IT News | Extol Corporation Sdn Bhd

Latest Cybersecurity News from the World

IT News

Android App Siphons Data on 200 Million Users

September 28, 2017 By aatech

A popular Android keyboard application with over 200 million downloads was found gathering user information sending the data a remote server, Adguard reveals. The offending application, GO Keyboard, has two versions available in Google Play, namely GO Keyboard – Emoji keyboard, Swipe input, GIFs and GO Keyboard – Emoticon keyboard, Free Theme, GIF, each with […]

IT News

Samba Update Patches Two SMB-Related MiTM Bugs

September 27, 2017 By aatech

Samba this week released three security updates, including two related to SMB connections that could be abused by an attacker already on the network to hijack connections and manipulate traffic or data sent from a client. The most serious of the bugs is CVE-2017-12150 where with certain configurations, Samba fails to enforce SMB signing in […]

IT News

CCleaner Attack Targeted Telecoms, Network Hardware Providers

September 26, 2017 By aatech

The malware inserted into CCleaner, a popular system utility downloaded by at least 2.3 million users, is far more serious than originally thought, specifically targeting the makers of networking equipment and enterprise software, according to evidence uncovered by investigators and published on Sept. 20. While Avast—the security firm that acquired CCleaner with its purchase of […]

IT News

1.4 Million Phishing Sites Are Created Monthly: Report

September 25, 2017 By aatech

According to a new report, an average of 1.385 million unique new phishing sites are created every month, peaking at 2.3 million in May 2017. The majority of these are online and active for an average of just 4 to 8 hours. This combination of volume and brevity makes it effectively impossible to counter phishing […]

IT News

VMware Patches Bug That Allows Guest to Execute Code on Host

September 21, 2017 By aatech

Users who run four different types of VMware products, ESXi, vCenter Server, Fusion and Workstation, are being encouraged to update to address a series of vulnerabilities, one critical. The most serious issue, an out-of-bounds write vulnerability, exists in ESXi, and desktop hypervisors Workstation, and Fusion. An attacker could exploit the issue, which exists in a […]

IT News

Vevo hacked, 3.12 TB of data leaked

September 20, 2017 By aatech

There’s a good chance that you’ve watched a popular music video from Vevo, either via YouTube, Vevo’s website or its mobile app. Most popular music artists release their videos through Vevo these days. The company – a joint venture between Warner Music Group, Sony Music Entertainment, Universal Music Group, Alphabet Inc and Abu Dhabi Media […]

IT News

Millions Download Maliciously Modified PC Utility

September 19, 2017 By aatech

More than 2 million users are estimated to have downloaded a maliciously modified version of a software utility owned by antivirus firm Avast.The affected application, CCleaner, helps users perform routine maintenance on their systems, and provides functionality such as temporary files deletion, performance optimization analysis, and application management. Developed by Piriform Ltd, which was acquired […]

IT News

Rogue WordPress Plugin Allowed Spam Injection

September 17, 2017 By aatech

A popular WordPress plugin called Display Widgets running on 200,000 sites was removed from the official WordPress.org plugin repository after researchers discovered the plugin had a backdoor that was injecting spam ads into victims’ sites.According to researchers at Wordfence who publicly disclosed the rogue plugin on Tuesday, the backdoor had been present in Display Widgets […]

IT News

Premium SMS Malware ‘ExpensiveWall’ Infects Millions of Android Devices

September 16, 2017 By aatech

Google has ejected 50 apps from its Google Play store that were harboring mobile malware dubbed ExpensiveWall. The malware, which was downloaded between 1 million to 4.2 million times, sends fraudulent premium SMS messages for fake fee-based services without the knowledge or permission of users, according to Check Point security researchers.Researchers said the malware was […]

IT News

Adobe Fixes Eight Vulnerabilities in Flash, RoboHelp, ColdFusion

September 15, 2017 By aatech

Adobe fixed eight vulnerabilities across three products, including two critical memory corruption bugs and a critical XML parsing flaw, with its regularly scheduled update on Tuesday.RoboHelp for Windows, ColdFusion, and as usual, Flash Player, all received updates as part of the company’s Patch Tuesday security bulletins. Versions 26.0.0.151 and earlier of Flash Player are affected […]