A week in security (August 30 – September 5)

Last week on Malwarebytes Labs

• ProxyToken: another nail-biter from Microsoft Exchange
• Macs turn on apps signed by Symantec, treat them as malware
• Google Play sign-ins can be abused to track another person’s movements
• FTC bans SpyFone and its CEO from continuing to sell stalkerware
• BrakTooth Bluetooth vulnerabilities, crash all the devices!
• Vulnerable WordPress plugin leaves online shoppers vulnerable
• WhatsApp hit with €225 million fine for GDPR violations
• Watch what you send on anonymous SMS websites
• FBI warns of ransomware threat to food and agriculture

Other Cybersecurity news

• Malware found a new place to hide: graphics cards (Source: PC Mag)
• Student tracks Bluetooth headset wearers by wardriving around Oslo on a bicycle (Source: The Register)
• Increasing number of investigations calls for advanced technology and dedicated teams (Source: Help Net Security)
• 15 year old malware proxy network goes dark (Source: Krebs on Security)
• Experts warn on Office 365 phishing attacks (Source: Computer Weekly)
• Juniper breach mystery starts to clear with new details on hackers and U.S. role (source: Bloomberg)
• Car hacking danger is likely closer than you think (Source: Car and driver)
• Facebook users in Rother Valley hacked by postcode lottery scammers (Source: Worksop Guardian)
• Absurd Warzone TikTok shows hackers are now impossible to kill even when downed (Source: Dexerto)
• Dangerous Android malware is spreading – beware of text message scam (Source: Laptop Mag)

Stay safe, everyone!

The post A week in security (August 30 – September 5) appeared first on Malwarebytes Labs.