Microsoft’s 365 Defender Research Team has warned that a flaw in macOS coupled with Microsoft Word’s backward compatibility could allow the circumvention of App Sandbox rules. This could enable potentially malicious macros to run in Word, leading to users downloading malware, or ransomware. The advice is for macOS users to install the security updates released by Apple on May…
Cybernews researchers have warned that many popular child-monitoring Android mobile apps may also be leaking the parents’ data to potentially malicious third parties via the third-party trackers in the apps. The researchers have also warned that the insecurely implemented Secure Sockets Layer (SSL) certificate handling and open-source code in some of these apps could leave them vulnerable to man-in-the-middle…
The new Privacy Auditing feature in Windows 11 allows users to see a list of which apps have accessed their microphone or camera recently, plus details of any other suspicious activity. See Which Apps Have Accessed Your Microphone and Camera David Weston, Microsoft’s VP for Enterprise and OS Security, highlighted the new privacy feature in a recent tweet, saying: “New…
With identity theft, and the resulting identify fraud becoming more widespread, we look at how to spot the signs that you may be a victim, the effects on victims, and how to reduce the risk of having your identity stolen and used for fraud. What Are Identity Theft and Identity Fraud? Identity theft is when personal details of a…
A Global Cybersecurity Advisor at ESET has warned that Amazon’s plans to enable the Alexa voice assistant to mimic human voices (dead or alive) could be used to launch deep fake audio attacks on some voice authentication security systems. The advice from some security experts is that, if Amazon goes ahead with voice mimicking for Alexa, it may be…
Security company PIXM has warned of a Facebook scam, active since Q4 2021, which has ensnared nearly 10 million users. The credential harvesting scam uses a fake Facebook login page. When a user logs in, the threat actor gets their credentials and can then use an automated program to send out the link to the user’s Friends via Facebook…
Proofpoint researchers have reported finding a way that attackers could use a Microsoft 365 loophole to launch ransomware attacks. The method involves using compromised SharePoint Online or OneDrive accounts to reduce the (user-configurable) setting for the number or saved versions in SharePoint Online or OneDrive. Attackers can then encrypt files in those drives so that they are unrecoverable, have…
Cybersecurity expert, Kevin Beaumont, has warned Microsoft Office users about a scam that uses a hole in a Microsoft Word. The scam, dubbed “Follina”, involves cybercriminals leveraging a Windows utility called msdt.exe to cause victims to download a malware-loaded Word file. The malware could allow attackers to run arbitrary code, install programs, change or delete data, or create new…
Tax software vendor Intuit has warned that QuickBooks customers are being targeted with phishing attacks that are impersonating the company and are designed to lure targets with fake account suspension warnings. The phishing emails ask targets to click on a “Complete Verification” button which re-directs them to a phishing site designed to harvest personal information or infect their system…
The UK government’s MI5-run ‘Centre for the Protection of National Infrastructure’ has launched a new app to help people spot approaches from foreign spies and organised criminals seeking sensitive information. Really? How Big Is The Problem? According to MI5, it spotted 10,000 UK nationals across society being approached last year via fake social media profiles, e.g. on LinkedIn and…
