Month: May 2017

IndependentKrebs

Should SaaS Companies Publish Customers Lists?

Credit to Author: BrianKrebs| Date: Mon, 22 May 2017 20:53:32 +0000

A few weeks back, HR and financial management firm Workday.com sent a security advisory to customers warning that crooks were sending targeted malware phishing attacks at customers. At the same time, Workday is publishing on its site a list of more than 800 companies that use its services, making it relatively simple for attackers to chose their […]

Read More
IndependentKrebs

Private Eye Allegedly Used Leaky Goverment Tool in Bid to Find Tax Data on Trump

Credit to Author: BrianKrebs| Date: Mon, 22 May 2017 20:11:27 +0000

In March 2017, KrebsOnSecurity warned that thieves who perpetrate tax refund fraud with the U.S. Internal Revenue Service were leveraging a widely-used online student loan tool to find critical data on consumers that allows them to claim huge refunds with the IRS in someone else’s name. This week, it emerged that a Louisiana-based private investigator is being charged with using the same online tool to glean tax data on then-presidential candidate Donald J. Trump. A story today at Diverseeducation.com points to court filings in the U.S. District Court for the Middle District of Louisiana, in which local private eye Jordan Hamlett is accused by federal prosecutors of abusing an automated tool at the U.S. Department of Education website that is designed to make it easier for families to complete the Education Department’s Free Application for Federal Student Aid (FAFSA) — a lengthy form that serves as the starting point for students seeking federal financial assistance to pay for college or career school.

Read More
MalwareBytesSecurity

A week in security (May 15 – May 21)

Credit to Author: Malwarebytes Labs| Date: Mon, 22 May 2017 13:59:59 +0000

A compilation of notable security news and blog posts from the 15th of May to the 21st. We covered WannaCry, Privacy Awareness week, and what to do when you suspect stolen personal data.

Categories:

Tags:

(Read more…)

The post A week in security (May 15 – May 21) appeared first on Malwarebytes Labs.

Read More
ComputerWorldIndependent

No, Windows XP didn't fuel WannaCry

Credit to Author: Gregg Keizer| Date: Mon, 22 May 2017 12:57:00 -0700

The global WannaCry attack that started 10 days ago touched just a handful of Windows XP PCs, a security expert said Monday, contradicting the narrative that the aged OS was largely responsible for the ransomware’s crippling impact.

“There were no real WannaCry infections of Windows XP,” said Costin Raiu, director of Kaspersky Lab’s global research and analysis team, in an interview Monday. “We’ve seen only a handful of cases, less than a dozen, and it looks like most of them were testers [self-infecting systems].”

Raiu’s claim countered an assertion made by virtually every media report and blog post published after “WannaCry” emerged June 12. Countless news stories blamed Windows XP, which Microsoft retired three years ago, for falling victim to the attack because the vulnerability that WannaCry exploited had not been patched in the obsolete OS.

To read this article in full or to leave a comment, please click here

Read More
ComputerWorldIndependent

IDG Contributor Network: Winning the war on ransomware

Credit to Author: Rob Cheng| Date: Mon, 22 May 2017 11:00:00 -0700

Back in the ‘70s, the United States suffered a severe oil shortage.

Lines at the gas station filled city blocks. Thieves siphoned gasoline not to save money but time. In response, the federal government created a measurement, miles per gallon. Since then, MPG has become a factor in many car purchase decisions. Today, fuel efficiency has improved threefold, and we have hybrid and electric cars.

We are facing another crisis that threatens our way of life — ransomware. Cybercriminals hold hostage individual, public sector and enterprise data with remarkable ease and frequency. Although paying ransoms may solve a short-term problem, it almost guarantees that attacks will continue creating a larger threat to our digital society.

To read this article in full or to leave a comment, please click here

Read More
SecuritySophos

GDPR’s Right to Explanation: the pros and the cons

Credit to Author: Bill Brenner| Date: Mon, 22 May 2017 13:46:54 +0000

Under the General Data Protection Regulation’s Right to Explanation a user can ask for an explanation about an algorithmic decision made about them – but with it comes positives and negatives.<img alt=”” border=”0″ src=”https://pixel.wp.com/b.gif?host=news.sophos.com&#038;blog=834173&#038;post=34450&#038;subd=sophos&#038;ref=&#038;feed=1″ width=”1″ height=”1″ /><img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/sN8EgDhvG5Y” height=”1″ width=”1″ alt=””/>

Read More
FortinetSecurity

Byline: Artificial Intelligence: Cybersecurity Friend or Foe?

Credit to Author: Derek Manky| Date: Mon, 22 May 2017 07:41:32 -0700

​​​​​​​Security strategies need to undergo a radical evolution. Tomorrow’s security devices will need to see and interoperate with each other to recognize changes in the networked environment, anticipate new risks and automatically update and enforce policies. The devices must be able to monitor and share critical information and synchronize responses to detected threats.

Read More