Hackers Hijack HBO Max Reddit Account to Push Malware in ClickFix Ads A sophisticated cyberattack has seen hackers compromise the official HBO Max Reddit account, using it to spread malicious ads that launched attacks on Windows and macOS devices. The campaign, dubbed PasteSwitch by security researchers, targeted both platforms with a range of malware payloads. … Read more
A Browser Extension with 30,000 Installs Exposes Twitch Users’ OAuth Tokens, Raises Security Concerns A disturbing security flaw has been discovered in a popular browser extension for the live streaming platform Twitch. The extension, called Twitch Enhanced Viewer | JeetBot, boasts over 30,000 installs and promises to block ads, improve video playback, and bypass region … Read more
Homebrew 7.0.0 Packs a Punch with Enhanced Security Features and Native GUI In a significant upgrade, Homebrew’s package manager has been released in version 7.0.0, boasting a built-in vulnerability scanner, improved security controls, and a fully-fledged native graphical interface. This major overhaul promises to make the popular open-source tool even more appealing to macOS users, … Read more
Cybercriminals have hijacked HBO Max’s official Reddit account to spread malware by pushing malicious ads that trick users into installing information-stealing malware. Over 48 hours, the verified u/hbomax account posted 108 malicious advertisements, some of which impersonated the streaming service while others promoted fake AI tools and developer software. The attackers used a social engineering … Read more
A significant data breach has compromised the personal information of over 246,000 government employees and individuals associated with Japan’s Government Solution Service (GSS). The attack, which was discovered on July 9th, involved exploiting a vulnerability in a VPN device used by the GSS system. While it is unclear what specific VPN product was affected or … Read more
Twitch Extension with 30,000 Installs Exposes Users’ OAuth Tokens A disturbing trend has emerged on Twitch, one of the world’s most popular live streaming platforms. A browser extension called Twitch Enhanced Viewer | JeetBot, available in both Chrome and Firefox stores, has been sending users’ sensitive OAuth session tokens to a commercial bot service without … Read more
Windows Users in for a Rough Ride as Emergency Updates Attempt to Fix RDS Failures and Other Issues A perfect storm of problems has been brewing for Windows administrators since Microsoft’s September security updates were released. Not only did these updates cause widespread Remote Desktop Services (RDS) failures, but they also introduced issues with Hyper-V … Read more
Homebrew Package Manager Gets Major Update with Built-in GUI and Enhanced Security Features A new version of Homebrew, a popular open-source package manager for macOS, has been released with a host of exciting features that promise to make managing software on your Mac easier and more secure. The latest update, version 7.0.0, brings a built-in … Read more
A major cybersecurity incident has come to light in Japan, where a vulnerability in a Virtual Private Network (VPN) device used by government employees may have exposed sensitive personal information of over 246,000 individuals. The breach was discovered by Japan’s Digital Agency, which provides digital services to the government, and affects personnel records, including names, … Read more
Remote Desktop Services Failures Hit Windows Systems, Microsoft Rushes to Release Emergency Updates A critical issue has been plaguing Windows systems since the release of this month’s security updates. Remote Desktop Services (RDS) have become unstable on affected systems, causing RDP connection and sign-in failures, as well as unresponsive servers. This problem has left many … Read more