September 2022 – Page 8 – PossibleThreat Articles

Update Firefox and Thunderbird now! Mozilla patches several high risk vulnerabilities

September 22, 2022 0 Comments cve-2022-3033, cve-2022-40959, cve-2022-40960, cve-2022-40962, Exploits and vulnerabilities, firefox, Mozilla, news, thunderbird

Categories: Exploits and vulnerabilities

Categories: News

Tags: CVE-2022-40959

Tags: CVE-2022-40960

Tags: CVE-2022-40962

Tags: CVE-2022-3033

Tags: Mozilla

Tags: Firefox

Tags: Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird which could be exploited to take control of a system.

MalwareBytes Security

Morgan Stanley’s years-long “extensive failure” to protect customer data ends in huge fine

September 22, 2022 0 Comments news, Privacy

Categories: News

Categories: Privacy

The SEC has unearthed a long list of whoopsies by Morgan Stanley, all involving the mishandling of sensitive data when disposing of devices.

MalwareBytes Security

2K games helpdesk abused to spread RedLine malware

September 22, 2022 0 Comments 2k games, news, redline, support

Categories: News

Tags: 2k games

Tags: redline

Tags: support

Tags:

The 2K games support helpdesk was abused to mail a link to download the RedLine infostealing malware to customers whose email address was in the system

(Read more…)

The post 2K games helpdesk abused to spread RedLine malware appeared first on Malwarebytes Labs.

Security Sophos

Uber, Rockstar fall to social-engineering attacks; and you?

September 22, 2022 0 Comments electronic arts, iab, lapsus, rockstar, security operations, uber

Credit to Author: Chester Wisniewski| Date: Thu, 22 Sep 2022 18:31:26 +0000

Security pros often talk of security being a process and a system, not a destination, and the recent news from Uber and Rockstar Games is just another example. Details are still emerging, but we can still analyze these breaches at a high level and apply these lessons to our own information security programs. Similar to […]

Security Sophos

S3 Ep101: Uber and LastPass breaches – is 2FA all it’s cracked up to be? [Audio + Text]

September 22, 2022 0 Comments 2fa, data breach, data loss, lastpass, MFA, Naked Security Podcast, Podcast, uber

Credit to Author: Paul Ducklin| Date: Thu, 22 Sep 2022 16:42:29 +0000

Latest episode – listen now! Learn why adopting 2FA isn’t a reason to relax your other security precautions…

Microsoft Security

Malicious OAuth applications used to compromise email servers and spread spam

September 22, 2022 0 Comments cybersecurity, exchange server, malicious oauth applications, Microsoft security intelligence, Spam

Credit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Thu, 22 Sep 2022 16:00:00 +0000

Microsoft discovered an attack where attackers installed a malicious OAuth application in compromised tenants and used their Exchange servers to launch spam runs.

The post Malicious OAuth applications used to compromise email servers and spread spam appeared first on Microsoft Security Blog.

Security Wired