Security News

Hackers now sharing cracked Brute Ratel post-exploitation kit online
2022-09-28 23:00

The Brute Ratel post-exploitation toolkit has been cracked and is now being shared for free across Russian-speaking and English-speaking hacking communities. Things are about to change, as cyber threat intelligence researcher Will Thomas has reported that a cracked copy of Brute Ratel is now circulating widely among threat actors in online hacking forums.

Microsoft to retire Exchange Online client access rules in a year
2022-09-27 19:11

Microsoft announced today that it will retire Client Access Rules in Exchange Online within a year, by September 2023. CARs are sets of conditions, exceptions, actions, and priority values that allow Microsoft 365 admins to filter client access to Exchange Online based on many factors.

LockBit ransomware builder leaked online by “angry developer”
2022-09-21 18:07

The LockBit ransomware operation has suffered a breach, with an allegedly disgruntled developer leaking the builder for the gang's newest encryptor. After security researcher 3xp0rt shared the tweet about the leaked LockBit 3.0 builder, VX-Underground shared that they were contacted on September 10th by a user named 'protonleaks,' who also shared a copy of the builder.

Become an ethical hacker online
2022-09-17 09:00

Become an ethical hacker online We may be compensated by vendors who appear on this page through methods such as affiliate links or sponsored partnerships. Whether you're running a business worried about cybercrime or looking to earn some more money, becoming an ethical hacker can be a big boost.

Week in review: Free online cybersec courses, Signal post-quantum upgrade, Patch Tuesday forecast
2022-09-11 08:00

Apple strengthens security and privacy in iOS 16Apple announced additional security and privacy updates for its newest mobile operating system. Government guide for supply chain security: The good, the bad and the uglyJust as developers and security teams were getting ready to take a breather and fire up the BBQ for the holiday weekend, the U.S.'s most prestigious security agencies dropped a 60+ page recommended practice guide, Securing the Software Supply Chain for Developers.

7 free online cybersecurity courses you can take right now
2022-09-07 03:30

Below you can find a list of free online cybersecurity courses that can help further your career. The course begins with a detailed discussion of how two parties who have a shared secret key can communicate securely when a powerful adversary eavesdrops and tampers with traffic.

62% of consumers see fraud as an inevitable risk of online shopping
2022-09-06 03:00

59% of consumers are more concerned about becoming a victim of fraud now than they were in 2021, according to ac research released by Paysafe. Consumers across North America, Latin America and Europe are prioritising security over convenience when making online purchases, as the impact of rising inflation and energy prices continues to fuel financial worries.

Microsoft will disable Exchange Online basic auth next month
2022-09-01 17:42

Microsoft warned customers today that it will finally disable basic authentication in random tenants worldwide to improve Exchange Online security starting October 1, 2022."Since our first announcement nearly three years ago, we've seen millions of users move away from basic auth, and we've disabled it in millions of tenants to proactively protect them. We're not done yet though, and unfortunately usage isn't yet at zero. Despite that, we will start to turn off basic auth for several protocols for tenants not previously disabled," the Exchange Team said today.

There’s a problem with online ads, and it’s not what you think
2022-08-25 11:30

The saturation of online ads isn't the problem. The problem is that online ads are ruining the experience by crushing my CPU. I cannot tell you how many times I've gone to a site, only to see the page inundated with ads that spike my CPU usage and bring my desktop to a screaming halt.

Over 80,000 exploitable Hikvision cameras exposed online
2022-08-22 21:48

Security researchers have discovered over 80,000 Hikvision cameras vulnerable to a critical command injection flaw that's easily exploitable via specially crafted messages sent to the vulnerable web server. CYFIRMA says Russian-speaking hacking forums often sell network entrance points relying on exploitable Hikvision cameras that can be used either for "Botnetting" or lateral movement.