Category: News

From 2-spyware.com

Search Symphony is a potentially unwanted program that can be installed on Mac computers. Usually, users do that unknowingly when installing new software from a bundle. Additional apps aren’t disclosed, and if you rush through the installation process, all of them are automatically installed on your computer.

When the article’s culprit infiltrates the system, whether with your direct approval or without it, it changes certain browser settings, particularly the default search engine, new tab, and homepage preferences. After doing so, the browser hijacker enables data-tracking, redirects, and ad injection.

Read more…

From securityboulevard.com

Historically, only large, well-established banks had control over the majority of consumer and corporate finances, making it highly challenging for smaller financial services providers to break into the market. Open banking has transformed the way organizations and consumers manage their money, as users can now conveniently access their finances from the comfort of their homes. This revolution in banking has also presented a wealth of opportunities for small financial organizations to provide competitive services and for developers to design the latest innovative open banking apps.

Read more…

From thehackernews.com

A U.K. citizen has been arrested in the Spanish town of Estepona over his alleged involvement in the July 2020 hack of Twitter, resulting in the compromise of 130 high-profile accounts.

Joseph O’Connor, 22, has been charged with intentionally accessing a computer without authorization and obtaining information from a protected computer, as well as for making extortive communications. The Spanish National Police made the arrest pursuant to a U.S. warrant.

Besides his role in the Twitter hack, O’Connor is also charged with computer intrusions related to takeovers of TikTok and Snapchat user accounts and cyberstalking an unnamed juvenile victim.

Read more…

From inforisktoday.com

Security researchers identified flaws in messaging app Telegram’s cryptographic protocol, MTProto, that enabled intruders to access encrypted chats and alter the messages. Those flaws have since been patched in updates.

See Also: Live Panel | Zero Trusts Given- Harnessing the Value of the Strategy

An academic study from researchers at University of London, Royal Holloway, and Applied Cryptography Group at research university ETH Zurich, states that Telegram’s MTProto, which provides end-to-end encryption for messages sent over the platform, was susceptible to hacking via four cryptographic vulnerabilities.

These flaws could have enabled attackers to alter the sequences of the messages sent, identify encrypted messages of a client or a server, recover some plaintext from encrypted messages and wage man-in-the-middle attacks to impersonate the server to the client.

Read more…

From zdnet.com

Researchers have spotted a cheap malware variant, once focused on Windows machines, that has been upgraded to infect Mac PCs.

On Wednesday, Check Point Research (CPR) said the malware, dubbed “XLoader,” originates from a Windows-based variant known as Formbook. 

Formbook was once available in underground forums for as little as $29 a week on a subscription basis. However, this malware was pulled from sale roughly four years ago by the developer, known as ng-Coder, and did not reappear until 2020 — while also bearing the new name XLoader. 

Read more…

From thehackernews.com

Microsoft’s Windows 10 and the upcoming Windows 11 versions have been found vulnerable to a new local privilege escalation vulnerability that permits users with low-level permissions access Windows system files, in turn, enabling them to unmask the operating system installation password and even decrypt private keys.

“Starting with Windows 10 build 1809, non-administrative users are granted access to SAM, SYSTEM, and SECURITY registry hive files,” CERT Coordination Center (CERT/CC) said in a vulnerability note published Monday. “This can allow for local privilege escalation (LPE).”

Read more…

From gbhackers.com

DNS Attack is a type of cyber attack that exploits the weakness or vulnerability in a Domain name system. Today, the internet has turned into an integral part of our life. From communicating to banking to shopping to traveling, every aspect of our life is around the internet.

Since the internet has been widely used, cybersecurity is a primary concern for most web users as every now and then we hear the news about cyber attacks.

Nowadays, a cyber attack is common. Even they are becoming a big headache for many IT companies and businesses. In recent years, some big names such as Google, The New York Times, etc. have fallen victim to cyber-attacks.

Read more…