Security-Portal.cz je internetový portál zaměřený na počítačovou bezpečnost, hacking, anonymitu, počítačové sítě, programování, šifrování, exploity, Linux a BSD systémy. Provozuje spoustu zajímavých služeb a podporuje příznivce v zajímavých projektech.

Kategorie

Europol and Bitdefender Release Free Decryptor for LockerGoga Ransomware

The Hacker News - 19 Září, 2022 - 11:45
A decryptor for the LockerGoga ransomware has been made available by Romanian cybersecurity firm Bitdefender in collaboration with Europol, the No More Ransom project, and Zurich law enforcement authorities. Identified in January 2019, LockerGoga drew headlines for its attacks against the Norwegian aluminum giant Norsk Hydro. It's said to have infected more than 1,800 victims in 71 countries, Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security

Microsoft Warns of Large-Scale Click Fraud Campaign Targeting Gamers

The Hacker News - 19 Září, 2022 - 10:50
Microsoft said it's tracking an ongoing large-scale click fraud campaign targeting gamers by means of stealthily deployed browser extensions on compromised systems. "[The] attackers monetize clicks generated by a browser node-webkit or malicious browser extension secretly installed on devices," Microsoft Security Intelligence said in a sequence of tweets over the weekend. The tech giant's Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security

Vážná bezpečnostní díra v Microsoft Teams. Aplikace ukládá autentizační tokeny jako čistý text

Zive.cz - bezpečnost - 19 Září, 2022 - 08:45
Bezpečnostní analytici objevili v desktopové aplikaci Microsoft Teams závažnou chybu, která dovoluje útočníkům získat přístup k ověřovacím tokenům a účtům i v případech, kdy si uživatel aktivoval vícefaktorové ověřování, informuje web Bleeping Computer. Nově objevený bezpečnostní problém se týká ...
Kategorie: Hacking & Security

Linux Luminaries Discuss Efforts to Bring Rust to the Kernel

LinuxSecurity.com - 18 Září, 2022 - 13:00
Both Linus Torvalds' Open Source Summit keynote and Jonathan Corbet's "Kernel Report" discussed efforts to allow Rust modules in Linux.
Kategorie: Hacking & Security

S3 Ep100.5: Uber breach – an expert speaks [Audio + Text]

Sophos Naked Security - 17 Září, 2022 - 22:57
Chester Wisniewski on what we can learn from Uber: "Just because a big company didn't have the security they should doesn't mean you can't."

Debian GNU/Linux 11.5 Bullseye Released with 53 Security Updates and 58 Bug Fixes

LinuxSecurity.com - 17 Září, 2022 - 13:00
The Debian Project has announced the general availability of Debian GNU/Linux 11.5 as the fifth point release to the Debian GNU/Linux 11 ''Bullseye'' operating system series.
Kategorie: Hacking & Security

CISA Orders Agencies to Patch Vulnerability Used in Stuxnet Attacks

LinuxSecurity.com - 17 Září, 2022 - 13:00
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added half a dozen vulnerabilities to its catalog of Known Exploited Vulnerabilities and is ordering federal agencies to follow vendor's instructions to fix them.
Kategorie: Hacking & Security

Uber Claims No Sensitive Data Exposed in Latest Breach… But There's More to This

The Hacker News - 17 Září, 2022 - 10:53
Uber, in an update, said there is "no evidence" that users' private information was compromised in a breach of its internal computer systems that was discovered late Thursday. "We have no evidence that the incident involved access to sensitive user data (like trip history)," the company said. "All of our services including Uber, Uber Eats, Uber Freight, and the Uber Driver app are operational." Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security

Hackers Had Access to LastPass's Development Systems for Four Days

The Hacker News - 17 Září, 2022 - 04:47
Password management solution LastPass shared more details pertaining to the security incident last month, disclosing that the threat actor had access to its systems for a four-day period in August 2022. "There is no evidence of any threat actor activity beyond the established timeline," LastPass CEO Karim Toubba said in an update shared on September 15, adding, "there is no evidence that this Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security

UBER HAS BEEN HACKED, boasts hacker – how to stop it happening to you

Sophos Naked Security - 16 Září, 2022 - 20:43
Uber is all over the news for a widely-publicised data breach. We help you answer the question, "How do I stop this happening to me?"

