Windows 11 has been released with massive updates to its security system. When it comes to Windows 10 and Windows 11 comparison, the new OS version shows up to be fully reworked in the security features. New Microsoft Defender impresses with the functionality of controlled folder access, tampering and application control. A lot of cybersecurity analysts concluded that Defender in Windows 11 is ready to squeeze out the majority of anti-malware solutions.

Nonetheless, a number of users deny the default security solution. They name different reasons for that: from high resource consumption to unwillingness to share the data [...]

Attackers are eager to take advantage of the recent Pegasus spyware scandal and have even released a fake antivirus.

Under the guise of a security scanner that looks for traces of Pegasus in the system, hackers are distributing RAT Sarwent.

Let me remind you that in June 2021, the human rights organization Amnesty International, the non-profit project Forbidden Stories, as well as more than 80 journalists from a consortium of 17 media organizations in ten countries of the world published the results of a joint investigation, which was named the Pegasus project. Then the experts said that they had discovered large-scale abuse of the Pegasus spyware, created by the Israeli [...]

During cyberattacks, the Zloader Trojan disables the Microsoft Defender antivirus solution on the victim’s computer systems in order to avoid detection.

The behavior of the Zloader Trojan was investigated by SentinelOne specialists that published a detailed report on this.

Whilst analyzing anomalies in SentinelOne’s threat telemetry, we identified a new ZLoader botnet recently set up which implements a novel delivery mechanism with a stealthy infection chain. ZLoader operators deployed undetected droppers and disabled security solutions to lower the chances of detection.SentinelOne researchers tell.

The attackers also changed the vector of malware propagation from spam [...]

Researchers report that a Fortinet VPN credential list of nearly 500,000 usernames and passwords is being distributed on hacker forums.

These credentials were allegedly copied from vulnerable devices last summer. The attackers say that the vulnerability used to collect information has already been fixed, but many of the credentials are still valid.

Bleeping Computer writes that the list of credentials was released free of charge by hacker Orange, who is the administrator of the recently launched hack forum RAMP and a former operator of Babuk.

Previously, due to disagreements between members of the hack group Bubuk, Orange separated from the team to found RAMP, [...]

Avast analysts have calculated that thousands of Android applications are leaking a variety of data due to misconfigured Firebase database.

Researchers remind that thanks to Firebase, data can be stored in a huge number of different applications – for training, games, mail, food delivery and others, and in regions around the world, including Europe, Eastern Europe, the Middle East, Southeast Asia and Latin America.

As a result, databases can contain personal information collected by these applications, such as names, addresses, locations, and in some cases even passwords.

Many developers use the Firebase platform to build Android apps. In doing so, they [...]

Autodesk representatives notified the US Securities and Exchange Commission that they also suffered from large-scale supply chain attack and hack of SolarWinds.

It turned out that one of the company’s servers was infected with Sunburst malware.

We identified a compromised SolarWinds server and took immediate steps to contain and eliminate the threat. While we believe that Autodesk’s customer operations and products were not affected by this attack, other similar attacks could have a significant negative impact on our systems and operations.the company said in a statement.

An Autodesk spokesman told Bleeping Computer that the attackers did not deploy any malware on [...]

Cloudflare announced the prevention of the most powerful DDoS attack to date, reaching 17.2 million HTTP requests per second, three times the power of other known attacks. The incident happened last month and targeted one of Cloudflare’s financial clients.

According to the company, an unknown attacker used a botnet of 28,000 infected devices to send HTTP requests to the client’s network.

Based on the IP addresses of the infected devices, Cloudflare experts estimate that 15% of the traffic came from Indonesia, with another 17% from India and Brazil.

These attacks are commonly referred to as “volumetric” attacks and differ from classic [...]

Analysts at AV-TEST conducted traditional testing of security products for Android, and came to the disappointing conclusion: Android’s built-in Google Play Protect anti-malware system is failing. The AV-TEST tests were conducted over six months, from January to June 2021.

The fact is that Google Play Protect only detected about two-thirds of the 20,000 malicious applications that it encountered during the tests, and as a result, Google’s security solution took the last place in the ranking of researchers.

Even running permanently and scanning every application installed and running on the device, “this service does not provide good security: any [...]

The No More Ransom project, a joint initiative of law enforcement agencies and information security companies, celebrated its fifth anniversary, and on this occasion its participants shared interesting statistics.

Let me remind you that No More Ransom was launched in 2016 as an initiative to combat ransomware. Then only Europol, the Dutch police, Kaspersky Lab and McAfee took part in it.

As part of the No More Ransom project, the nomoreransom.org portal was launched, where users can find information about ransomware and threats posed by them, as well as get free tools to recover their data if it has been “processed” by such malware.

Cryptographers have become a [...]

Last year, the developers of Kaspersky Password Manager (KPM) asked users to update their passwords to stronger ones due to a vulnerability. Now the specialists of Ledger Donjon (the information security division of the Ledger company, which develops crypto wallets), talked about why this happened, and what problems they discovered in KPM some time ago.

Experts remind that in March 2019, Kaspersky Lab released an update for KPM, promising that now the application will be able to identify weak passwords and generate more reliable replacements for them.

Three months later, the Ledger Donjon team found that KPM was not doing very well with this, as it used a pseudo-random number [...]