4 over-hyped security vulnerabilities of 2022

Categories: Exploits and vulnerabilities

Categories: News

Tags: wormable

Tags: zero-day

Tags: spring4shell

Tags: cve-2022-34718

Tags: log4j

Tags: openssl

Tags: cve-2022-36934

Tags: cve-2022-27492

Tags: cve-2022-22965

Tags: cve-2022-22963

What does it take to make the discussion of vulnerabilities useful? And where did this go wrong in 2022?

(Read more…)

The post 4 over-hyped security vulnerabilities of 2022 appeared first on Malwarebytes Labs.

Read more

A week in security (December 12 – 18)

Categories: News

Tags: week in security

Tags: AWIS

Tags: weekly blog recap

Tags: Indiana

Tags: TikTok

Tags: MSP

Tags: electronic sales suppression tools

Tags: iPhone

Tags: Play ransomware

Tags: ransomware

Tags: Nebula

Tags: Quarantine for Cloud Storage Scanning

Tags: SOC

Tags: ROI

Tags: Uber

Tags: Apple

Tags: virtual kidnapping

Tags: DDoS booter service

Tags: law enforcement takedown

Tags: InfraGuard

Tags: InfraGuard breach

The most interesting security related news from the week of December 12 to 18.

(Read more…)

The post A week in security (December 12 – 18) appeared first on Malwarebytes Labs.

Read more

InfraGard infiltrated by cybercriminal

Categories: News

Tags: InfraGard

Tags: FBI

Tags: critical infrastructure

Tags: data breach

Tags: USDoD

Tags: Breach

Tags: escrow service

A partnership between the FBI and private sector members established to protect US critical infrastructure, called InfraGard, was infiltrated by a cybercriminal.

(Read more…)

The post InfraGard infiltrated by cybercriminal appeared first on Malwarebytes Labs.

Read more

Virtual kidnapping scam strikes again. Spot the signs

Categories: News

Tags: virtual kidnapping

Tags: kidnap

Tags: scam

Tags: fake

Tags: fraud

Tags: ransom

Tags: victim

Tags: wire transfer

Tags: digital payment

Tags: venmo

Tags: cashapp

Tags: social engineering

Tags: phone call

Tags: mobile

Tags: relative

A recent scam has been making the rounds that attempts to fool you into thinking a loved one has been kidnapped.

(Read more…)

The post Virtual kidnapping scam strikes again. Spot the signs appeared first on Malwarebytes Labs.

Read more

Update now! Apple patches active exploit vulnerability for iPhones

Categories: Exploits and vulnerabilities

Categories: News

Tags: Apple

Tags: iOS 16.1.2

Tags: Safari 16.2

Tags: CVE-2022-42856

Tags: type confusion

Apple has released new security content for iOS 16.1.2 and Safari 16.2. to fix a zero-day security vulnerability that was actively exploited

(Read more…)

The post Update now! Apple patches active exploit vulnerability for iPhones appeared first on Malwarebytes Labs.

Read more

Is Apple about to embrace third-party app stores?

Categories: Apple

Categories: News

Tags: Apple

Tags: DMA

Tags: Digital Markets Act

Tags: European Commission

Tags: EU

Tags: iPhone

Tags: iPad

Tags: Big Tech

Tags: App Store

More freedom and greater risks could be on the cards for European users.

(Read more…)

The post Is Apple about to embrace third-party app stores? appeared first on Malwarebytes Labs.

Read more

Uber data stolen via third-party vendor

Categories: News

Tags: Uber

Tags: data breach

Tags: Teqtivity

Tags: BreachForums

Tags: Uber Eats

Tags: mobile device management

Tags: MDM

Tags: Lapsus$

Tags: Lior Yaari

Tags: Grip Security

Uber is dealing with another cybersecurity incident after an attack on Teqtivity.

(Read more…)

The post Uber data stolen via third-party vendor appeared first on Malwarebytes Labs.

Read more

Update now! Two zero-days fixed in 2022’s last patch Tuesday

Categories: Exploits and vulnerabilities

Categories: News

Tags: patch Tuesday

Tags: Microsoft

Tags: Android

Tags: Apple

Tags: Mozilla

Tags: Google

Tags: Sap

Tags: Citrix

Tags: Fortinet

Tags: Cisco

Tags: CVE-2022-44698

Tags: MotW

Tags: CVE-2022-44710

Tags: race condition

Tags: CVE-2022-44670

Tags: CVE-2022-44676

Tags: CVE-2022-41076

Tags: remote powershell

The last patch Tuesday of 2022 is here—find out what Microsoft and many others have fixed

(Read more…)

The post Update now! Two zero-days fixed in 2022’s last patch Tuesday appeared first on Malwarebytes Labs.

Read more