A week in security (January 9—15)

Categories: News

Tags: AWIS

Tags: weekly blog roundup

Tags: week in security

Tags: Slack

Tags: GitHub

Tags: Magecart

Tags: Microsoft

Tags: Pokemon NFT

Tags: Facebook

Tags: Instagram

Tags: Snapchat

Tags: TikTok

Tags: YouTube

Tags: Google

Tags: Meta

Tags: identity theft

Tags: Maternal & Family Health Services

Tags: 2023 predictions

Tags: Royal Mail

Tags: K-12 security

Tags: K-12

Tags: WhatsApp

Tags: NSO Group

Tags: Department of Interior

Tags: weak passwords

Tags: Vice Society

Tags: ransomware. Vice Society ransomware

The most interesting security related news from the week of January 9—15.

(Read more…)

The post A week in security (January 9—15) appeared first on Malwarebytes Labs.

Read more

Google patches 60 vulnerabilities in first Android update of 2023

Categories: Android

Categories: News

Tags: 2023-01-01

Tags: 2023-01-05

Tags: Google

Tags: Android

Tags: CVE-2022-42719

Tags: CVE-2022-42720

Tags: CVE-2022-42721

Tags: mac80211

Tags: CVE-2022-41674

Tags: Qualcomm

Tags: CVE-2022-22088

Google has published its first security bulletin of 2023 with details of vulnerabilities affecting Android devices. It includes fixes for 60 security issues.

(Read more…)

The post Google patches 60 vulnerabilities in first Android update of 2023 appeared first on Malwarebytes Labs.

Read more

Update now! Two zero-days fixed in 2022’s last patch Tuesday

Categories: Exploits and vulnerabilities

Categories: News

Tags: patch Tuesday

Tags: Microsoft

Tags: Android

Tags: Apple

Tags: Mozilla

Tags: Google

Tags: Sap

Tags: Citrix

Tags: Fortinet

Tags: Cisco

Tags: CVE-2022-44698

Tags: MotW

Tags: CVE-2022-44710

Tags: race condition

Tags: CVE-2022-44670

Tags: CVE-2022-44676

Tags: CVE-2022-41076

Tags: remote powershell

The last patch Tuesday of 2022 is here—find out what Microsoft and many others have fixed

(Read more…)

The post Update now! Two zero-days fixed in 2022’s last patch Tuesday appeared first on Malwarebytes Labs.

Read more

Judge Orders U.S. Lawyer in Russian Botnet Case to Pay Google

Credit to Author: BrianKrebs| Date: Mon, 05 Dec 2022 19:44:50 +0000

In December 2021, Google filed a civil lawsuit against two Russian men thought to be responsible for operating Glupteba, one of the Internet’s largest and oldest botnets. The defendants, who initially pursued a strategy of counter suing Google for tortious interference in their sprawling cybercrime business, later brazenly offered to dismantle the botnet in exchange for payment from Google. The judge in the case was not amused, found for the plaintiff, and ordered the defendants and their U.S. attorney to pay Google’s legal fees.

Read more

Hey, Google: It's time to step up your Pixel upgrade promise

Look, it’s no big secret that I’m a fan of Google’s Pixel program.

I’ve personally owned Pixel phones since the first-gen model graced our gunk-filled pockets way back in 2016. And Pixels have been the only Android devices I’ve wholeheartedly recommended for most folks ever since.

There’s a reason. And more than anything, it comes down to the software and the overall experience Google’s Pixel approach provides.

  • Part of that is the Pixel’s interface and the lack of any unnecessary meddling and complication — including the absence of confusing (and often privacy-compromising) duplicative apps and services larded onto the phone for the manufacturer’s business benefit and at the expense of your user experience.
  • Part of it is the unmatched integration of exceptional Google services and exclusive Google intelligence that puts genuinely useful stuff you’ll actually benefit from front and center and makes it an integrated part of the Pixel package.
  • And, yes, part of it is the Pixel upgrade promise and the fact that Pixel phones are still the only Android devices where both timely and reliable software updates are a built-in feature and guarantee.

[Psst: Got a Pixel? Any Pixel? Check out my free Pixel Academy e-course to uncover all sorts of advanced intelligence lurking within your phone!]

To read this article in full, please click here

Read more

Google execs knew 'Incognito mode' failed to protect privacy, suit claims

A federal judge in California is considering motions to dismiss a lawsuit against Google that alleges the company misled them into believing their privacy was being protected while using Incognito mode in the Chrome browser.

The lawsuit, filed in the Northern District Court of California by five users more than two years ago, is now awaiting a recent motion by those plaintiffs for two class-action certifications.

The first would cover all Chrome users with a Google account who accessed a non-Google website containing Google tracking or advertising code and who were in “Incognito mode”; the second covers all Safari, Edge, and Internet Explorer users with a Google account who accessed a non-Google website containing Google tracking or advertising code while in “private browsing mode.” 

To read this article in full, please click here

Read more

Android and Chrome start showing passwords the door

Categories: News

Tags: Google

Tags: passkeys

Tags: Android

Tags: Chrome

Tags: public key

Tags: private key

Tags: authenticator

Tags: WebAuthn

Passwords won’t disappear any time soon, but a viable alternative is taking shape

(Read more…)

The post Android and Chrome start showing passwords the door appeared first on Malwarebytes Labs.

Read more