Thursday, April 25, 2024
Latest:

Computer Security Articles

RSS Reader for Computer Security Articles

Month: April 2019

Security Sophos 

Perfider Angriff: Verschlüsselung durch Remote Ransomware

admin , , ,

Credit to Author: Jörg Schindler| Date: Fri, 26 Apr 2019 08:06:19 +0000

Jeder kann Opfer eines Ransomware-Angriffs werden. Hat sich der erste Schock gelegt – idealerweise nachdem man seine Daten aus dem gesicherten Backup zurückgewonnen hat statt Lösegeld zu zahlen – stellt sich die entscheidende Frage: Wie habe ich mir das eingefangen? Insbesondere dann, wenn selbst die gründlichste Recherche und Durchsicht potenzieller Einfallstore keinerlei Spur für Schadsoftware [&#8230;]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/d0p_P6fxQt4″ height=”1″ width=”1″ alt=””/>

Read more
Security Sophos 

Honeypot für Cloud Server: Die Angriffe sind zahlreich – und verdammt schnell!

admin , , , ,

Credit to Author: Jörg Schindler| Date: Tue, 09 Apr 2019 13:08:49 +0000

Sie ist ein elementarer Bestandteil moderner IT, ermöglicht ortsunabhängigen Datenzugriff, steigert Kosteneffizienz, vereinfacht Geschäftsprozesse und vieles mehr: Weltweit speichern immer mehr Unternehmen und Endverbraucher ihre Daten in die Cloud. Sie wirksam vor dem Zugriff von Cyberkriminellen zu schützen ist daher ein elementares Anliegen für die IT-Security. Sophos wollte wissen, wie sehr Cloud-Server potenziellen Hackerangriffen ausgesetzt [&#8230;]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/Qs5feApxWEs” height=”1″ width=”1″ alt=””/>

Read more
Security TrendMicro 

The Next Enterprise Challenge: How Best to Secure Containers and Monolithic Apps Together, Company-wide

admin , , , , , , ,

Credit to Author: Trend Micro| Date: Tue, 30 Apr 2019 13:00:51 +0000

Submitted by: Adam Boyle, Head of Product Management, Hybrid Cloud Security, Trend Micro When it comes to software container security, it’s important for enterprises to look at the big picture, taking into account how they see containers effecting their larger security requirements and future DevOps needs. Good practices can help security teams build a strategy that…

The post The Next Enterprise Challenge: How Best to Secure Containers and Monolithic Apps Together, Company-wide appeared first on .

Read more
ComputerWorld Independent 

Microsoft tells IT admins to nix 'obsolete' password reset practice

admin ,

Credit to Author: Gregg Keizer| Date: Tue, 30 Apr 2019 03:00:00 -0700

Microsoft last week recommended that organizations no longer force employees to come up with new passwords every 60 days.

The company called the practice – once a cornerstone of enterprise identity management – “ancient and obsolete” as it told IT administrators that other approaches are much more effective in keeping users safe.

“Periodic password expiration is an ancient and obsolete mitigation of very low value, and we don’t believe it’s worthwhile for our baseline to enforce any specific value,” Aaron Margosis, a principal consultant for Microsoft, wrote in a post to a company blog.

To read this article in full, please click here

Read more
Security Sophos 

CVE-2018-18500: write-after-free vulnerability in Firefox, Analysis and Exploitation

admin , , , , ,

Credit to Author: Yaniv| Date: Thu, 18 Apr 2019 15:35:40 +0000

Editor&#8217;s note: This article is a technical description of a bug discovered by a member of the Offensive Research team at SophosLabs, and how the researcher created a proof-of-concept &#8220;Arbitrary Read/Write Primitive&#8221; exploit for this bug. The vulnerability was deemed critical by Mozilla&#8217;s bug tracking team and was patched in Firefox 65.0. It&#8217;s written for [&#8230;]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/oTcYk6i594c” height=”1″ width=”1″ alt=””/>

Read more