A hacker has wiped, defaced more than 15,000 Elasticsearch servers
The attacks appear to be carried with the help of an automated script that scans the internet for ElasticSearch systems left unprotected, connects to the databases, attempts to wipe their content, and then creates a new empty index called nightlionsecurity.com.
However, these types of destructive attacks were Elasticsearch data is wiped are not the first of their kind. In the spring and summer of 2017, multiple hacker groups engaged in database ransom attacks against multiple types of database technologies, including Elasticsearch.
Zoombombing is a crime, not a prank, prosecutors warn
Internet trolls and other troublemakers have responded with "Zoombombing": joining Zoom meetings uninvited and disrupting them.
"Hackers are disrupting conferences and online classrooms with pornographic and/or hate images and threatening language," wrote the US Attorney's Office for the Eastern District of Michigan. "Anyone who hacks into a teleconference can be charged with state or federal crimes."
Cloudflare Launches a DNS-Based Parental Control Service
During the coming months, Cloudflare is also working on developing and providing users with additional configuration settings for the 1.1.1.1 for Families service.
"This year, while many of us are sheltering in place, protecting our communities from COVID-19, and relying on our home networks more than ever it seemed especially important to launch 1.1.1.1 for Families," Prince added.
From Gmail to Gfail: Google's G-Suite topples over for unlucky netizens, rights itself
The outage affected Gmail, Drive, Docs, Sheets, Slides, Hangouts Chat, and Meet services. The G-Suite admin console and Classroom services were also down. Basically, Google said users reported being unable to access its platforms.
"Some of our users experienced a service disruption ... as a result of a significant router failure in one of our data centers in the South Eastern US, causing network congestion," the web giant said.
Microsoft throttles some Office 365 services to continue to meet demand
On March 16, Microsoft posted to Microsoft 365/Office 365 admin dashboardds a warning about "temporary feature adjustments" that it might take. That warning told customers that Microsoft was "making temporary adjustments to select non-essential capabilities."
Microsoft officials said they will continue to apprise customers of further restrictions and tweaks they will be making to their services to continue to meet demand.
Microsoft nukes 9 million-strong Necurs botnet after unpicking domain name-generating algorithm
Microsoft researchers figured out how an algorithm that generated new, unique domains for Necurs' infrastructure operated and was able to correctly guess six million domain names that would be generated over a 25-month period, it said. These domains were then reported to registrars so they could be promptly blocked.
Popular VPN And Ad-Blocking Apps Are Secretly Harvesting User Data
Sensor Tower, a popular analytics platform for tech developers and investors, has been secretly collecting data from millions of people who have installed popular VPN and ad-blocking apps for Android and iOS, a BuzzFeed News investigation has found. These apps, which don’t disclose their connection to the company or reveal that they feed user data to Sensor Tower’s products, have more than 35 million downloads.
Apple and Google restrict root certificate privileges due to the security risk to users. Sensor Tower’s apps bypass the restrictions by prompting users to install a certificate through an external website after an app is downloaded.
ICANN still hasn’t decided whether to approve .org sale with just 11 days left to go
Despite two previous postponements, four months’ notice, dozens of letters, and a protest outside its headquarters, on Monday this week ICANN refused to say whether it will consider the broader public interest in its decision, or apply the same criteria it used last time the registry changed ownership.
It’s no coincidence that the primary criticism leveled at ICANN since its inception in 1998 is that it is – and remains – largely unaccountable. It makes decisions of global import and holds itself up as a model of modern “multistakeholder” decision-making, where everyone impacted has a say, but in reality the organization never reveals internal deliberations and it goes to great lengths to shield its decisions from scrutiny.
Facebook sues Namecheap to unmask hackers who registered malicious domains
Christen Dubois, Director and Associate General Counsel at Facebook, said today that Facebook engineers tracked down 45 suspicious Facebook lookalike domains registered through Namecheap, which had the owners' details hidden through the company's WhoisGuard side-service.
Since early 2019, Facebook's legal department has been filing lawsuits left and right against various third-parties abusing its platform.
No, Facebook is not telling you everything
Facebook announced the “Download Your Information” feature allowing users to download all the information that the company have on them since the creation of the account.
To put it simply, this tool is not what Facebook claims. The list of advertisers is incomplete and changes over time.
ack of information and difficulties in exercising rights, renforces an opaque environment where people are unaware of how their data is gathered, shared and used to profile and target them.