The Weekly Webroot Digest: 1/26/18

  • 26 January 2018
  • 3 replies
  • 23 views

Userlevel 7
  • Retired Webrooter
  • 1376 replies
Welcome to the Weekly Webroot Digest!#HappyFriday
 
This is a weekly series to highlight the best articles and news stories going on in the Community. 
What was your favorite story? What topics would you like to see? Sound off in the comments! :)
 


Hacker Infects Gas Pumps with Code to Cheat Customers
Authorities in Russia have broken up a widespread scheme involving dozens of gas-station employees who used software programs on electronic gas pumps to con customers into paying for more fuel than they actually pumped into their tank. The scam shorted customers between 3-to-7 percent per gallon of gas pumped.
 
Zayev is accused of developing the software programs and selling them to rogue gas-station employees. Under the arraignment, both gas-station employees and Zayev received a cut of the money customers overpaid for gas. According to the FSB, the crime earned Zayev and gas station employees “hundreds of millions of rubles.”
 
Get all the details!
 


App Flaws Allow Snoops to Spy On Tinder Users, Researchers Say
Researchers at Checkmarx say they have discovered a pair of vulnerabilities in the Tinder Android and iOS dating applications that could allow an attacker to snoop on user activity and manipulate content, compromising user privacy and putting them at risk.

 
One vulnerability lies in the fact that currently, both the iOS and Android versions of Tinder download profile pictures via insecure HTTP connections, Checkmarx said.
 
Be cautious in the e-dating scene!
 


Chrome 64 Released With Stronger Popup Blocker, Spectre Mitigations
Google has released Chrome 64 for Windows, Mac, Linux, and Android, and this new Chrome version brings improvements to the browser's built-in ad blocker, a bunch of developer and web standards-related changes.

 
There were some big changes that shipped with Chrome 64 on the security side of the browser. For starters, Chrome 64 includes mitigations against the web-exploitable Spectre flaw. Google promised to include this patch at the start of January. Further, Chrome 64 also comes with a bolstered popup blocker that can now block tab-under behavior, being much more efficient at blocking malvertising redirects.
 
Make sure to update!
 


OnePlus Confirms Credit Card Breach – Nearly 40,000 Customers Fall Prey
OnePlus has been dealing with a lot of security problems in the past few months but it seems that things just went a whole lot worse for the company. A lot of customers had been complaining how their credit card details have been misused ever since they purchased OnePlus phones online through the official website.
 
The company had denied this and released a statement that they cannot store payment details of the customers and hence it was not possible. However, it seems that these statements hold no value anymore.
 
The company has finally confirmed a breach of its online system!
 


VPN tunnels explained: how to keep your internet data secure
Virtual Private Networks (or VPNs) have become increasingly popular in recent years for their ability to bypass government censorship and geo-blocked websites and services, and do so without giving away who is doing the bypassing.
 
When you connect to the internet with a VPN, the VPN creates a connection between you and the internet that surrounds your internet data like a tunnel, encrypting the data packets your device sends.
 
Learn more!
 
What story from the last week the most important for you? We love hearing your feedback! 


3 replies

Userlevel 7
Badge +25
The link for "OnePlus Confirms Credit Card Breach – Nearly 40,000 Customers Fall Prey" does not go to the right story. It goes to "Chrome 64 Released With Stronger Popup Blocker, Spectre Mitigations". Just thought you would like to know. 
 
Oh, and the link for "The company has finally confirmed a breach of its online system!" also goes to the wrong place. DOH! Same error as above. 
Userlevel 7
Thanks for that, @! I do these on Thursdays and the last one was not a good one for me.

Userlevel 7
Badge +25
And at least you know I read it too!  :-)
I’ve had days like that too. 
 
Cheers

Reply