Microsoft fixes six critical vulnerabilities in June Patch Tuesday

Categories: Exploits and vulnerabilities

Categories: News

Tags: Microsoft

Tags: patch Tuesday

Tags: CVE-2023-29357

Tags: CVE-2023-29363

Tags: CVE-2023-32014

Tags: CVE-2023-32015

Tags: CVE-2023-32013

Tags: CVE-2023-24897

Tags: CVE-2023-32031

Tags: SharePoint

Tags: PGM

Tags: Exchange

Tags: Hyper-V

Patch Tuesday of June 2023 is relatively relaxed. No actively exploited zero-days and only six critical vulnerabilities.

(Read more…)

The post Microsoft fixes six critical vulnerabilities in June Patch Tuesday appeared first on Malwarebytes Labs.

Read more

Update Chrome now! Google fixes critical vulnerability in Autofill payments

Categories: Exploits and vulnerabilities

Categories: News

Tags: Google

Tags: Chrome

Tags: Autofill

Tags: payments critical

Tags: CVE-2023-3214

Google has released an update which includes five security fixes including a critical vulnerability in Autofill payments.

(Read more…)

The post Update Chrome now! Google fixes critical vulnerability in Autofill payments appeared first on Malwarebytes Labs.

Read more

Ticket scammers target Taylor Swift tour

Categories: Personal

Tags: Taylor

Tags: swift

Tags: eras

Tags: music

Tags: gig

Tags: concert

Tags: tour

Tags: scam

Tags: ticket

Tags: reseller

Tags: fraud

Tags: fake

We take a look at multiple reports of ticket reseller fraud aimed at fans of Taylor Swift’s Era tour.

(Read more…)

The post Ticket scammers target Taylor Swift tour appeared first on Malwarebytes Labs.

Read more

Edge browser feature sends images you view back to Microsoft

Categories: News

Tags: Edge

Tags: Enhance images

Tags: super resolution

Tags: content creators

A new Edge feature labelled ‘Enhance images in Microsoft Edge’ has raised some privacy concerns because it sends information to Microsoft.

(Read more…)

The post Edge browser feature sends images you view back to Microsoft appeared first on Malwarebytes Labs.

Read more

Strava heatmap loophole may reveal users’ home addresses

Categories: Personal

Tags: strava

Tags: fitness

Tags: health

Tags: run

Tags: running

Tags: jog

Tags: jogging

Tags: jogger

Tags: cycling

Tags: bike

Tags: race

Tags: data

Tags: anonymous

Tags: anonymise

Tags: location

Tags: map

Tags: heatmap

Anonymous data on fitness app Strava’s heatmap may be able to be used to pinpoint users.

(Read more…)

The post Strava heatmap loophole may reveal users’ home addresses appeared first on Malwarebytes Labs.

Read more

More MOVEit vulnerabilities found while the first one still resonates

Categories: Exploits and vulnerabilities

Categories: News

Categories: Ransomware

Tags: MOVEit

Tags: Progress

Tags: Cl0p

Tags: ransomware

Tags: CVE-2023-34362

A security audit of the MOVEit code has revealed more SQL injection vulnerabilities, while victims of the first vulnerability are coming to the surface.

(Read more…)

The post More MOVEit vulnerabilities found while the first one still resonates appeared first on Malwarebytes Labs.

Read more

Former TikTok exec: Chinese Communist Party had “God mode” entry to US data

Categories: News

Categories: Privacy

Tags: Yu

Tags: TikTok

Tags: ByteDance

Tags: CCP

Tags: influence

Tags: data access

Tags: loaded gun

A former executive at TikTok’s parent company ByteDance has claimed in court documents that the Chinese Community Party (CCP) had access to TikTok data, despite the data being stored in the US.

(Read more…)

The post Former TikTok exec: Chinese Communist Party had “God mode” entry to US data appeared first on Malwarebytes Labs.

Read more