Microsoft releases security patch updates for a total 60 vulnerabilities, of which 19 are rated as critical and 39 important.

https://thehackernews.com/2018/08/microsoft-patch-updates.html

August 2018 Patch Tuesday also addresses two publicly disclosed vulnerabilities that are under active attack.

Foreshadow Attacks — Three new speculative execution side-channel vulnerabilities discovered in Intel CPUs. In addition to the data stored in the OS kernel memory, new flaws could also reveal sensitive information from VMs, hypervisors and SMM memory.

https://thehackernews.com/2018/08/foreshadow-intel-processor-vulnerability.html

Former Microsoft Engineer has been sentenced to 18-months in prison and three years of supervised release after pleading guilty to money laundering charges in connection with the Reveton ransomware attacks.

https://thehackernews.com/2018/08/microsoft-reveton-ransomware.html

Watch Out! Cybercriminals using a new 'simple yet effective' technique to bypass #Microsoft Office 365 anti-phishing protections

https://thehackernews.com/2018/08/microsoft-office365-phishing.html

Instagram Got Hacked — In a Widespread Hacking Campaign Attackers Locked Thousands of Users Out of Their Accounts.
Some Victims Claimed They Even Had Two-factor Authentication Enabled.

https://thehackernews.com/2018/08/hack-instagram-accounts.html

Google Patches A Chrome Browser Bug (CVE-2018-6177) That Could Have Allowed Remote Hackers to Find Out Everything Facebook like Sites Know About You.

PoC Released. Make sure you have installed the latest version of Google Chrome.

https://thehackernews.com/2018/08/google-chrome-vulnerability.html

New #PHP Exploitation Technique Could Leave Thousand of Websites at Risk of Hacking, Including #WordPress Blogs

https://thehackernews.com/2018/08/php-deserialization-wordpress.html

That's embarrassing! A 16-year-old school boy hacked Apple Servers—not once, but numerous times—and downloaded 90GB of secure files.
Teen claims to have hacked the company because he is a huge Apple fan and dreams of working there.

Read more at
https://thehackernews.com/2018/08/apple-hack-servers.html

Critical Sandbox Bypass Vulnerabilities in Ghostscript Interpreter Could Expose Many Systems and Software to Remote Code Execution Attacks

https://thehackernews.com/2018/08/ghostscript-postscript-vulnerability.html

⚡Important — a new critical RCE vulnerability (CVE-2018-11776) discovered in the "Apache Struts" framework that could let remote hackers take over affected web servers.

https://thehackernews.com/2018/08/apache-struts-vulnerability.html

Watch Out! Cyber criminals are using a newAndroid malware framework — "Triout" — to turn legitimate apps into powerful spyware that can record calls, steal messages, location, photos & videos

https://thehackernews.com/2018/08/android-malware-spyware.html

Well done, Apple.

Apple forces Facebook to take down its free 'Onavo Protect VPN' app from the iOS store for violating 'user-data collection' rules

https://thehackernews.com/2018/08/facebook-vpn-app-apple-store.html

Former NSA contractor 'Reality Winner' sentenced to more than 5-years in prison for leaking "TOP SECRET" information about Russia hacking attempts to the Media
. She gets the "longest sentence" served by a federal defendant for unauthorized disclosure.

https://thehackernews.com/2018/08/reality-winner-nsa-russia.html

T-Mobile Hacked (Yes, Once Again) — 2 Million Customers' Personal Data Stolen

https://thehackernews.com/2018/08/t-mobile-hack-breach.html

Google Researcher Discloses Critical Flaw in Fortnite Android App Installer That Lets Hackers Install Malware

https://thehackernews.com/2018/08/fortnite-android-app-apk.html …

Hacker discloses details and PoC for an unpatched 0-day privilege escalation vulnerability in the Microsoft Windows
. It works on a "fully-patched 64-bit Windows10 system," researcher confirmed.

https://thehackernews.com/2018/08/windows-zero-day-exploit.html

Instagram adds new security tools to make its platform more secure

– Support for 3rd-Party 2FA Apps
– Get Verified Account
– About This Account Feature to Combat Misinformation

Read More https://thehackernews.com/2018/08/secure-instagram-account.html

Air Canada Suffers Data Breach — 20,000 Mobile App Users Affected
.

Compromised data includes passengers’ name, email, phone number, Passport number, NEXUS number, known traveler number, gender, birth date, nationality, passport expiration date, & more.

https://thehackernews.com/2018/08/air-canada-data-breach.html

Google's FIDO based 'Titan Security Key' is now available for $50 https://thehackernews.com/2018/08/google-titan-security-key.html

Fourth Hacker Who Leaked Celebrities' Naked Photos Gets 8 Months in Prison

https://thehackernews.com/2018/08/photos-celebrity-hacker.html

⚠️WARNING! Someone Hijacked Chrome Extension for MEGA (File Sharing Service) to Steal Users' Passwords for Popular Sites, as well as Private Keys for Cryptocurrency Wallets

https://thehackernews.com/2018/09/mega-file-upload-chrome-extension.html

Uninstall the Plug-In Right Now & Change Your Passwords Immediately