RSS Reader for Computer Security Articles
Credit to Author: Olga Fedorova| Date: Tue, 02 May 2017 16:17:33 +0000
If your antivirus prevents an app from running or won’t let you open a link, there’s no need to disable it: Here’s what to do.
Read More
Credit to Author: Robert C. Covington| Date: Tue, 02 May 2017 07:32:00 -0700
This past week, I encountered an all too common situation — a user gets a targeted phishing attempt. Despite a strong training program, the user opens the attachment and gets infected with ransomware.
For many organizations, this would have resulted in a disaster. Ransomware would have encrypted files on any servers, and the organization would have been forced to either restore the files from a backup, assuming they had them, or to hold their nose and pay a ransom.
The news was better, however, for the organization I mentioned above.
Fortunately, the premise of their security planning was that someone would eventually shoot them in the foot. With a security plan that assumed this, they had a depth of layered controls to help. While their anti-virus software did not prevent the infection, it did recognize and send an alert about it, after the fact. In the meantime, their web filtering appliances and their DNS service provider, recognizing the call from the infected PC to a command and control server to get an encryption key, blocked access. Since the ransomware client never got the key, it did not encrypt any files. The blocking of command and control access provided the extra time needed to get the PC pulled out of service and repaired.
To read this article in full or to leave a comment, please click here
Credit to Author: Christopher Boyd| Date: Tue, 02 May 2017 15:00:56 +0000
 | |
| Spring has indeed sprung, but it’s never too late to have a wander through your security settings and features. Unfortunately, we have so many accounts these days that it’s hard to keep track of them all, but this round-up may help you on your way. Categories: Tags: applicationsappscleanupemailsecuritysettingssocial mediaSpring Cleaningwebsite |
The post An Infosec Spring clean appeared first on Malwarebytes Labs.
Read More
Credit to Author: Chris McCormack| Date: Tue, 02 May 2017 14:04:49 +0000
‘This demands your attention no matter what size your organization’ – we couldn’t agree more!<img alt=”” border=”0″ src=”https://pixel.wp.com/b.gif?host=news.sophos.com&blog=834173&post=33537&subd=sophos&ref=&feed=1″ width=”1″ height=”1″ /><img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/DraWRAAlD3U” height=”1″ width=”1″ alt=””/>
Read More
Credit to Author: Michael Kan| Date: Tue, 02 May 2017 03:34:00 -0700
Intel is reporting a firmware vulnerability that could let attackers take over remote management functions on computers built over nearly the past decade.
The vulnerability, disclosed on Monday, affects features in Intel firmware that are designed for enterprise IT management.
Enterprises using Intel Active Management Technology, Intel Small Business Technology and Intel Standard Manageability on their systems should patch them as soon as possible, the company says.
The vulnerable firmware features can be found in some current Core processors and all the way back to Intel’s first-generation Core, called Nehalem, which shipped in 2008. They’re part of versions 6.0 through 11.6 of Intel’s manageability firmware.
To read this article in full or to leave a comment, please click here
Credit to Author: Maor Schwartz| Date: Mon, 01 May 2017 06:28:11 +0000
Vulnerability Summary The following advisory describes Java deserialization vulnerability found in CloudBees Jenkins version 2.32.1 that leads to a Remote Code Execution. Jenkins helps to automate the non-human part of the whole software development process with now common things like continuous integration and by empowering teams to implement the technical aspects of continuous delivery. It … Continue reading SSD Advisory – CloudBees Jenkins Unauthenticated Code Execution
Read MoreCredit to Author: Brian Barrett| Date: Mon, 01 May 2017 18:36:19 +0000
Putting an unreleased series on the Pirate Bay unless Netflix pays up? Good luck with that. The post That Orange Is the New Black Leak Was Never Going to Pay Off appeared first on WIRED.
Read MoreCredit to Author: Thomas Reed| Date: Mon, 01 May 2017 18:16:41 +0000
 | |
| On Friday a sophisticated Mac Trojan was discovered, called OSX.Dok, which installs malware designed to intercept all HTTP and HTTPS traffic. This morning, Adam Thomas, a Malwarebytes researcher, found a variant of the OSX.Dok dropper that behaves altogether differently and installs a completely different payload. Categories: Tags: AppleDokument.appmacmac malwareMac TrojanmalwareOSX.Doktrojan |
The post Another OSX.Dok dropper found installing new backdoor appeared first on Malwarebytes Labs.
Read More