In a supply chain attack that may be unprecedented in the number of downloads, servers hosting CCleaner, a popular tool for cleaning up the PC, has been delivering a version of the said software with malware. What happened? Threat actors have managed to change the files that were being delivered by Avast servers hosting CCleaner updates. In case you are wondering why they were...
Ed Foudil, a web developer and security researcher, has submitted a draft to the IETF — Internet Engineering Task Force — seeking the standardization of security.txt, a file that webmasters can host on their domain root and describe the site’s security policies. The file is akin to robots.txt, a standard used by websites to communicate and define policies for web and search engine crawlers....
Google today announced Chrome is going to war with autoplay. Starting next year, Chrome will only autoplay a given piece of content when the media won’t play sound or the user has indicated an interest in the media. Not all users have the same preferences for autoplay media, so Google has looked at letting users mute and unmute entire websites — we first heard...
Researchers say that a bug in the Windows kernel could allow hackers to perform malicious actions by tricking security products blindly relying on a Windows API. The bug affects a low-level interface, known as PsSetLoadImageNotifyRoutine, that notifies when a module has been loaded into the Windows kernel. The bug can allow an attacker to forge the name of a loaded module, a method that...
The next update of Windows 10, the Fall Creators Update, will be available worldwide October 17. With the Fall Creators Update we are introducing some fun, new ways to get creative. As part of the update we will deliver an evolution to the photos experience that will let you tell your story like never before using photos, videos, and 3D effects; enhancements in gaming,...
A federal appeals court in California ruled on Tuesday that an ad company responsible for so-called “zombie” or “supercookies”—bits of code that tracked the location and browsing habits of Verizon customers—could not dodge a class action lawsuit by invoking arbitration rules in the phone company’s contracts. The supercookies in question gained notoriety after the website ProPublica discovered the ad company, Turn, and Verizon were...
Shortly before Amazon Prime Day in July, the owner of the Brushes4Less store on Amazon’s marketplace received a suspension notice for his best-selling product, a toothbrush head replacement. The email that landed in his inbox said the product was being delisted from the site because of an intellectual property violation. In order to resolve the matter and get the product reinstated, the owner would...
Comcast has sued the state of Vermont to try to avoid a requirement to build 550 miles of new cable lines. Comcast’s lawsuit against the Vermont Public Utility Commission (VPUC) was filed Monday in US District Court in Vermont and challenges several provisions in the cable company’s new 11-year permit to offer services in the state. One of the conditions in the permit says that “Comcast shall...
Facebook added an additional defense today against the spread of fake news and viral hoaxes. If a Facebook page is found to be repeatedly sharing false stories, the company will ban the page from advertising on Facebook. The company uses third-party fact-checking organizations to flag stories that are false. Under Facebook’s rules, advertisers are already not allowed to run ads that link to false...
Google is going to make it a bit easier to check the battery level on Bluetooth devices connected to your phone. As spotted by XDA Developers, the Android Open Source Project has added support for “[retrieving] battery level information of [a] remote device.” When this makes its way to a full Android release, it should allow an Android phone to display the battery level...
Recent Forum Activity
