February 2017 – Page 9 – Computer Security Articles

Credit to Author: Bahare Sabouri and He Xu| Date: Wed, 22 Feb 2017 16:58:28 -0800

Introduction Dyzap belongs to a family of malware designed to steal confidential information from enormous target applications by installing a “man in the browser” attack into common browsers. FortiGuard Researchers recently discovered a new variant of this Trojan virus. Stolen information may include, but is not limited to, system information and application credentials stored on infected systems. In this blog, we will explain how the malware steals user accounts, acts as a keylogger, and communicates with its C&C server. Stealing…

Fortinet Security

February 22, 2017 admin

Healthcare Digital Transformation & HIMSS17

Credit to Author: Susan Biddle| Date: Wed, 22 Feb 2017 16:57:16 -0800

Healthcare systems spanning the globe are recognizing the potential of digital technologies and looking to leverage them to develop new business models, new revenue streams, and a better customer experience across the industry. When speaking about “digital” technologies impacting the industry in 2017, we at Fortinet are focused on four principal technologies that are most responsible for change: Cloud IoT Ubiquitous Broadband Data Analytics We recently sat down at HIMSS17 in Orlando,…

Microsoft Security

February 22, 2017 admin

MSRT February 2017: Chuckenit detection completes MSRT solution for one malware suite

Credit to Author: msft-mmpc| Date: Wed, 22 Feb 2017 22:45:06 +0000

In September 2016, we started adding to Microsoft Malicious Software Removal Tool (MSRT) a malware suite of browser modifiers and other Trojans installed by software bundlers. We documented how the malware in this group install other malware or applications silently, without your consent. This behavior ticks boxes in the evaluation criteria that Microsoft Malware Protection…

Fortinet Security

February 22, 2017 admin

Looking Back at Fortinet’s Security Research and Vulnerability Discoveries

Credit to Author: Peixue Li| Date: Tue, 21 Feb 2017 14:31:33 -0800

In an effort to provide more proactive protections in Fortinet products and to more effectively identify and defeat network threats, the Fortinet security research team works on discovering potential threats in popular products. As a result, over the past year we have discovered 84 vulnerabilities that have been reported to their respective vendors as part of our responsible vulnerability disclosure process. Fortinet protections against these discoveries were released to Fortinet products at the same time these vulnerabilities were reported to their…

ComputerWorld Independent

February 22, 2017 admin

What to expect from the Trump administration on cybersecurity

Credit to Author: Grant Gross| Date: Wed, 22 Feb 2017 11:39:00 -0800

Look for President Donald Trump’s administration to push for increased cybersecurity spending in government, but also for increased digital surveillance and encryption workarounds.

That’s the view of some cybersecurity policy experts, who said they expect Trump to focus on improving cybersecurity at federal agencies while shying away from new cybersecurity regulations for businesses.

Trump is likely to look for ways for the National Security Agency and other agencies to assist the government and companies in defending against cyberattacks, said Jeffrey Eisenach, a visiting scholar at the American Enterprise Institute and a tech adviser during Trump’s presidential transition.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

February 22, 2017 admin

New macOS ransomware spotted in the wild

Credit to Author: Lucian Constantin| Date: Wed, 22 Feb 2017 11:09:00 -0800

A new file-encrypting ransomware program for macOS is being distributed through bit torrent websites, and users who fall victim to it won’t be able to recover their files — even if they pay.

Crypto ransomware programs for macOS are rare. This is the second such threat found in the wild so far, and it’s a poorly designed one. The program was named OSX/Filecoder.E by the malware researchers from antivirus vendor ESET who found it.

OSX/Filecoder.E masquerades as a cracking tool for commercial software like Adobe Premiere Pro CC and Microsoft Office for Mac. It is written in Apple’s Swift programming language by what appears to be an inexperienced developer, judging from the many mistakes made in its implementation.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

February 22, 2017 admin

What’s up with Windows patching, Microsoft?

Credit to Author: Steven J. Vaughan-Nichols| Date: Wed, 22 Feb 2017 08:36:00 -0800

Well, here’s something different. Microsoft, for the first time since it started its monthly Patch Tuesdays in October 2003, has completely blown a deadline. There will be no major patch release in February. Instead, the patch package will be released on March 14.

Why? We don’t know and Microsoft isn’t saying.

Color me concerned.

I have reason to be. Greg Lambert, chairman of Qompat, who covers software patches like paint, had hoped Microsoft would delay the patches by only a week. After all, Lambert observed, “This month’s update cycle from Microsoft is especially important as a now critical zero-day vulnerability (CVE867968) has been reported related to how a component of the Microsoft SMB [Server Message Block] protocol handles traffic. This was initially reported as a denial of service attack, but now looks like to be rated as critical by Microsoft as it may lead to a more serious (RCE) remote code execution scenario.”

To read this article in full or to leave a comment, please click here

Kaspersky Security

February 22, 2017 admin