Popular Fitness Site Endures A Customer Information Breach 

May 17th, 2019

Do you frequent the website bodybuilding.com?

If so, be advised that the site has been breached.

According to a recent statement by the company behind the site, the breach occurred in February, 2019 and had its origins in a phishing email the company received back in July of 2018.

A detailed account of the incident was published on the company's help center and contained most of the elements we've come to expect when things like this happen:

The company is very sorry that it happened
"Certain" customer/member information may have been compromised
The company has been working with law enforcement and has brought in a third party to assist with the forensic investigation, which is ongoing

The company also stressed that while partial payment account numbers were compromised, no full debit or credit card information was at risk.

Password Policies Getting Update From Microsoft

May 16th, 2019

Industry experts have been predicting the death of the humble password for decades.  To date, those predictions have amounted to nothing.

Passwords are still with us, and still serve as the cornerstone of security, even as other measures have arisen alongside them to help better secure your all-important data.

Windows Update May Fail With External Storage Devices

May 15th, 2019

Microsoft recently issued an important support document that your IT staff needs to be aware of.

In part, their notice reads as follows:

"Inappropriate drive reassignment can occur on eligible computers that have an external USB device or SD memory card attached during the installation of the May 2019 update.

Persistent Banking Trojan Virus Launches New Phishing Scam

May 13th, 2019

The venerable banking Trojan known as Q-bot is back in the news, having recently been spotted in the wild as part of a sophisticated new phishing campaign designed to claim a new generation of victims.

Q-bot is one of the oldest banking Trojans still in use, and has a history that stretches back more than a decade.

Twitter Will Soon Release New Features With Update

May 9th, 2019

Twitter recently announced the addition of a new "Hide Replies" feature, which will give the platform's users a bit more control over conversations that stem from the tweets they make.

Twitter Senior Product Manager Michelle Yasmeen Haq had this to say about the new addition:

"With this feature, the person who started a conversation could choose to hide replies to their tweets.

Issue With Internet Explorer Could Affect Most PC Users

May 4th, 2019

Are you still surfing the web with Internet Explorer?  If so, you're not alone.  Four years after Microsoft announced Edge as its successor, the company's old browser still has a few stubborn holdouts who continue to use it for various reasons.

Unfortunately, security experts keep finding critical security flaws in the code that make it something of a ticking time bomb.

Indoor Gardening Company AeroGrow May Have Had Data Breach 

May 3rd, 2019

Do you do any indoor gardening?  If so, odds are that you own AeroGrow equipment. If that's the case, some of your personal information, including the credit or debit card number you paid for the goods with, may have been compromised.

The company recently notified its customers that they discovered malware lurking on their payment processing page.

Hackers Are Now Using Remote Desktop Services For Ransomware

May 2nd, 2019

Ransomware continues to be the weapon of choice for hackers around the world, but their distribution methods are evolving.  Recently, a new strain of the ransomware known as CryptoMix was found in the wild, sporting a new distribution methodology.

Hackers are beginning to target publicly exposed remote desktop services and installing their poisoned software manually.

Facebook Admits To Accessing Email Contacts

May 1st, 2019

Facebook can't seem to stay out of its own way.  Recently, the social media giant has made headlines on a regular basis, and seldom for anything good or groundbreaking.  Not long ago, the company found itself in the midst of a controversy when it came to light that they were asking people for their email account passwords, claiming that it needed these in order to verify the identities of the new users.

Driver In Some WiFi Devices Could Allow Hackers Access

April 30th, 2019

You almost certainly do not know the name Hugues Anguelkov.  He's an intern working for Quarkslab, where he spends his time researching potential security issues.

He's also a bit of an unsung hero because he recently uncovered a string of five devastating vulnerabilities in the Broadcom wl driver and the open-source brcmfmac driver for Broadcom WiFi chipsets.