RSS Reader for Computer Security Articles
Credit to Author: Lily Hay Newman| Date: Wed, 05 Feb 2020 16:56:40 +0000
Five vulnerabilities in Cisco Discovery Protocol make it possible for a hacker to take over desk phones, routers, and more.
Read More
Credit to Author: Alex Baker-Whitcomb| Date: Tue, 04 Feb 2020 22:20:31 +0000
Catch up on the most important news from today in two minutes or less.
Read More
Credit to Author: Alex Drozhzhin| Date: Wed, 05 Feb 2020 16:50:15 +0000
Phishing and business e-mail compromise attacks rely on fake e-mails. But why is it so easy for attackers to make them so convincing?
Read More
Credit to Author: Woody Leonhard| Date: Wed, 05 Feb 2020 04:42:00 -0800
Worried about the future of your Win7 machine? Welcome to the family.
Right now, we have a promise that Microsoft will fix the “Stretch” wallpaper bug it rolled out last month, and there’s some hope that it will fix the Internet Explorer JScript engine security hole CVE-2020-0674 noted last month in Security Advisory ADV200001. We don’t know how/when the fix(es) will be distributed, or if Microsoft will soften its “no free Win7 patches after January 14” edict in some other way.
Use these techniques to see if attackers have harvested authentication credentials from your Windows network.
Credit to Author: Eric Avena| Date: Tue, 04 Feb 2020 17:30:40 +0000
Web shell attacks allow adversaries to run commands and steal data from an Internet-facing server or use the server as launch pad for further attacks against the affected organization.
The post Ghost in the shell: Investigating web shell attacks appeared first on Microsoft Security.
Read MoreCredit to Author: Todd VanderArk| Date: Tue, 04 Feb 2020 17:00:55 +0000
The RSA Conference 2020 kicks off in less than three weeks—here are a few highlights to help you plan your time.
The post RSA Conference 2020—Empower your defenders with artificial intelligence and automation appeared first on Microsoft Security.
Read MoreCredit to Author: Jayesh kulkarni| Date: Wed, 05 Feb 2020 06:17:49 +0000
It’s surprising to see how quickly attackers make use of new vulnerabilities in malware campaigns. Microsoft recently patched a very interesting vulnerability in their monthly Patch Tuesday update for January 2020. It’s a spoofing vulnerability in Windows CryptoAPI (Crypt32.dll) validation mechanism for Elliptic Curve Cryptography (ECC) certificates. An attacker could…
Read More