Happygeek

Password Hack Warning As New Threat Jumps From Your Laptop To Phone As if by magic, this password hack jumps from your laptop to your smartphone — but it's you who waves the wand.

This article @forbes.com has now been updated with an interesting counterpoint from @paulwalsh.bsky.social.

#Infosec

www.forbes.com/sites/daveyw...

Critical Zero-Day Exposes FTP Servers To Attack With Microsoft SharePoint servers still under attack, now comes the news that FTP servers have been hit by another critical zero-day exploit.

By me @forbes.com: Happy Monday security teams. It never rains but it comes thundering down with voluminous claps of thunder.

CrushFTP zero-day confirmed.

#infosec

www.forbes.com/sites/daveyw...

Microsoft Confirms Ongoing Mass SharePoint Attack — No Patch Available Microsoft has confirmed that SharePoint Server is under mass attack and no patch is yet available — here’s what you need to know and how to mitigate the threat.

By me @forbes.com: Global hack attack underway against SharePoint Server, no patch available and mitigations include pulling the internet plug.

#infosec

www.forbes.com/sites/daveyw...

Web Browser AI Hack Attacks Confirmed — What You Need To Know Your web browser is hiding these hack attacks — what you need to know about the AI cloaking-as-a-service threat.

By me @forbes.com: Cloaking-as-a-Service, the "you can't see me" threat you can't, erm, see, unless you can.

#kudos @slashnext

#infosec

www.forbes.com/sites/daveyw...

Microsoft Security Update Breaks Windows 10 Search Feature The latest Microsoft Patch Tuesday security updates have done the opposite and broken yet another Windows feature. Here’s what you need to know.

By me @forbes.com: Here we go again, Microsoft weakening trust in security updates. Sure, emoji search isn't exactly essential, but it is part of a slippery slope. The cumulative effect is a bad thing - yay or nay, dear readers?

#infosec

www.forbes.com/sites/daveyw...

From Vibe Coding To Vibe Hacking — AI In A Hoodie Vibe coding is a phenomenon, and cyberattacks are fast-evolving thanks to AI. Is vibe hacking the next big thing in cyber?

By me @forbes.com: AI in a hoodie. Pew Pew. Or maybe not...

#kudos Forescout and Michele Campobasso for the excellent research and analysis.

#infosec

www.forbes.com/sites/daveyw...

Microsoft Confirms Windows 11 Update Causes Security Firewall Error Another Windows update, another problem caused by an update — what you need to know as users report Windows Firewall error.

Happy #Sunday security sleuths. By me @forbes.com: does anyone actually check Microsoft updates before pushing them out anymore? Serious question - with apologies to my Microsoft buddies.

#infosec

www.forbes.com/sites/daveyw...

Amazon Issues Security Warning As Prime Account Hacks Mount As Prime Day 2025 is confirmed — Amazon warns of account hack attacks.

By me @forbes.com: Amazon Prime Day 2025 is fast approaching. Last year cybercriminals went into overdrive, with attacks up 80%.

#infosec

www.forbes.com/sites/daveyw...

Google Chrome Warning — Windows, Android, Mac And Linux Users Act Now Don’t wait — all users should update Google Chrome now.

By me @forbes.com: Another day, another Google Chrome security update.

#infosec

www.forbes.com/sites/daveyw...

16 Billion Apple, Facebook And Google Passwords Leaked — Change Yours Now Change all your account passwords now — don’t wait: 16 billion credentials are confirmed as having been leaked.

By me @forbes.com: The GOAT of all credentials leaks, all new data (with the exception of 184 million records from May) the researchers say. #kudos @j4vv4d.com for advice.

#infosec

www.forbes.com/sites/daveyw...

Your Passwords Are At Risk — New Windows XFiles Attack Confirmed This new password-stealing attack targets Windows users — here’s what you need to know about the XFiles threat.

By me @forbes.com: The truth is out there, but the XFiles attackers aren't the ones telling it.

#InfoSec

www.forbes.com/sites/daveyw...

Microsoft Confirms Outlook Emails Are Crashing — Here’s The Fix Are your Outlook emails crashing? Here’s a temporary fix while Microsoft works on an update.

By me @forbes.com: Are your Outlook emails crashing? Here's the fix.

www.forbes.com/sites/daveyw...

Update Windows Now — Microsoft Confirms System Takeover Danger Microsoft has issued a warning that Windows hackers could gain system privileges using this authentication relay attack — an update is available; apply now.

By me @forbes.com: You have patched CVE-2025-33073 already, right? Riiiight? #kudos @Synacktiv

#infosec

www.forbes.com/sites/daveyw...

This New Ransomware Can Irrevocably Destroy Your Files — Backup Now Be warned, this ransomware threat can permanently erase your files — act now.

By me @forbes.com: New Ransomware-as-a-Service group adds nasty file wiper to the payment leverage threat arsenal.

#infosec

www.forbes.com/sites/daveyw...

Use These Secret Gmail Addresses To Prevent Hack Attacks — Here’s How Your Gmail account is at risk — use these secret email addresses now.

