FBI: Updates Over Public ‘Net Access = Bad Idea

Summary: The FBI advised travelers to avoid updating software over hotel or other public Internet connections after instances where travelers' laptops were infected with malicious software through pop-up windows posing as routine software updates. Krebs on Security notes that free attack tools can spoof update prompts, and that the EvilGrade toolkit can hijack the legitimate auto-updaters built into installed software.
What you should know: A traveler who clicks a fake update prompt on a hotel network installs malware before any security tool has a chance to flag it, and the same auto-update hijack can be pulled off by anyone running a rogue access point nearby.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026