Month: July 2018

SecurityTrendMicro

Zero-Day Coverage Update – Week of July 16, 2018

Credit to Author: Elisa Lippincott (Global Threat Communications)| Date: Fri, 20 Jul 2018 15:24:42 +0000

One night this week, I came across one of my favorite movies Willy Wonka and the Chocolate Factory. The world had gone crazy after the reclusive Willy Wonka announces that he has hidden five golden tickets in chocolate Wonka Bars that promised a factory tour and a lifetime supply of chocolate. There’s a scene at…

The post Zero-Day Coverage Update – Week of July 16, 2018 appeared first on .

Read More
ComputerWorldIndependent

Microsoft dives down a bizarre non-cumulative rabbit hole with July patches

Credit to Author: Woody Leonhard| Date: Fri, 20 Jul 2018 09:02:00 -0700

Read More
MalwareBytesSecurity

The danger of third parties: ads, pipelines, and plugins

Credit to Author: Christopher Boyd| Date: Fri, 20 Jul 2018 15:00:00 +0000

We take a look at the perils of the tools and services embedded into the websites you use on a daily basis, thanks to the development help of third parties.

Categories:

Tags:

(Read more…)

The post The danger of third parties: ads, pipelines, and plugins appeared first on Malwarebytes Labs.

Read More
SecurityTrendMicro

This Week in Security News: BEC and Blackgear

Credit to Author: Jon Clay (Global Threat Communications)| Date: Fri, 20 Jul 2018 15:11:32 +0000

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, the FBI reports a global BEC loss of over $12 billion in 2018. Also, a Blackgear cyberespionage campaign has reemerged, using social media and command-and-control (C&C) to…

The post This Week in Security News: BEC and Blackgear appeared first on .

Read More
ComputerWorldIndependent

It was a JOKE, OK?

Credit to Author: Sharky| Date: Fri, 20 Jul 2018 03:00:00 -0700

Pilot fish’s workplace is upgrading to use smart cards, but he’s not thinking about that when he sees a pop-up about an update — one that strikes fish as a little, um, fishy.

“I thought, if something like that was to occur and need user intervention, IT would have sent a notice out about it,” says fish.

“So a screen shot and email went off to IT security. They responded much faster than I expected, and in person: There was something wrong and they needed my laptop hard drives ASAP.”

Fish turns over his machine, and the next day he receives replacement hard drives. But it turns out his backup wasn’t configured for all the folders and file types he stores data in — and now he’s missing about a terabyte of data.

To read this article in full, please click here

Read More
IndependentKrebs

Human Resources Firm ComplyRight Breached

Credit to Author: BrianKrebs| Date: Thu, 19 Jul 2018 21:08:43 +0000

Cloud-based human resources company ComplyRight said this week that a security breach of its Web site may have jeopardized sensitive consumer information — including names, addresses, phone numbers, email addresses and Social Security numbers — from tax forms submitted by the company’s thousands of clients on behalf of employees. Cloud-based human resources company ComplyRight said this week that a security breach of its Web site may have jeopardized sensitive consumer information — including names, addresses, phone numbers, email addresses and Social Security numbers — from tax forms submitted by the company’s clients on behalf of employees. Pompano Beach, Fla-based ComplyRight began mailing breach notification letters to affected consumers late last week, but the form letters are extremely vague about the scope and cause of the breach. Indeed, many readers who received these letters wrote to KrebsOnSecurity asking for more information, as the company hadn’t yet published any details about the breach on its Web site. Also, most of those folks said they’d never heard of ComplyRight and could not remember ever doing business with a company by that name.

Read More