Over 100 malicious Google Chrome extensions were removed.

111 Google Chrome extensions were identified as malicious by cybersecurity company Awake Security. Awake team said that extensions were able to take screenshots, read the clipboard, steal user’s passwords and authentication cookies bypassing Chrome Web Store. Identified extensions were downloaded more than 32 million times, according to Awake.

Source and developers of these findings are unknown but Awake team assumes they can be developed by the same cybercriminal based on the similarities in the codebase.

Google deactivated 106 malicious extensions in Chrome and warned their customers.

QBot attacks: new “old” ransomware.

Qbot (a.k.a Quakbot, Qakbot, Pinkslipbot) is a famous banking trojan. In June 2020 over 36 U.S. and Canada financial institutions, including Citibank, Bank of America, JP Morgan, were targeted. Stealing banking credentials and financial data via browser hiacking, deploying backdoors to access targeted machines, this is not only impact that these attacks have.

Ransomware tools and techniques are continuously evolving and companies need to prepare better updating and patching critical software, implement more security measures for detection or blocking backdoors (firewall, IDS etc.)  

Cisco fixed critical flaws in WebEx.

Cisco release an update fixing two high-severity flaws in the Cisco WebEx Meetings Desktop App. Vulnerabilities could allow attackers to run code or programs on the targeted machine if exploited.

CVE-2020-3342, remote code execution vulnerability, was found in the macOS client. It could allow unauthenticated attacker to remotely execute arbitrary code due to inappropriate certificate validation.

CVE-2020-3263, arbitrary program execution flaw, was found in the Windows client, could allow remote execution of the arbitrary program.

Update was released and available for all Cisco users.

*pic Google Play

#cybersecurity #hacker #goal #quotes

Catching the market demand Zoom promises end-to-end encryption for all users.

Saying previously that end-to-end encryption will be available only for paid accounts, Zoom decided to change a strategy promising it to all users.

Company said that beta-version will be available in July. New feature will be set manually by user while creating a meeting, it will be off by default.

It was a long discussion inside the company, but seeing that Facebook and Apple implementing this security measure, Zoom didn’t have too much choice.

BlueJeans Collaboration Tool: New Security Features.

During the COVID-19 lockdown collaboration tools became part of the normal life routine. At the same time, it seems, attacks on them also became extremely popular.

Companies are working on the security features implementation and improvement since the beginning of pandemic.

BlueJeans announces few new security features recently, such as restricted meetings, meeting lock, screen share controls, AES-256 (!) encryption and more.

BlueJeans is a software company bought by Verison earlier this year and is not so popular still as other videoconferencing tools.

*picture: BlueJeansSupport

#coding #programming #quotes #life #art