Microsoft removes LSA Protection from Windows settings to fix bug


Microsoft has fixed a known issue triggering Windows Security warnings that Local Security Authority (LSA) Protection is off by removing the feature's UI from settings. [...]


https://www.bleepingcomputer.com/news/mi...o-fix-bug/

Microsoft rolls out Phone Link for iOS to all Windows 11 users


Microsoft is rolling out Phone Link for iOS to all Windows 11 and iPhone users, with the rollout expected to complete by mid-May.  [...]


https://www.bleepingcomputer.com/news/mi...-11-users/

Thousands of Apache Superset servers exposed to RCE attacks


Apache Superset is vulnerable to authentication bypass and remote code execution at default configurations, allowing attackers to potentially access and modify data, harvest credentials, and execute commands. [...]


https://www.bleepingcomputer.com/news/se...e-attacks/

Google disrupts the CryptBot info-stealing malware operation


Google is taking down malware infrastructure linked to the Cryptbot info stealer after suing those using it to infect Google Chrome users and steal their data. [...]


https://www.bleepingcomputer.com/news/se...operation/

Tencent QQ users hacked in mysterious malware attack, says ESET


The Chinese APT hacking group known as 'Evasive Panda' are behind a mysterious attack that distributed the MsgBot malware as part of an automatic update for the Tencent QQ messaging app. [...]


https://www.bleepingcomputer.com/news/se...says-eset/

Cisco discloses XSS zero-day flaw in server management tool


Cisco disclosed today a zero-day vulnerability in the company's Prime Collaboration Deployment (PCD) software that can be exploited for cross-site scripting attacks. [...]


https://www.bleepingcomputer.com/news/se...ment-tool/

PrestaShop fixes bug that lets any backend user delete databases


The open-source e-commerce platform PrestaShop has released a new version that addresses a critical-severity vulnerability allowing any back-office user to write, update, or delete SQL databases regardless of their permissions. [...]


https://www.bleepingcomputer.com/news/se...databases/

Google will add End-to-End encryption to Google Authenticator


Google is bringing end-to-end encryption to Google Authenticator cloud backups after researchers warned users against synchronizing 2FA codes with their Google accounts. [...]


https://www.bleepingcomputer.com/news/go...enticator/

Ukrainian arrested for selling data of 300M people to Russians


The Ukrainian cyber police have arrested a 36-year-old man from the city of Netishyn for selling the personal data and sensitive information of over 300 million people, citizens of Ukraine, and various European countries. [...]


https://www.bleepingcomputer.com/news/se...-russians/

Penske Automotive Q1 earnings drop on record revenue

<p>Penske Automotive's Q1 retail automotive same-store service & parts revenue was $643 million, up 10 percent from the same period a year ago.</p>

https://www.autonews.com/dealers/penske-...rd-revenue