Malwarebytes Labs - The Security Blog From Malwarebytes

Will Google’s Privacy Sandbox take the bite out of tracking cookies?

March 6, 2021 - We look at the latest developments for Google's "Project Sandbox", and explore what's going to happen to third-party cookies.

Vital infrastructure

China’s RedEcho accused of targeting India’s power grids

March 5, 2021 - RedEcho allegedly penetrated a number of organizations, including some of those responsible for ensuring the optimum scheduling and dispatching of electricity

Exploits and vulnerabilities

Update now! Chrome fix patches in-the-wild zero-day

March 4, 2021 - Google has released a patch for yet another vulnerability in Chrome's audio component after it was exploited in the wild.

Privacy

21 million free VPN users’ data exposed

March 3, 2021 - Recent VPN data leaks and breaches highlight the importance—and difficulty—of fully trusting a VPN provider. Here are tips on who to trust.

Exploits and vulnerabilities

Patch now! Exchange servers attacked by Hafnium zero-days

March 3, 2021 - Microsoft has released updates to deal with 4 zero-day vulnerabilities being used in an attack chain aimed at users of Exchange Server.

Malwarebytes news

Ryuk ransomware develops worm-like capability

March 2, 2021 - French researchers have found a Ryuk ransomware variant that can spread laterally through an infected network.

Podcast

Defending online anonymity and speech with Eva Galperin: Lock and Code S02E03

March 1, 2021 - On Lock and Code, we talk to Eva Galperin, director of cybersecurity for EFF, about the importance of defending online anonymity and speech.