RSS Reader for Computer Security Articles
Credit to Author: Brian Barrett| Date: Sat, 17 Feb 2018 12:00:00 +0000
The most chilling aspect of that blockbuster Mueller indictment? The bureaucracy behind Russia’s onslaught.
Read More
Credit to Author: Molly McKew| Date: Sat, 17 Feb 2018 03:25:07 +0000
In the wake of the Mueller indictment of a Russian troll farm, any attempt to claim that the 2016 election wasn’t affected by Russian meddling is laughable.
Read More
Credit to Author: Andy Greenberg| Date: Fri, 16 Feb 2018 22:29:43 +0000
A new Justice Department indictment alleges Russia’s disinformation operations created bank and social media accounts using the stolen identities of real US citizens.
Read More
Credit to Author: Garrett M. Graff| Date: Fri, 16 Feb 2018 21:12:23 +0000
Robert Mueller’s office has come out with a 37-page indictment that details the extraordinary lengths Russian agents went to influence the 2016 presidential election.
Read More
Credit to Author: Xiaopeng Zhang| Date: Fri, 16 Feb 2018 19:44:59 +0000
At the beginning of February 2018, FortiGuard Labs collected an email. The email message contains an order tracking number with a fake hyperlink that downloads a jar malware. After a quick analysis, I was able to determine that it is the jRAT/Adwind malware.
Read More
Credit to Author: Andy Greenberg| Date: Thu, 15 Feb 2018 23:20:08 +0000
After its negligence on Russian election hacking, the Trump administration is taking Russia’s global malware attack more seriously.
Read More
Credit to Author: Woody Leonhard| Date: Fri, 16 Feb 2018 09:12:00 -0800
The Microsoft Update Catalog uses insecure HTTP links – not HTTPS links – on the download buttons, so patches you download from the Update Catalog are subject to all of the security problems that dog HTTP links, including man-in-the-middle attacks.
Security researcher Stefan Kanthak, writing on Seclist’s Bugtraq mailing list, elaborates:
Even if you browse the “Microsoft Update Catalog” via the HTTPS link, ALL download links published there use HTTP, not HTTPS!
That’s trustworthy computing … the Microsoft way!
Despite numerous mails sent to <secure () microsoft com> in the last years, and numerous replies “we’ll forward this to the product groups,” nothing happens at all.
Credit to Author: Nikolay Pankov| Date: Fri, 16 Feb 2018 15:20:15 +0000
A vivid example of why we need to strengthen IoT security — and a solution to the problem.
Read More