To catch a hacker: The subtle mistakes of an attack
Credit to Author: Trend Micro| Date: Thu, 09 Mar 2017 17:37:10 +0000
Threats are becoming more sophisticated and harder to detect, but there are ways that hackers can be caught.
RSS Reader for Computer Security Articles
Credit to Author: Trend Micro| Date: Thu, 09 Mar 2017 17:37:10 +0000
Threats are becoming more sophisticated and harder to detect, but there are ways that hackers can be caught.
Credit to Author: Lily Hay Newman| Date: Thu, 09 Mar 2017 17:34:40 +0000

The big question is if and when Julian Assange follows through on his latest blockbuster promise. The post Assange: WikiLeaks Will Help Tech Giants Stop CIA Snooping appeared first on WIRED.
Read MoreCredit to Author: Marvin the Robot| Date: Thu, 09 Mar 2017 17:40:58 +0000
Using passwords on mobile devices is painful: In addition to memorizing your passwords, you need to input them with an awkward on-screen keyboard. But we’ve got you covered!
Read More
Credit to Author: Grant Gross| Date: Thu, 09 Mar 2017 08:53:00 -0800
Information about purported CIA cyberattacks was “passed around” among members of the U.S. intelligence community and contractors before it was published by WikiLeaks this week, Julian Assange says.
The CIA “lost control of its entire cyberweapons arsenal,” the WikiLeaks editor-in-chief said during a press conference Thursday. “This is a historic act of devastating incompetence, to have created such an arsenal and stored all in one place and not secured it.”
Assange declined to name the source who gave the information to WikiLeaks, but he seemed to suggest the 8,700-plus documents, purportedly from an isolated CIA server, came from an insider source.
To read this article in full or to leave a comment, please click here

Credit to Author: Jonathan Nguyen-Duy| Date: Thu, 09 Mar 2017 09:30:43 -0800
IoT security challenges include weak authentication and authorization protocols, insecure software, firmware with hard-coded backdoors, poorly designed connectivity and communications, and little to no configurability. Many devices were developed around chunks of commonly available and largely untested code, compounding security vulnerabilities across thousands of devices sold through dozens of manufacturers. And to make matters worse, IoT devices are often “headless,” with limited power and processing capabilities. This not only means they can
Read MoreCredit to Author: Lily Hay Newman| Date: Thu, 09 Mar 2017 12:00:36 +0000

Confide has become a favorite among political staffers looking for secrecy. Unfortunately, it lacked plenty of basic security features. The post That Encrypted Chat App the White House Liked? Full of Holes appeared first on WIRED.
Read More
Credit to Author: Lucian Constantin| Date: Thu, 09 Mar 2017 04:19:00 -0800
Attackers are widely exploiting a recently patched vulnerability in Apache Struts that allows them to remotely execute malicious code on web servers.
Apache Struts is an open-source web development framework for Java web applications. It’s widely used to build corporate websites in sectors including education, government, financial services, retail and media.
On Monday, the Apache Struts developers fixed a high-impact vulnerability in the framework’s Jakarta Multipart parser. Hours later, an exploit for the flaw appeared on Chinese-language websites, which was almost immediately followed by real-world attacks, according to researchers from Cisco Systems.
To read this article in full or to leave a comment, please click here

Credit to Author: Mary Branscombe| Date: Thu, 09 Mar 2017 04:11:00 -0800
Running your own email servers doesn’t do anything to differentiate your business from the competition (except in a bad way, if you get hacked). But avoiding the effort of managing and monitoring your own mail server isn’t the only advantage of a cloud service. The scale of a cloud mail provider like Office 365 means that malware and phishing attacks are easier to spot — and the protections extend beyond your inbox.
To read this article in full or to leave a comment, please click here
(Insider Story)
Read More