Researchers Find Link b/w PrivateLoader and Ruzki Pay-Per-Install Services

The Hacker News - 16 Září, 2022 - 16:17
Cybersecurity researchers have exposed new connections between a widely used pay-per-install (PPI) malware service known as PrivateLoader and another PPI platform offered by a cybercriminal actor dubbed ruzki. "The threat actor ruzki (aka les0k, zhigalsz) advertises their PPI service on underground Russian-speaking forums and their Telegram channels under the name ruzki or zhigalsz since at Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security

North Korean Hackers Spreading Trojanized Versions of PuTTY Client Application

The Hacker News - 16 Září, 2022 - 15:47
A threat with a North Korea nexus has been found leveraging a "novel spear phish methodology" that involves making use of trojanized versions of the PuTTY SSH and Telnet client. Google-owned threat intelligence firm Mandiant attributed the new campaign to an emerging threat cluster it tracks under the name UNC4034. "UNC4034 established communication with the victim over WhatsApp and lured them Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security

How to Use a UTM Solution & Win Time, Money and Resources

The Hacker News - 16 Září, 2022 - 15:39
Unified threat management is thought to be a universal solution for many reasons. First of all, it is compatible with almost any hardware. As a business or an MSP, you don’t have to bother with leasing or subleasing expensive equipment. There is no need to chase your clients to return your costly hardware. The all-in-one UTM solution will save you money and time & make work routine less The Hacker Newshttp://www.blogger.com/profile/16801458706306167627noreply@blogger.com
Kategorie: Hacking & Security

Uber čelí velkému hacku. Osmnáctiletý útočník chce, aby firma lépe platila řidiče

Zive.cz - bezpečnost - 16 Září, 2022 - 14:45
Technologická platforma pro osobní přepravu, která operuje v sedmi desítkách zemí včetně Česka, hlásí bezpečnostní problém. Anonymní hacker tvrdí, že naboural klíčové databáze Uberu a získal citlivé informace. Firma v reakci vypnula interní komunikátor Slack a některé dalších systémy, zahájila ...
Kategorie: Hacking & Security

8 Notable Open-Source Security Initiatives of 2022

LinuxSecurity.com - 16 Září, 2022 - 13:00
Open-source security has been high on the agenda this year, with a number of initiatives, projects, and guidance launched in 2022 to help improve the cyber resiliency of open-source code, software and development.
Kategorie: Hacking & Security

Hackers Targeting WebLogic Servers and Docker APIs for Mining Cryptocurrencies

The Hacker News - 16 Září, 2022 - 12:58
Malicious actors such as Kinsing are taking advantage of both recently disclosed and older security flaws in Oracle WebLogic Server to deliver cryptocurrency-mining malware. Cybersecurity company Trend Micro said it found the financially-motivated group leveraging the vulnerability to drop Python scripts with capabilities to disable operating system (OS) security features such as Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security

Zesnulá britská královna je záminkou v phishingovém útoku na účty Microsoft

Zive.cz - bezpečnost - 16 Září, 2022 - 12:45
Není to jen Uber, kdo čelí útoku. Předmětem zájmu neznámého subjektu jsou také účty Microsoft, na které útočí nová phishingová kampaň. Podvržené e-maily navozují dojem, že pochází přímo od Microsoftu, který tedy není jejich skutečným autorem. Zneužita je v tomto případě rovněž nedávno zesnulá ...
Kategorie: Hacking & Security

Uber Says It's Investigating a Potential Breach of Its Computer Systems

The Hacker News - 16 Září, 2022 - 05:08
Ride hailing giant Uber disclosed Thursday it's responding to a cybersecurity incident involving a breach of its network and that it's in touch with law enforcement authorities. The New York Times first reported the incident.  The company pointed to its tweeted statement when asked for comment on the matter. The hack is said to have forced the company to take its internal Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security

S3 Ep100: Browser-in-the-Browser – how to spot an attack [Audio + Text]

Sophos Naked Security - 15 Září, 2022 - 20:50
Latest episode - listen now! Cosmic rockets, zero-days, spotting cybercrooks, and unlocking the DEADBOLT...

Researchers Warn of Self-Spreading Malware Targeting Gamers via YouTube

The Hacker News - 15 Září, 2022 - 16:30
Gamers looking for cheats on YouTube are being targeted with links to rogue password-protected archive files designed to install crypto miners and information-stealing malware such as RedLine Stealer on compromised machines. "The videos advertise cheats and cracks and provide instructions on hacking popular games and software," Kaspersky security researcher Oleg Kupreev said in a new report Ravie Lakshmananhttp://www.blogger.com/profile/10975661172932160797noreply@blogger.com
Kategorie: Hacking & Security
Syndikovat obsah