Zyxel warns of critical vulnerabilities in firewall and VPN devices


Zyxel is warning customers of two critical-severity vulnerabilities in several of its firewall and VPN products that attackers could leverage without authentication. [...]


https://www.bleepingcomputer.com/news/se...n-devices/

What’s a Double-Blind Password Strategy and When Should It Be Used


Strategies such as the double-blind password strategy can be effective, but only if end-users are fully adopting the practice. Learn more about when and how to use it. [...]


https://www.bleepingcomputer.com/news/se...t-be-used/

New Russian-linked CosmicEnergy malware targets industrial systems


Mandiant security researchers have discovered a new OT known as CosmicEnergy that targets operational technology (OT), raising concerns about potential disruptions to electric power systems worldwide.  [...]


https://www.bleepingcomputer.com/news/se...l-systems/

D-Link fixes auth bypass and RCE flaws in D-View 8 software


D-Link has fixed two critical-severity vulnerabilities in its D-View 8 network management suite that could allow remote attackers to bypass authentication and execute arbitrary code. [...]


https://www.bleepingcomputer.com/news/se...-software/

Microsoft 365 phishing attacks use encrypted RPMSG messages


Attackers are now using encrypted RPMSG attachments sent via compromised Microsoft 365 accounts to steal Microsoft credentials in targeted phishing attacks designed to evade detection by email security gateways. [...]


https://www.bleepingcomputer.com/news/se...-messages/

Predator: Looking under the hood of Intellexa’s Android spyware


Security researchers at Cisco Talos and the Citizen Lab have presented a new technical analysis of the commercial Android spyware 'Predator' and its loader 'Alien,' sharing its data-theft capabilities and other operational details. [...]


https://www.bleepingcomputer.com/news/se...d-spyware/

Windows 11 finally gets a 'never combine taskbar buttons' mode


Microsoft has released a new Windows 11 dev build that adds a long-awaited feature allowing users to ensure that all windows are shown as individual items in the taskbar. [...]


https://www.bleepingcomputer.com/news/mi...tons-mode/

BlackByte ransomware claims City of Augusta cyberattack


The city of Augusta in Georgia, U.S., has confirmed that the most recent IT system outage was caused by unauthorized access to its network. [...]


https://www.bleepingcomputer.com/news/se...berattack/

Mozilla stops Firefox fullscreen VPN ads after user outrage


Firefox users have been complaining about very intrusive full-screen advertisements promoting Mozilla VPN displayed in the web browser when navigating an unrelated page. [...]


https://www.bleepingcomputer.com/news/se...r-outrage/

Emby shuts down user media servers hacked in recent attack


Emby says it remotely shut down an undisclosed number of user-hosted media server instances that were recently hacked by exploiting a previously known vulnerability and an insecure admin account configuration. [...]


https://www.bleepingcomputer.com/news/se...nt-attack/