scr3: May 2019

Friday 31 May 2019

Chrome Extensions Policy Hits Deceptive Installation Tactics

Google this week announced a new policy that aims at eliminating the use of deceptive installation tactics among Chrome browser extensions.

from SecurityWeek RSS Feed http://bit.ly/2KhpoAf
via https://ifttt.com/ IFTTT

Researchers Dissect PowerShell Scripts Used by Russia-Linked Hackers

Security researchers from ESET have analyzed several PowerShell scripts used by the Russia-linked Turla threat group in recent attacks.

from SecurityWeek RSS Feed http://bit.ly/2Mo9x5m
via https://ifttt.com/ IFTTT

Microsoft Reminds Users to Patch Wormable 'BlueKeep' Vulnerability

Microsoft has reminded users to patch the Windows vulnerability tracked as BlueKeep and CVE-2019-0708 due to the high risk of exploitation.

from SecurityWeek RSS Feed http://bit.ly/3179kHg
via https://ifttt.com/ IFTTT

Новый вредонос атакует Linux и заимствует часть кода у Azazel и Mirai

Эксперты в области безопасности сообщили об обнаружении нового вида вредоносной программы, атакующей системы Linux. Специалисты полагают, что за созданием этого вредоноса стоят киберпреступники из Китая, цель которых — удаленно контролировать зараженные системы.

from Новости информационной безопасности - Anti-Malware.ru http://bit.ly/2HM3djU
via https://ifttt.com/ IFTTT

Public Exposure of Sensitive Files on the Internet is Getting Worse

2.3 billion files are currently exposed and accessible through misconfigured network-attached storage (NAS) devices, FTP and rsync servers, and Amazon S3 buckets to anyone on the internet. That's 750 million more than 12 months ago, and despite Amazon's largely successful attempts to limit the exposure of its S3 buckets.