RSS Reader for Computer Security Articles
Credit to Author: Lily Hay Newman| Date: Tue, 25 Feb 2020 20:18:02 +0000
Users of Gmail get 300 billion attachments each week. To separate legitimate documents from harmful ones, Google turned to AI—and it’s working.
Read More
Credit to Author: Woody Leonhard| Date: Wed, 26 Feb 2020 09:44:00 -0800
The real stinker this month, KB 4524244, rolled out the automatic update chute for four full days until Microsoft yanked it – leaving a trail of wounded PCs, primarily HP machines, in its wake. The other big-time bug in this month’s patches, a race condition in the KB 4532693 Win10 version 1903 and 1909 cumulative update installer, hasn’t been officially acknowledged by Microsoft outside of a blog post. But at least it’s well known and understood.
Folks running SQL Server and Exchange Server networks need to get patched right away.
Patch Tuesday brought KB 4524244 for Windows 10 owners, a bizarre single-purpose patch apparently directed at one specific UEFI bootloader. I talked about it last week.
Credit to Author: Jérôme Segura| Date: Wed, 26 Feb 2020 17:03:11 +0000
 | |
| Criminals set up fraudulent infrastructure that looks like a typical content delivery network—except it isn’t. Behind it hides a credit card skimmer injected into Magento online stores. Categories: Tags: cdncontent delivery networkcredit card datadata exfiltrationMagecartmagentongrokproxy serversecure tunnelsskimmerstunnelingweb skimmerweb skimmers |
The post Fraudsters cloak credit card skimmer with fake content delivery network, ngrok server appeared first on Malwarebytes Labs.
Read More
Credit to Author: BrianKrebs| Date: Wed, 26 Feb 2020 14:43:31 +0000
On Monday, networking hardware maker Zyxel released security updates to plug a critical security hole in its network attached storage (NAS) devices that is being actively exploited by crooks who specialize in deploying ransomware. Today, Zyxel acknowledged the same flaw is present in many of its firewall products.
Read MoreLearn about threat trends uncovered in FortiGuard Labs’ latest Global Threat Landscape Report.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/kP3nr-205Tc” height=”1″ width=”1″ alt=””/>
Read More
Credit to Author: JR Raphael| Date: Wed, 26 Feb 2020 03:00:00 -0800
There are important accounts to secure, and then there are important accounts to secure. Your Google account falls into that second category, maybe even with a couple of asterisks and some neon orange highlighting added in for good measure.
I mean, really: When you stop and think about how much stuff is associated with that single sign-in — your email, your documents, your photos, your files, your search history, maybe even your contacts, text messages, and location history, if you use Android — saying it’s a “sensitive account” seems like an understatement. Whether you’re using Google for business, personal purposes, or some combination of the two, you want to do everything you possibly can to keep all of that information locked down and completely under your control.
Most phishing campaigns use links to malicious scripts that infect users’ devices. Here’s how to spot and prevent them from doing damage.
Credit to Author: Pieter Arntz| Date: Tue, 25 Feb 2020 17:54:06 +0000
 | |
| Advancements in biotech could save thousands, if not millions of lives. But what security and privacy challenges do they introduce? We take a close look at recent innovations. Categories: Tags: AIbiosensorsBLEbluetoothdna-testfdapacemakerpharmaceuticalssmart pillsweyntoothvulnerabilities |
The post Biotech health care innovations meet security challenges appeared first on Malwarebytes Labs.
Read More