By me at @forbes.com: Another "not a silver bullet" piece of advice, but still a valuable weapon for ordinary users and one that far too many either don't know about or don't realize is so easy to use.

#infosec

www.forbes.com/sites/daveyw...

Critical Google Messages Security Update For 1 Billion Users Confirmed This update is a Google Messages game-changer — what to know.

By me @forbes.com: I don't have a reputation for being pro-Google, or pro any tech vendor, truth be told, but praise where praise is due: I think this is a good (if not perfect) move. Every little helps.

#infosec

www.forbes.com/sites/daveyw...

Microsoft Confirms Security Pause For Outlook Email Encryption Microsoft is about to change how Outlook encryption works — here’s what you need to know.

By me @forbes.com: Don't follow the Spice Girls for cybersecurity advice as "2 become 1" is all wrong, at least as far as Outlook 2-click encryption is concerned.

#infosec

www.forbes.com/sites/daveyw...

Change Your Gmail Password Now, Google Tells 2 Billion Users Google says change your Gmail password as attacks continue — don't wait, act now.

By me @forbes.com: Don't listen to Cat Stevens/Yusuf Islam for cybersecurity advice, "it's not time to make a change" is wrong. Listen to Google, at least on this occasion.

#infosec

www.forbes.com/sites/daveyw...

How Hackers Use A Smartwatch To Steal Highly Confidential Data The newly revealed SmartAttack cyberattack can steal highly sensitive data from the most secure systems using a smartwatch. Here’s what you need to know.

By me @forbes.com: Clever researcher + airgapped system + smartwatch = big trouble for your most confidential data. #kudos Mordechai Guri.

#infosec

www.forbes.com/sites/daveyw...

Microsoft Users Warned Of Ongoing Password Spraying Attack — Act Now Ongoing SneakyStrike password spraying attack confirmed with tens of thousands of Microsoft accounts already being targeted.

By me @forbes.com: Use Microsoft Entra ID? Watch out, watch out, there's a password-spraying bastard about.

#infosec

www.forbes.com/sites/daveyw...

EchoLeak zero-click vulnerability for Microsoft 365 Copilot AI is a world first - it won’t be the last Find out why the EchoLeak zero-click vulnerability is a major concern and how it impacts organizations using Microsoft 365 Copilot.

By me at TechFinitive: EchoLeak might be a world first, but it ain't gonna be the last AI CVE.

#infosec

www.techfinitive.com/echoleak-zer...

New Apple Passwords Attack Confirmed — What You Need To Know This new and ongoing Apple passwords attack has now been confirmed — here’s what you need to know about the AMOS threat.

By me @forbes.com : Old macOS is under a password attack, ee aye ee aye oh of course it is.

#infosec

www.forbes.com/sites/daveyw...

Do Not Answer These Calls — Google Issues New Smartphone Warning You have been warned — Google's Threat Intelligence Group says users must not answer these calls.

By me @forbes.com: Don't talk to strangers, especially the ones you might think you know. Riiiight.

#infosec

www.forbes.com/sites/daveyw...

FBI Issues Critical Cyberattack Alert — Act Now As Victims Skyrocket You have been warned — do not ignore this FBI ransomware advisory as the number of confirmed victims suddenly surges.

Spread the word this #Saturday. This article, as featured on @forbes.com, has now been updated with yet another FBI cybersecurity advisory.

#infosec

www.forbes.com/sites/daveyw...

Snitch On Password Hackers And Get $10 Million — Here’s How Crime might not pay, but snithcing does. Here’s all you need to know about the latest Department of State password-hacking cybercriminal bounty.

By me @forbes.com: Remember, snitches get stitches—and possibly $10 million. So, there is that.

#Infosec

www.forbes.com/sites/daveyw...

Google Issues Critical New Threat Advisory — Take Action Now Google has issued critical advice for users to combat ongoing attacks.

By me @forbes.com

www.forbes.com/sites/daveyw...

Linux Passwords Warning — 2 Critical Vulnerabilities, Millions At Risk Millions of Linux users are at risk of password compromise as critical new vulnerabilities have been confirmed.

By me @forbes.com:

www.forbes.com/sites/daveyw...

Google’s 7-Day Gmail Account Hack Warning — Act Now Google has confirmed that Gmail users have 7 days to maintain control of their accounts. Don't lose access to your email. Act now.

By me @forbes.com:

www.forbes.com/sites/daveyw...

New Phone PIN And Password Attack List Revealed — Change Yours Now If your passwords or smartphone PIN code are on this newly compiled list, the time to act is now — don’t wait.

By me @forbes.com:

www.forbes.com/sites/daveyw...

Google Issues New $1 Trillion Threat Security Advisory Here's how Google is combating a $1 trillion security threat.

By me @forbes.com:

Nasty scam! Horrible scam!
Sca-a-a-a-a-a-a-am
Sca-a-a-a-a-a-a-am
Sca-a-a-a-a-a-a-am
Sca-a-a-a-a-a-a-am
Scam, Scam, Scam, Scam
Scam, Scam, Scam, Scam

Bloody Vikings.

#infosec

www.forbes.com/sites/daveyw...