Security News > 2021

Week in review: SAP apps under attack, Zero Trust creator talks, Patch Tuesday forecast
2021-04-11 08:10

SAP applications are getting compromised by skilled attackersNewly provisioned, unprotected SAP applications in cloud environments are getting discovered and compromised in mere hours, Onapsis researchers have found, and vulnerabilities affecting them are being weaponized in less than 72 hours after SAP releases security patches. MindAPI makes API security research and testing easierSecurity researcher David Sopas has published a new open-source project: MindAPI, a mind map with resources for making API security research easier.

Joker malware infects over 500,000 Huawei Android devices
2021-04-10 19:20

More than 500,000 Huawei users have downloaded from the company's official Android store applications infected with Joker malware that subscribes to premium mobile services. These ten apps were downloaded by more than 538,000 Huawei users, Doctor Web says.

Hands-on with Windows 10's new Google Discover-like news feature
2021-04-10 16:14

Later this year, Windows 10 is getting a new feature that will enable a Google Discover-like newsfeed on the taskbar. This feature is officially called "News and Interests" and it will give news stories, sports scores, finance and weather information.

Android malware found embedded in APKPure store application
2021-04-10 14:40

Security researchers found malware embedded within the official application of APKPure, a popular third-party Android app store and an alternative to Google's official Play Store. The malware was discovered by Kaspersky and Dr.Web malware analysts embedded within an advertisement SDK included with APKPure version 3.7.18.

Windows 10 will soon let you tell Microsoft how you use your PC
2021-04-10 13:25

Windows 10 will soon let you different usage categories, such as Gaming and Business, that tell the operating system how you plan on using the device. In recent Windows 10 builds, Windows sleuth Albacore discovered a hidden Settings screen under the 'Personalization' section called 'Device Usage' that contains six different categories for how you "Plan to use your device."

Windows 10 will soon let you configure six different usage modes
2021-04-10 13:25

Windows 10 will soon let you different usage categories, such as Gaming and Business, that tell the operating system how you plan on using the device. In recent Windows 10 builds, Windows sleuth Albacore discovered a hidden Settings screen under the 'Personalization' section called 'Device Usage' that contains six different categories for how you "Plan to use your device."

Texan's alleged Amazon bombing effort fizzles: Militia man wanted to take out 'about 70 per cent of the internet'
2021-04-09 21:57

The US Justice Department on Friday announced the arrest of Seth Aaron Pendley, 28, for allegedly planning to blow up a single Amazon data center in Ashburn, Virginia, which he thought would knock out around 70 per cent of the internet. The tipser who turned Pendley in is said to have provided authorities with the poster's email address, which was registered by Pendley.

Friday Squid Blogging: Jurassic Squid and Prey
2021-04-09 21:08

Savvy criminals can use the same tricks as the police: if they can discover where and when a photo was taken, it can leave you vulnerable to crimes such as burglary or stalking. In the digital image forensics community, this sensor fingerprint is known as "Photo response non-uniformity".

DOJ: Creep Coach Finagles Nude Athlete Photos
2021-04-09 20:54

A former track-and-field coach who worked at several universities has been arrested and is facing up to five years in prison for attempting to solicit nude photos of his athletes through sham social-media accounts and cyberstalking. The Department of Justice alleged that Steve Waithe, while coaching at Northeastern University, would often ask his athletes to give him their phones during competition and practices, ostensibly, so he could film their form, the U.S. Attorney for the District of Massachusetts said.

The Week in Ransomware - April 9th 2021 - Massive ransom demands
2021-04-09 20:47

Ransomware attacks continue over the past two weeks with a continuation of the massive initial ransom demands we have seen recently. As ransomware stalks the manufacturing sector, victims are still keeping quiet In addition to Norsk Hydro, CyberScoop requested interviews with a dozen manufacturers in Europe and the U.S. that have reportedly had their production disrupted by ransomware incidents in the last two and half years.