpoint Encryption (EEE) version 5.2.54.0 has been released and is available in the Web Console repository. - 4 avril 2024ESET PROTECT version 5.2 has been released
ESET PROTECT version 5.2 has been released. The staged roll-out will begin on April 4, 2024. - 2 avril 2024ESET Full Disk Encryption (EFDE) version 1.4.62.0 has been released
ESET Full Disk Encryption (EFDE) version 1.4.62.0 has been released and is available for download. - 2 avril 2024ESET Mail Security for Microsoft Exchange Server version 11.0 has been released
ESET Mail Security for Microsoft Exchange Server version 11.0 has been released and is available for download. - 2 avril 2024ESET Security for Microsoft SharePoint Server version 11.0 has been released
ESET Security for Microsoft SharePoint Server version 11.0 has been released and is available for download. - 27 mars 2024ESET Inspect version 2.1.3771 has been released
ESET Inspect version 2.1.3771 has been released. - 26 mars 2024ESET PROTECT On-Prem Virtual Appliance version 11.0 for Rocky Linux 9 has been released
ESET PROTECT On-Prem Virtual Appliance version 11.0 for Rocky Linux 9 has been released and is available to download and update. - 20 mars 2024ESET Direct Endpoint Management plugin for NinjaOne 2.0 has been released
ESET Direct Endpoint Management plugin NinjaOne 2.0 has been released and is available to download.