RSS Reader for Computer Security Articles
Credit to Author: Lily Hay Newman| Date: Fri, 23 Feb 2018 00:08:07 +0000
For over a decade, US Customs and Border Protection has been unable to verify the cryptographic signatures on e-Passports, because they never installed the right software.
Read MoreCredit to Author: Christopher Boyd| Date: Fri, 23 Feb 2018 17:20:00 +0000
 | |
| We take a look at what happens when one of the most popular DIY Deepfakes programs decides to monetise with a spot of coin mining. Surprise: it doesn’t end well. Categories: Tags: coin miningcoinhivecryptodeepfakedeepfakesfakefakeappminermining |
The post Deepfakes FakeApp tool (briefly) includes cryptominer appeared first on Malwarebytes Labs.
Read MoreCredit to Author: Elisa Lippincott (TippingPoint Global Product Marketing)| Date: Fri, 23 Feb 2018 15:44:45 +0000
Earlier this week, Trend Micro released its Security Roundup for 2017, which reveals an increase in ransomware, cryptocurrency mining and business email compromise (BEC) attempts over the past year as cybercriminals refined and targeted their attacks for greater financial return. Surprisingly, some of the biggest attacks still rely on known vulnerabilities that have available patches….
Credit to Author: Jon Clay (Global Threat Communications)| Date: Fri, 23 Feb 2018 14:29:52 +0000
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, business leaders share their tips on keeping their companies safe, hackers stole from a Russian central bank, and Google reveals a new Microsoft Edge flaw. Read on…
Credit to Author: Woody Leonhard| Date: Fri, 23 Feb 2018 04:26:00 -0800
Microsoft last night released a flood of unexpected patches. Yes, that’s a Thursday night dump. No, there weren’t any pressing security fixes – at least, none that were advertised. I have no idea why Microsoft’s pushing this offal out the Automatic Update chute.
In addition to a scattering of Preview patches for Win7, 8.1 and Server 2002 – which are usually posted on the third “Week C” Tuesday of the month – and the Surface Pro 3 firmware patch that was announced, but not delivered, Wednesday, we have two new cumulative updates: one for Win10 Anniversary Update (version 1607) and one for Win10 Creators Update (version 1703). Susan Bradley has a full list with links on the AskWoody site.
Credit to Author: Sharky| Date: Fri, 23 Feb 2018 03:00:00 -0800
It’s the 1990s, and this pilot fish is hired at a big international company to maintain a group of Linux servers — and they definitely need help.
“My initial survey of the systems uncovered some serious security problems,” says fish. “Everything had been set up and users added with no regard to security.
“As a temporary holding action, I set all the users’ login shells to a custom restricted shell that allowed each user access to only the directories and commands necessary for their work while I analyzed all the systems, planned a decent security configuration for each, got approvals, did testing and, finally, implemented the new security.”
Credit to Author: BrianKrebs| Date: Fri, 23 Feb 2018 00:35:30 +0000
Multiple Chase.com customers have reported logging in to their bank accounts, only to be presented with another customer’s bank account details. Chase has acknowledged the incident, saying it was caused by a two an internal “glitch” Wednesday evening that did not involve any kind of hacking attempt or cyber attack.
Read MoreCredit to Author: Anna Markovskaya| Date: Thu, 22 Feb 2018 20:47:48 +0000
Chrome learns to block ads by itself. What has Google come up with, and how will it help users?
Read More