Security News

Windows 10 KB5034441 security update fails with 0x80070643 errors
2024-01-10 16:56

Windows 10 users worldwide report problems installing Microsoft's January Patch Tuesday updates, getting 0x80070643 errors when attempting to install the KB5034441 security update for BitLocker. Windows 10 creates a recovery partition, usually around 500 MB, which is not large enough to support the new Windows RE image file, causing the 0x80070643 error when attempting to install the update.

Microsoft Exchange 2019 has reached end of mainstream support
2024-01-10 16:43

Microsoft announced the end of mainstream support for its Exchange Server 2019 on-premises mail server software on January 9, 2023. "Per the Exchange Server 2019 lifecycle, Exchange Server 2019 is now in Extended support. But, as we said last November, a lot more is coming for Exchange Server 2019," said Microsoft Exchange Product Marketing Manager Scott Schnoll on Monday.

ShinyHunters chief phisherman gets 3 years, must cough up $5M
2024-01-10 15:30

A key member of the ShinyHunters cybercrime group is facing three years in the slammer and being forced to return $5 million in criminal proceeds. Sebastien Raoult, 22, was in charge of developing websites for ShinyHunters that mimicked the real login pages of major brands.

NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining
2024-01-10 15:15

A new Mirai-based botnet called NoaBot is being used by threat actors as part of a crypto mining campaign since the beginning of 2023. “The capabilities of the new botnet, NoaBot, include a...

Hackers are targeting exposed MS SQL servers with Mimic ransomware
2024-01-10 14:59

Hackers are brute-forcing exposed MS SQL database servers to deliver Mimic ransomware, Securonix researchers are warning. Mimic ransomware was first spotted in the wild in June 2022 and analyzed by Trend Micro researchers in January 2023.

ShinyHunters member gets 3 years in prison for breaching 60 firms
2024-01-10 14:46

The U.S. District Court in Seattle sentenced ShinyHunters member Sebastien Raoult to three years in prison and ordered a restitution of $5,000,000. Previously, in September 2023, Raoult pleaded guilty to conspiracy to commit wire fraud and aggravated identity theft, facing a maximum punishment of 27 years in prison.

SEC’s X account hacked to post fake news of Bitcoin ETF approval
2024-01-10 13:35

Someone has hijacked the X account of the US Securities and Exchange Commission, and posted an announcement saying the agency has decided to allow the listing of Bitcoin ETFs on registered national security exchanges. SEC X account hijacked, "Unauthorized tweet" posted.

Facial Scanning by Burger King in Brazil
2024-01-10 12:05

In 2000, I wrote: "If McDonald's offered three free Big Macs for a DNA sample, there would be lines around the block." Burger King in Brazil is almost there, offering discounts in exchange for a facial scan.

Getting off the Attack Surface Hamster Wheel: Identity Can Help
2024-01-10 11:30

IT professionals have developed a sophisticated understanding of the enterprise attack surface – what it is, how to quantify it and how to manage it.  The process is simple: begin by thoroughly...

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims
2024-01-10 10:31

A decryptor for the Tortilla variant of the Babuk ransomware has been released by Cisco Talos, allowing victims targeted by the malware to regain access to their files. The cybersecurity firm said...