Not stopping there, things are even more dangerous when two other vulnerabilities can be exploited by hackers to manipulate arbitrary files with higher permissions. What makes these even scarier is that they can be exploited without any user interaction. Samsung is aware of these security flaws and it may take the company about 2 months to fix. For now, the best defense is to make sure your Samsung phone is up to date with the latest firmware. Toshin said he has found more than a dozen vulnerabilities in Samsung devices since the start of the year, with many of these vulnerabilities already fixed. One of the bugs lies in apps and components like the Secure Folder app and the Knox security software that come pre-installed on Samsung devices. Tohsin told TechCrunch that these may have given attackers access to sensitive user data. Among +Samsung devices, the Galaxy S10+ is verified as affected. Another vulnerability resulted in the deletion of all previously downloaded apps once device admin rights were granted to a newly installed app. Additionally, a vulnerability in the Settings app could grant read/write access to files with system user-level privileges. A security flaw that was resolved in February could have given hackers access to users’ SMS/MMS messages and call details. Toshin also warned Samsung about issues that may have helped bad guys get the SD card content. While Samsung says the vulnerability affects “certain” Galaxy devices, the company appears to be downplaying the scope of the incident. “No issues have been reported globally and users should rest assured that their sensitive information is not at risk. We have addressed the potential vulnerability by developing and releasing security patches through a software update in April and May 2021 as soon as we identify the issue.” Korean company stated. (According to VOV, PhoneArena)

The form of attack and distribution of malware via email is quite common. Photo: Yahoo Recently, Microsoft’s security research team discovered a new attack via email. When the victim downloads and opens the attached PDF files, the Trojan will access the device and steal login information, passwords, etc. In addition, the malware also takes control of the system and disguises itself as fake ransomware. “Version 1.5 of the malware has quite a few changes compared to the previous version, but their functionality remains largely the same, including collecting browser passwords, running remote commands and PowerShell, remembering operations. keyboard operation… and some other features”. Malicious PDF file attached to email. Photo: Microsoft According to the report of Threatpost , malware is being distributed by attackers by email, users can identify their signs through messages like “Outgoing Payments”, “Accounts Payable Department” … Microsoft said that Microsoft 365 Defender software can detect and prevent malware from attacking computers based on machine learning.

Hackers can obtain sensitive user’s information through the vulnerability in AirDrop. Photo: TU Darmstadt. “An attacker could obtain a user’s phone number and email through AirDrop,” the team said. “They just need to use a device with Wi-Fi capable, reach the target at close range to start the mining process by opening the sharing feature on iOS or macOS device.” According to the 9to5mac There are two steps in the mechanism of AirDrop action leading to this critical vulnerability. First, in order to provide users with the option “Contacts Only” in the AirDrop sharing feature, Apple devices silently collect information on devices within the connection range. To see if the “other party” is in the contacts list, AirDrop uses a mutual authentication mechanism, comparing the user’s phone number and email address with the entries in the address book. The device authentication step in the directory can be exploited to get information. Photo: Monica Chin. In the next step, data is exchanged for both parties. Despite encryption, Apple uses a relatively weak hashing mechanism. Security experts can decompile the hash using a simple technique like a brute-force attack. The team addressed the AirDrop vulnerability with a more secure approach, they named PrivateDrop. However, Apple did not move after being warned of the risk of personal information leaks and privacy breaches. In the immediate future, experts from the Technical University of Darmstadt advise users to protect themselves by disabling AirDrop discovery in the system settings and not opening the share menu. The detailed results of the study will be presented at the USENIX security Symposium taking place in August. Why does iPhone not have USB-C port? In the past 5 years, USB-C has become the suitable connector for a wide variety of devices such as Android phones, laptops and tablets. However, Apple still doesn’t make iPhones with USB-C ports.

