Security news weekly round-up - 12th April 2024
Tags: security
Published: 2024-04-12 21:20:17

---
title: Security news weekly round-up - 12th April 2024
published: true
description: Weekly review of top security news between April 5, 2024, and April 12, 2024
tags: security
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/0jupjut8w3h9mjwm8m57.jpg
series: Security news weekly round-up
---

## __Introduction__

Hello, and welcome to this week's review of security-related articles that are worthy of your reading time. Today, we'll cover articles related to _privacy_, _security_, and _malware_.

Let's begin!

<hr/>

## [Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think](https://www.securityweek.com/browsing-in-incognito-mode-doesnt-protect-you-as-much-as-you-might-think/)

For some, you'll find this article as nothing new. However, don't be surprised that some think Incognito Mode means" invincible".

Nonetheless, here is an excerpt from the article:

> Incognito modes generally do not prevent the websites you visit from seeing your location, via your IP address, or stop your internet service provider from logging your activities. As long as your IP address is visible, the Mozilla Foundation says your identity and activity remain fully exposed to search engines and third parties

## [Critical takeover vulnerabilities in 92,000 D-Link devices under active exploitation](https://arstechnica.com/security/2024/04/hackers-actively-exploit-critical-remote-takeover-vulnerabilities-in-d-link-devices/)

The bad news here is that the devices are no longer supported. Therefore, D-Link will not be patching them.

What's more, it's gets worse, based on the following excerpt:

> Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the system, potentially leading to unauthorized access to sensitive information, modification of system configurations, or denial of service conditions

## [7 reasons why cybercriminals want your personal data](https://www.welivesecurity.com/en/privacy/7-reasons-why-cybercriminals-want-your-personal-data/)

Do you think that you know the reasons? Guess before opening the link and see if you get it right.

Here is a quick excerpt from the article:

> The more online services you use and share your information with, the greater the chance that your data ends up in the wrong hands, for example when one of those companies is compromised by hackers

## [Thousands of LG TVs are vulnerable to takeover—here’s how to ensure yours isn’t one](https://arstechnica.com/security/2024/04/patches-released-for-as-many-as-91000-hackable-lg-tvs-exposed-to-the-internet/)

It's not funny when your TV is subject to takeover from remote threat actors. The article states that the vulnerable TVs are about 91k. Now, what's behind the vulnerability? Check the excerpt below.

> The vulnerabilities, which affect internal services that allow users to control their sets using their phones, make it possible for attackers to bypass authentication measures designed to ensure only authorized devices can make use of the capabilities

## [Attackers Using Obfuscation Tools to Deliver Multi-Stage Malware via Invoice Phishing](https://thehackernews.com/2024/04/attackers-using-obfuscation-tools-to.html)

Clicking on an attachment starts the infection chain. So, be sure you want to click that attachment!

Here is why:

> The email messages come with Scalable Vector Graphics (SVG) file attachments that, when clicked, activate the infection sequence
>
> the SVG file serves as a conduit to drop a ZIP archive that contains a batch script likely created using BatCloak, which then unpacks the ScrubCrypt batch file to ultimately execute Venom RAT

## __Credits__

Cover photo by [Debby Hudson on Unsplash](https://unsplash.com/@hudsoncrafted).

<hr>

That's it for this week, and I'll see you next time.