2-Spyware — page 3
Top today
Martin BlakeOne check I keep telling people to do: in Windows, go into the browser settings and make sure site notifications are blocked for anything you don’t trust. A lot of fake virus alerts come in that way now, and they look like a Windows warning when they’re just a webpage shouting at you.
Exploited flawsThe Hacker News reports that attackers are trying to exploit a now-patched critical flaw in the Realtek Jungle SDK to deploy the Cling botnet. The malware targets routers and DVRs from multiple vendors, so home users and small offices should make sure their router or device firmware is fully updated and check vendor security advisories for fixes.
Scam alertsMalwarebytes Labs reports that Free Mobile customers received very convincing phishing emails after a major data breach. The post says the emails appeared after the breach and were aimed at customers, so ordinary users should be careful with messages that ask for account details or other personal information and avoid clicking links in unexpected emails.
Malware newsThe Hacker News reports that attackers are actively trying to exploit a critical flaw in Rejetto HTTP File Server. The bug can let a remote attacker forge an administrator session cookie and reach remote code execution, and a patch was released in version 3.2.1. Windows users running Rejetto HFS should update right away and avoid exposing unpatched systems to the internet.
Data breachesDataBreaches.net reports that the Slate Valley Unified School District in Vermont is responding to a security incident and has refused to pay a ransom demand. Kairos says it has 762 GB of data, including SQL databases with personal and medical information about students and employees. People connected to the district should watch for account and identity misuse and follow any district notices.
Claire HollowayOne thing people often miss after a scare: check your browser extensions in Windows and remove anything you don’t recognise. Bad extensions can keep showing fake alerts, change search results, or watch what you type. If one was added recently, treat that as a warning sign.Exploited flawsThe Register reports that exploitation attempts have already been seen against a critical authentication-bypass bug in Rejetto HTTP File Server that can lead to full admin access and remote code execution. If you use Rejetto HFS, update to v3.2.1 or later, which fixes this and other security flaws.
Claire HollowayOne simple check people miss: in Windows Security, make sure Tamper Protection is turned on. If malware gets in, it can try to switch off your protection first. It takes seconds to check, and it closes an easy door attackers like to use.Data breachesDataBreaches.net reports that Italy’s Data Protection Authority fined IQVIA €7 million after finding that a database of health information on one million patients was not anonymous. The authority said the data could be re-identified, and that the company processed health data without a proper legal basis, did not inform patients adequately, and failed to take adequate security measures. People affected should watch their accounts and be careful with any health-related information tied to them.Malware newsThe Hacker News reports that the suspected China-linked group Warlock is still exploiting Microsoft SharePoint vulnerabilities to target organizations in Portuguese- and Spanish-speaking countries. The attacks have hit critical infrastructure, government, and education organizations, so Windows users and small offices running SharePoint should patch and mitigate exposed servers and check for signs of web shells, disabled security tools, or unusual remote connections.
Hannah PriceYesterday on my Windows 11 laptop I got a pop-up saying my browser had been disabled for “security reasons” and I needed to call a number right away. It looked official enough that I almost clicked, but I closed it and checked Task Manager instead. Has anyone else seen these fake warnings lately, and what do you do first?Scam alertsThe Record reports that an international police operation has disrupted the KillSec ransomware group, with three suspects arrested and five servers seized. Authorities say the group used software vulnerabilities and poorly secured entry points to steal data and pressure victims into paying ransoms. Windows users and small offices should keep systems and internet-facing services updated, use strong passwords, and be cautious with unexpected messages or files that could lead to account theft or malware.
Loading…
No more articles
Could not load, try again