Although Indonesia still ranks 5th globally in the number of ransomware attacks detected, it has dropped from 1,158,837 cases in 2019 to 439,473 cases in 2020. This downtrend also also appeared in other countries in the region including Vietnam, the Philippines, Malaysia and Thailand. China remains at the top of the list for the number of ransomware cases globally in both 2019 and 2020. Meanwhile, Brazil and Russia have swapped the 2nd and 3rd place in the rankings, with Brazil currently ranked 2nd by 2020. “When I look at the statistics for individual ransomware groups, I find that this trend is in line with an overall drop in the number of detected cases,” said Fedor Sinitsyn, security researcher at Kaspersky. This is mainly due to the decrease in the number of cases involving WannaCry. This group makes up a significant portion of all the ransomware discovered to date, although for more than three years these have not been supported by the “originator” and exist only as one. “zombie” “. One of the most persistent cyber threats facing small and medium businesses in the region is still ransomware, malicious code designed to infect the computers of organizations and individuals, and encrypting data. Data inside and block access to the computer. The attackers will then request a fee from the victim in exchange for re-activation of the system. Ransomware attacks may be on the decline, but Kaspersky has been warning businesses of all sizes in every sector about the increasing activity of Ransomware 2.0, also known as ransomware. have purpose. Mr. Yeo Siang Tiong, General Manager of Kaspersky Southeast Asia commented: “We should not be optimistic that the number of detected ransomware cases has decreased. Since last year, we have noticed a number of changes to this threat. The ransomware teams are now more concerned with quality than quantity. This means that instead of randomly and passively waiting for an unsafe user to bite, the attackers are now actively hunting for victims ”.

In particular, the number of attacks on Vietnamese enterprises fell sharply, from 536.6 thousand cases in 2019, to 204.7 thousand cases in 2020. This pulled Vietnam’s ranking to 11 worldwide. , improved from the 7th place in 2019. In Southeast Asia, Singapore remains the country with the least number of detected attacks, ranking 78 globally. However, out of six Southeast Asian countries, Singapore is the only one experiencing an increase in the number of ransomware infection attempts. Number of detected cases increased from 2,275 in 2019 to 3,191 in 2020. Number of attacks on SMEs detected by Kaspersky in Southeast Asian countries. Although Indonesia still ranks 5th globally in terms of the number of ransomware incidents detected, the country has dropped from 1,158,837 cases in 2019 to 439,473 cases in 2020. This downtrend also coincides with export. currently in other countries in the region including the Philippines, Malaysia and Thailand. China remains at the top of the list for the number of ransomware cases globally in both 2019 and 2020. Meanwhile, Brazil and Russia have swapped the 2nd and 3rd place in the rankings, with Brazil currently ranked 2nd by 2020. Ransomware is designed to infect organizations and individuals’ computers, encrypt the internal data and block access to the computer. The attackers will then request a fee from the victim in exchange for re-activation of the system. Ransomware attacks may be on the decline, but Kaspersky has been warning businesses of all sizes in every sector about the growing activity of ‘Ransomware 2.0’, also known as software. targeted extortion. In the new method, the criminals do not ask for ransom to unlock the data, they threaten to publicly disclose the data they hold, adding pressure to the victims to pay the ransom to protect their reputation. .

After the terrible shooting in Atlanta (Georgia) in mid-March, Tam Nguyen organized self-defense classes for the Vietnamese community in Garden Grove, California. The purpose of the class is to help members protect themselves from racist acts against Asian Americans. Photo: Reuters.

The shootings at three spas in the city of Atlanta have left 8 people, including 6 women of Asian descent, dead. The suspect said he suffered from a sexual addiction and the women were “tempted”. The shooting occurred amid rising Asian stigma attacks in the United States during the epidemic, which also sparked debate about stigmatization against Asians and a recurring image. the sexualization of Asian women in America. Photo: Reuters.

The Covid-19 pandemic prompted Nguyen to set up “Nailing It for America”. This organization accepts donations and distributes personal protective equipment for medical personnel, with a device value of about $ 30 million. In addition, the organization also provides food for the elderly isolated by the pandemic. When the shooting happened, the organization’s goal changed, focusing on helping the Asian community as well as colleagues in the beauty industry. Photo: Reuters.

Self-defense classes have also been offered in many other parts of the United States. Officials and police are also involved in teaching students and members of the Asian community how to avoid becoming victims and what to do when something goes wrong. Photo: Reuters.

“Violent situations are happening more and more. As an Asian woman, I really want to know what to do when I am in that situation,” said Vy Truong, a student. Photo: Reuters.

At the Tam Nguyen family-owned beauty salon, masters teach about 50 students for a period of one to two weeks. Lessons focus on getting away and escaping from the attacker. In addition, the masters also taught how to counterattack to pin enemies to the ground and attack at vulnerable locations. Photo: Reuters.

Tam Nguyen is a co-owner of a beauty salon in the city of Garden Grove. His family center has helped 50,000 students graduate in 35 years of operation. Most of the trainees are of Vietnamese origin. Photo: Reuters.

According to US census data, 40% of the population of Garden Grove is of Asian descent. In the nearby city of Huntington Beach, many white daemons regularly gathered to protest. Photo: Reuters.