Latest News from Bleeping Computer

• BiDi Swap: The bidirectional text trick that makes fake URLs look real

  Attackers are abusing bidirectional text to make fake URLs look real, reviving a decade-old browser flaw now fueling new phishing tricks. Varonis reveals how the "BiDi Swap" technique works and what organizations need to watch out for. [...]

• New Atroposia malware comes with a local vulnerability scanner

  A new malware-as-a-service (MaaS) platform named Atroposia provides cybercriminals a remote access trojan that combines capabilities for persistent access, evasion, data theft, and local vulnerability scanning. [...]

• New Herodotus Android malware fakes human typing to avoid detection

  A new Android malware family, Herodotus, uses random delay injection in its input routines to mimic human behavior on mobile devices and evade timing-based detection by security software. [...]

• Google disputes false claims of massive Gmail data breach

  Google was once again forced to announce that it had not suffered a data breach after numerous news outlets published sensational stories about a fake breach that purportedly exposed 183 million accounts. [...]

• X: Re-enroll 2FA security keys by November 10 or get locked out

  X is warning that users must re-enroll their security keys or passkeys for two-factor authentication (2FA) before November 10 or they will be locked out of their accounts until they do so. [...]

• Ransomware profits drop as victims stop paying hackers

  The number of victims paying ransomware threat actors has reached a new low, with just 23% of the breached companies giving in to attackers' demands. [...]

• Windows will soon prompt for memory scans after BSOD crashes

  Microsoft has started testing a new feature that prompts Windows 11 users to run a memory scan when logging in after a blue screen of death (BSOD). [...]

• QNAP warns of critical ASP.NET flaw in its Windows backup software

  QNAP warned customers to patch a critical ASP.NET Core vulnerability that also impacts the company's NetBak PC Agent, a Windows utility for backing& up data to a QNAP network-attached storage (NAS) device. [...]

• Italian spyware vendor linked to Chrome zero-day attacks

  A zero-day vulnerability in Google Chrome exploited in Operation ForumTroll earlier this year delivered malware linked to Italian spyware vendor Memento Labs, born after IntheCyber ​​Group acquired the infamous Hacking Team. [...]

• Google says everyone will be able to vibe code video games

  Google AI Studio product lead teased that everyone will be able to vibe code video games by the end of the year. [...]