Patch Tuesday, June 2024 “Recall” Edition

Microsoft today released updates to fix more than 50 security vulnerabilities in Windows and related software, a relatively light Patch Tuesday this month for Windows administrators. The software giant also responded to a torrent of negative feedback on a new feature of Redmond’s flagship operating system that constantly takes screenshots of whatever users are doing on their computers, saying the feature would no longer be enabled by default. Continue reading Patch Tuesday, June 2024 “Recall” Edition

Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

On April 9, Twitter/X began automatically modifying links that mention “twitter.com” to redirect to “x.com” instead. But over the past 48 hours, dozens of new domain names have been registered that demonstrate how this change could be used to craft convincing phishing links — such as fedetwitter[.]com, which is currently rendered as fedex.com in tweets. Continue reading Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

Threads Launches in Europe and Starts Testing ActivityPub Integration

Meta’s Threads app is officially launching in Europe today, and the platform is also starting to test support for ActivityPub, the open social networking protocol used by Mastodon and Wordpress.
The post Threads Launches in Europe and Starts Testing Ac… Continue reading Threads Launches in Europe and Starts Testing ActivityPub Integration

Service Rents Email Addresses for Account Signups

One of the most expensive aspects of any cybercriminal operation is the time and effort it takes to create large numbers of new throwaway email accounts. Now a new service offers to help dramatically cut costs associated with large-scale spam and account creation campaigns, by paying people to sell their email account credentials and letting customers temporarily rent access to a vast pool of established accounts at major providers. Continue reading Service Rents Email Addresses for Account Signups

Phishing Domains Tanked After Meta Sued Freenom

The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta, which alleged the free domain name provider has a long history of ignoring abuse complaints about phishing websites while monetizing traffic to those abusive domains. Continue reading Phishing Domains Tanked After Meta Sued Freenom