Month: July 2018

MalwareBytesSecurity

When three isn’t a crowd: Man-in-the-Middle (MitM) attacks explained

Credit to Author: Jovi Umawing| Date: Thu, 12 Jul 2018 16:42:06 +0000

Maybe it’s the quirky way some tech writers abbreviate it, or the surreal way it reminded you of that popular Michael Jackson song. Whatever triggers you to remember the term, for most of us, man-in-the-middle embodies something both familiar yet mysterious. Let’s get to know this threat a little bit better, shall we?

Categories:

Tags:

(Read more…)

The post When three isn’t a crowd: Man-in-the-Middle (MitM) attacks explained appeared first on Malwarebytes Labs.

Read More
IndependentKrebs

Sextortion Scam Uses Recipient’s Hacked Passwords

Credit to Author: BrianKrebs| Date: Thu, 12 Jul 2018 14:19:53 +0000

Here’s a clever new twist on an old email scam that could serve to make the con far more believable. The message purports to have been sent from a hacker who’s compromised your computer and used your webcam to record a video of you while you were watching porn. The missive threatens to release the video to all your contacts unless you pay a Bitcoin ransom. The new twist? The email now references a real password previously tied to the recipient’s email address.

Read More
SecurityTrendMicro

The Aurora Power Grid Vulnerability and the BlackEnergy Trojan

Credit to Author: William “Bill” Malik (CISA VP Infrastructure Strategies)| Date: Thu, 12 Jul 2018 13:10:42 +0000

At recent Industrial IoT security briefings, the Aurora vulnerability has come up repeatedly. Attendees ask, “Is our country’s power grid safe? How can we protect the grid? What is Aurora?” This post provides a look at Aurora, and the BlackEnergy attack that can exploit Aurora. In March 2007, the US Department of Energy demonstrated the…

The post The Aurora Power Grid Vulnerability and the BlackEnergy Trojan appeared first on .

Read More
ComputerWorldIndependent

Patch Tuesday problems abound, Server 2016 crashes, and a .Net patch goes down in flames

Credit to Author: Woody Leonhard| Date: Thu, 12 Jul 2018 06:18:00 -0700

You know it’s going to be an Alice in Wonderland month when some sites report that Microsoft plugged 54 vulnerabilities on Patch Tuesday, while others report 53. Fact is, patching has become so brutal — and so banal — that there’s no consensus on counting, much less on what’s good and bad.

Suffice to say that, once again this month, there was a huge number of security patches (129 individual patches, according to the Microsoft Update Catalog), with no pressing security fixes unless you’re using the Edge browser or Internet Explorer. Microsoft changed Win10 version 1803 to “Semi-Annual Channel,” but the term now means less than it ever has before. If that’s possible.

To read this article in full, please click here

Read More
MalwareBytesSecurity

We block shady ad blockers

Credit to Author: Malwarebytes Labs| Date: Wed, 11 Jul 2018 18:15:23 +0000

Some of you have reached out to us concerning Malwarebytes blocking of certain Ad blocking extensions, or an influx in web blocking notifications.  First things first, this is not a False Positive. 

Categories:

Tags:

(Read more…)

The post We block shady ad blockers appeared first on Malwarebytes Labs.

Read More