As we creep towards the end of the summer, things have started to thankfully slow down a bit. The biggest news was a wiper called GermanWiper targeting Germany and pretending to be a ransomware. Otherwise, for this week we mostly saw new variants of existing ransomware being released.
0A code execution vulnerability in the KDE desktop manager has been resolved by removing support for shell commands in the KConfig configuration system.
0An ongoing phishing campaign targeting several organizations with the help of DocuSign branded spam e-mails has been observed by Proofpoint's Threat Insight Team while abusing Amazon Web Services to host their landing pages.
0Researchers found a clicker Trojan bundled with over 33 apps, distributed through the Google Play Store, and downloaded by Android users over 100 million times.
4Air New Zealand sent e-mails to customers enrolled in its Airpoints loyalty program to warn them of a phishing attack that successfully compromised the email accounts of two staff members which potentially led to personal information being accessed by the attackers.
0Apple decided to open its bug-bounty program and allow participation from all security researchers. While the resolution is not effective immediately, the wait will be brief. Some hand-picked researchers will be given a new toy for a deeper inspection of iPhones security.
0Microsoft is currently working on improving the suspicious content submission experience for admins in all Microsoft 365 environments, as well as on enhancing the Quarantine file previewer, with the changes to be rolled out during September.
0The 3Fun dating mobile app for "curious couples & singles" exposed the precise location of its users along with personal details like date of birth and pictures that should have been protected by built-in privacy settings.
0The popular Steam game client for Windows has a zero-day privilege escalation vulnerability that can allow an attacker with limited permissions to run a program as an administrator
12A vulnerability leading to remote code execution survived for 10 years in some Avaya VoIP phones, used by 90% of the Fortune 100 companies.
0Today, Microsoft is releasing two new Windows 10 19H2 Insider Preview Builds to users in the Slow Ring. Windows 10 19H2 Build 18362.10013 comes with some minor new features, while Build 18362.10012 has new features turned off by default.
0The threat of ransomware is more prevalent in the U.S., with more than half of the global detections originating from this country, a new report informs.
1A new Spambot Trojan targeting French people has been discovered that records a victim's screen when they are using sites related to sex, pornography, and known pornographic sites.
0According to several reports this morning, Google News is partially broken for users as some websites are not showing up in Google News search results.
0Microsoft Chromium-based Edge Dev Build 77.0.235.4 is now rolling out to users with several improvements and fixes. The latest version adds the ability to turn off translation on certain pages, enables keyboard shortcut for the three dots (...) menu on Mac, and more.
0United States based insurance company State Farm has begun to send out email notifications to users whose online account login credentials were discovered by an attacker during a credential stuffing attack.
0The web site for the National Baseball Hall of Fame in Cooperstown, NY was hacked to include a malicious MageCart script that stole the payment information of customers who purchased items on the site.
0A vulnerability in Microsoft's Remote Desktop Protocol (RDP) can also be used to escape virtual machines running on Hyper-V, the virtualization technology in Azure and Windows 10.
0The August non-security Microsoft Office updates were released by Microsoft that contain improvements and fixes for the MSI-based editions of Office 2013 and Office 2016.
1Microsoft is rolling out Windows 10 20H1 Build 18956 to Windows Insiders in the Fast ring. This build includes a lot of new improvements including an improved Network & Internet Status page, the new always on top Calculator, more users on the new Cortana experience, and better control over notifications.
0