Malwarebytes

Many Hikvision cameras are vulnerable to a critical, unauthenticated, remote code execution (RCE) vulnerability. Categories: Exploits and vulnerabilities Tags: CVE-2021-36260 hikvision PTZ Watchful_IP *( Read more... ( https://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/09/patch-now-insecure-hikvision-security-cameras-can-be-taken-over-remotely/ ) )* The post Patch now! Insecure Hikvision security cameras can be taken over remotely appeared first on Malwarebytes Labs.

CVE-2021-22005 has a CVSS score of 9.8 and should be treated as an "emergency change", according to VMWare. Categories: Exploits and vulnerabilities Tags: CVE-2021-22005 vcenter vmware *( Read more... ( https://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/09/patch-vcenter-server-right-now-vmware-expects-cve-2021-22005-exploitation-within-minutes-of-disclosure/ ) )* The post Patch vCenter Server “right now”, VMWare expects CVE-2021-22005 exploitation within minutes of disclosure appeared first on Malwarebytes Labs.

"Ayesha Gaddafi" wants us to help her invest a cool $27 million. What's the catch? Categories: Social engineering Tags: 419 email phish phishing spam *( Read more... ( https://blog.malwarebytes.com/social-engineering/2021/09/no-colonel-gaddafis-daughter-isnt-emailing-to-give-you-untold-riches/ ) )* The post No, Colonel Gaddafi’s daughter isn’t emailing to give you untold riches appeared first on Malwarebytes Labs.

We dig into geofence / keyword search warrants, where police request broad data near the scene of a crime - or not near a crime scene at all. Categories: Privacy Tags: beacons geofence Google law enforcement privacy search tracking *( Read more... ( https://blog.malwarebytes.com/privacy-2/2021/09/google-geofence-warrants-and-you/ ) )* The post Google, geofence warrants, and you appeared first on Malwarebytes Labs.

There are certain things your kids should never grow out of. And two of these are following great cybersecurity and privacy practices. Categories: How-tos Tags: 2fa California Consumer Privacy Act CCPA cyberbullying data privacy day DPD fake news flaming internet safety for kids and teens internet safety tips internet security JP Taggert lock and code lock and code podcast mfa multi-factor authentication password managers Pieter Arntz PII potentially identifiable information privacy tiktok two-factor authentication vpn *( Read more... ( https://blog.malwarebytes.com/how-tos-2/2021/09/internet-safety-tips-for-kids-and-teens-a-comprehensive-guide-for-the-modern-parent/ ) )* The post Internet safety tips for kids and teens: A comprehensive guide for the modern parent appeared first on Malwarebytes Labs.

Beware Mac malware passing itself off as the popular power-user tool iTerm2, as well as Microsoft Remote Desktop, SecureCRT, and Navicat Premium. Categories: Malwarebytes news Tags: iterm iterm2 mac macOS malware *( Read more... ( https://blog.malwarebytes.com/malwarebytes-news/2021/09/new-mac-malware-masquerades-as-iterm2-remote-desktop-and-other-apps/ ) )* The post New Mac malware masquerades as iTerm2, Remote Desktop and other apps appeared first on Malwarebytes Labs.

Microsoft envisions a password-less future. Password expert Per Thorsheim isn't so sure. Categories: Opinion Tags: 2fa attack targets microsoft passwords per thorsheim *( Read more... ( https://blog.malwarebytes.com/opinion/2021/09/microsoft-makes-a-bold-move-towards-a-password-less-future/ ) )* The post Microsoft makes a bold move towards a password-less future appeared first on Malwarebytes Labs.

Eric Eoin Marques' service hosted hundreds of sites containing more than eight million images of child sexual abuse. Categories: Cybercrime Tags: crime cybercrime eric eoin marques fbi freedom hosting garda interpol *( Read more... ( https://blog.malwarebytes.com/cybercrime/2021/09/freedom-hosting-operator-gets-27-years-for-hosting-dark-web-child-abuse-sites/ ) )* The post Freedom Hosting operator gets 27 years for hosting Dark Web child abuse sites appeared first on Malwarebytes Labs.

A round up of the previous week's blogs and most interesting and relevant security events, hacks, and information. Categories: A week in security Tags: 0-day adselfservice plus avoid US sanction Chrome 0-day Chrome vulnerability computer cookies Dark Web ddos fake COVID vaccine certificate fake UPS fake vaccine certificate Gaggle lock and code lock and code podcast Lock and Code S02E17 Magecart Magecart Group 8 Matt Crape omigod phishing privacy children Puma ransomware South Africa SSL ssl certificate vulnerability zero-click *( Read more... ( https://blog.malwarebytes.com/a-week-in-security/2021/09/a-week-in-security-sept-13-2021-sept-19-2021/ ) )* The post A week in security (Sept 13 – Sept 19) appeared first on Malwarebytes Labs.

Reporting by the Wall Street Journal (WSJ) has lifted the lid on Facebook's own research into the harm that Instagram can do to young users. Categories: Awareness Tags: Adam Mosseri engineered addiction facebook Instagram Mark Zuckerberg Peter Kafka Project Daisy Recod Media podcast RFacebook research social comparison social media is like cars The Wall Street Journal *( Read more... ( https://blog.malwarebytes.com/awareness/2021/09/facebooks-own-research-reveals-the-harm-that-instagram-can-inflict/ ) )* The post Facebook’s own research reveals the harm that Instagram can inflict appeared first on Malwarebytes Labs.