March 2017 – Page 22 – Computer Security Articles

Credit to Author: Maor Schwartz| Date: Sun, 19 Mar 2017 08:05:05 +0000

Vulnerability Summary The following advisory describe Information Disclosure found in Oracle Knowledge Management version 8.5.1. By enabling searches across a wide variety of sources, Oracle’s InQuira knowledge management products offer simple and convenient ways for users to access knowledge that was once hidden in the myriad systems, applications, and databases used to store enterprise content. … Continue reading SSD Advisory – Oracle Knowledge Management XXE Leading to a RCE →

ComputerWorld Independent

March 19, 2017 admin

BlackBerry preps a more secure Samsung Galaxy S7

Credit to Author: Peter Sayer| Date: Sun, 19 Mar 2017 10:58:00 -0700

Secusmart, the BlackBerry subsidiary that secures the German Chancellor Angela Merkel’s smartphone, will roll out a version of its SecuSuite security software compatible with Samsung Electronics’ Knox platform later this year.

That means that organizations looking for smartphones offering government-grade security will be able to buy the Samsung Galaxy S7 or, soon, the S8 rather than the now-discontinued BlackBerry OS smartphones like the one Merkel uses.

In addition to encrypting communications and data stored on the device, the new SecuSuite also secures voice calls using the SNS standard set by Germany’s Federal Office for Information Security (BSI). Organizational app traffic is passed through an IPsec VPN, while data from personal apps can go straight to the internet. Encrypted voice calls go through a different gateway, not the VPN.

To read this article in full or to leave a comment, please click here

Security Wired

March 19, 2017 admin

Phishing Scams Even Fool Tech Nerds—Here’s How to Avoid Them

Credit to Author: Lily Hay Newman| Date: Sun, 19 Mar 2017 11:00:21 +0000

Phishing is a bigger threat than ever, here are some things you can do to defend yourself. The post Phishing Scams Even Fool Tech Nerds—Here’s How to Avoid Them appeared first on WIRED.

Security Wired

March 19, 2017 admin

Hey Activists: You Need to Think Twice Before Livestreaming Protests

Credit to Author: Dia Kayyali| Date: Sun, 19 Mar 2017 11:00:18 +0000

Opinion: Livestreaming can document human rights abuses, but it can carry security risks. The post Hey Activists: You Need to Think Twice Before Livestreaming Protests appeared first on WIRED.

ComputerWorld Independent

March 18, 2017 admin

US-CERT: Some HTTPS inspection tools could weaken security

Credit to Author: Lucian Constantin| Date: Fri, 17 Mar 2017 15:14:00 -0700

Companies that use security products to inspect HTTPS traffic might inadvertently make their users’ encrypted connections less secure and expose them to man-in-the-middle attacks, the U.S. Computer Emergency Readiness Team warns.

US-CERT, a division of the Department of Homeland Security, published an advisory after a recent survey showed that HTTPS inspection products don’t mirror the security attributes of the original connections between clients and servers.

HTTPS inspection checks the encrypted traffic coming from an HTTPS site to make sure it doesn’t contain threats or malware. It’s performed by intercepting a client’s connection to an HTTPS server, establishing the connection on the client’s behalf and then re-encrypting the traffic sent to the client with a different, locally generated certificate. Products that do this essentially act as man-in-the-middle proxies.

To read this article in full or to leave a comment, please click here

Security Wired

March 18, 2017 admin

Security News This Week: A Funny Thing Happens When the US Accuses the UK of Spying

Credit to Author: Emily Dreyfuss| Date: Sat, 18 Mar 2017 11:00:08 +0000

Just another week in crazy town. The post Security News This Week: A Funny Thing Happens When the US Accuses the UK of Spying appeared first on WIRED.

Security TrendMicro

March 17, 2017 admin

The Results – Pwn2Own Day Three

Credit to Author: Dustin Childs (Zero Day Initiative Communications)| Date: Sat, 18 Mar 2017 02:59:00 +0000

Our final day of Pwn2Own 2017 came to a close with some amazing research. The contest had never previously required a 3rd day of competition, but with our largest ever number of registrations, coinciding with our 10th anniversary, extending to include the extra entries proved more than worthwhile. Just today, we awarded $250,000 and 54…