RSS Reader for Computer Security Articles
Credit to Author: toddvanderark| Date: Mon, 15 Oct 2018 16:00:38 +0000
In this post we address the question: “How do we make data gravity a reality in the security operations center (SOC) while we are under increased and constant pressure from motivated threat actors?”
The post Making it real—harnessing data gravity to build the next gen SOC appeared first on Microsoft Secure.
Read More
Steve Ragan and J.M. Porup catch up post-DerbyCon conference to discuss psychological issues in the infosec community, supply chain security and whether it's time to make China the boogeyman again, as well as Google's recent data breach.
Credit to Author: Malwarebytes Labs| Date: Mon, 15 Oct 2018 07:01:00 +0000
 | |
| The quarterly Malwarebytes Labs Cybercrime Tactics and Techniques Report is here! Learn how Q3 2018 marked a major turning point in cybercrime trends—especially for businesses. Categories: Tags: CTNTCTNT reportcybercrime tactics and techniqueslabs reportmalwarebytes labsQ3 2018Q3 2018 reportreport |
The post Malwarebytes Labs Cybercrime Tactics and Techniques Report (CTNT) shows shift to business targets in Q3 appeared first on Malwarebytes Labs.
Read More
Credit to Author: SSD / Ori Nimron| Date: Sun, 14 Oct 2018 12:00:10 +0000
Vulnerabilities Summary A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write, which leads to remote code execution inside the sandboxed content process when triggered. Vendor Response The reported security vulnerability was fixed in Firefox 62.0.3 and Firefox ESR 60.2.2. CVE CVE-2018-12386 Credit Independent security researchers, … Continue reading SSD Advisory – Firefox JavaScript Type Confusion RCE
Read More
Credit to Author: Emily Dreyfuss| Date: Sun, 14 Oct 2018 02:12:17 +0000
With the exception of President Trump’s legal team, no one has been watching the Mueller investigation more closely than Garrett Graff.
Read More
Credit to Author: Emily Dreyfuss| Date: Sat, 13 Oct 2018 13:00:00 +0000
A grey hat hacking hero, bad boat news, and more security news this week.
Read More
Credit to Author: Brian Barrett| Date: Fri, 12 Oct 2018 21:11:34 +0000
A clever new cryptomining scheme downloads the latest version of Adobe for you, but adds malware to the bargain.
Read More
Credit to Author: BrianKrebs| Date: Sat, 13 Oct 2018 01:03:12 +0000
Earlier this month I spoke at a cybersecurity conference in Albany, N.Y. alongside Tony Sager, senior vice president and chief evangelist at the Center for Internet Security and a former bug hunter at the U.S. National Security Agency. We talked at length about many issues, including supply chain security, and I asked Sager whether he’d heard anything about rumors that Supermicro — a high tech firm in San Jose, Calif. — had allegedly inserted hardware backdoors in technology sold to a number of American companies.
Read More