New Internet Explorer Exploit Currently Being Used By Attackers

January 12th, 2019

Are you still using Internet Explorer?  Now you have a new reason to consider switching to a more up to date browser.

As most people know, Microsoft essentially gave up on Explorer after it failed to gain ground against its major competitors in the browser ecosystem.

New Amazon Order Confirmation Emails Could Be Phishing Attempts

January 11th, 2019

According to Alexa, Amazon is the 4th most visited website in the United States and ranks 8th worldwide.  To say that it gets a lot of traffic every day would be an understatement, which is why a newly discovered phishing campaign pretending to come from Amazon is so disturbing.

Chromebook To Get Additional USB Security

January 10th, 2019

Google is taking additional steps to protect its Chromebook user base.  Currently, if a hacker has physical access to your machine, he or she could insert a flash drive in the USB port and run malicious code from it.

The company is adding a new feature called USBGuard, which blocks USB port access any time the machine's screen is locked.

Twitter May Have Been Hit By Another Data Breach 

January 7th, 2019

2018 hasn't been a great year for social media, with all the major platforms suffering a number of significant data breaches at various points in the year.  Twitter alone has seen several, including the biggest one in May when the company urged all of its 330 million users to reset their passwords.

Virtualization Making It Safer To Open EXE Files On Windows

January 4th, 2019

Microsoft recently announced an addition to Windows 10 that should make the lives of Enterprise and power users a whole lot easier.

Running an unknown, untrusted .exe file on your machine can be an event that fills you with dread.

The best case, of course, is that everything turns out fine.

Facebook Flaw Exposed Photos Belonging To Millions Of Users 

January 3rd, 2019

Recently Facebook fessed up to a bug in their photo API that exposed the photos belonging to nearly seven million of the company's users to app developers.

The way the photo API is supposed to work is as follows:  When you give an app permission to access your Facebook photos, that app is only supposed to gain access to the ones you've posted on your timeline.

New Phishing Attacks Look Like Emails From Apple

January 2nd, 2019

There's a new, widespread phishing campaign underway that you need to be aware of if you use the Apple App store at all.  At this time, no one knows who's behind the campaign, but already, a surprising number of people have been taken in by it.

The campaign works like this:

You'll receive an email that appears to be from Apple confirming your recent purchase of a $30 app.

This Mac Malware Takes Screenshots Of Your Computer

January 1st, 2019

There's a new malware threat in the MacOS ecosystem called OSX.LamePyre.  If you haven't heard of it yet, it belongs on your radar.

At the moment, industry experts agree that it's more of a crude work in progress.  Unfortunately, the danger of crude works in progress is that the hackers continue to develop them, making them a threat that gets worse over time.

New Android Malware Can Drain Your PayPal Account 

December 31st, 2018

Do you own an Android device?  Are you a PayPal user?  If you answered yes to both of those questions, you have something new to worry about.

A limited number of versions of an app called "Optimization Battery" contains a Trojan designed to steal money from PayPal accounts, including those that are protected by two-factor authentication.

If Your Password is On This List, Change It Now

December 28th, 2018

The annual list of the worst passwords in use during 2018 has just been published by SplashData.

This year's list features a number of the usual suspects, but there are also a few new entries.

 

 

Here are the ten worst passwords in use, according to the data:

123456
password
123456789
12345678
12345
111111
1234567
sunshine
qwerty
iloveyou

Other notable entries include "welcome" at #13, "football" at #16, "Donald" at #23, "password1" at #24, "freedom" at #29, "hello" at #68, "test" at #88, and "whatever" at #91.  Obviously, if you see a password you use anywhere on this list, you should change it immediately, as these are incredibly easy to guess, which makes breaching your system a trivial matter.