RSS Reader for Computer Security Articles
Credit to Author: Wendy Zamora| Date: Wed, 22 Feb 2017 15:00:08 +0000
 | |
| What are some ways you can protect your information (and identity) during tax season? Here are tried and true tips to help ease the stress. Categories: Tags: identity thefttax fraudtax seasontwo-factor authentication |
Credit to Author: Andy Greenberg| Date: Wed, 22 Feb 2017 12:00:48 +0000
Israeli researchers show that innocent LED indicator on your computer can leak your deepest secrets. The post Malware Lets a Drone Steal Data by Watching a Computer’s Blinking LED appeared first on WIRED.
Read More
Credit to Author: John Ribeiro| Date: Wed, 22 Feb 2017 04:18:00 -0800
Microsoft has launched Project Sangam, a cloud service integrated with LinkedIn that will help train and generate employment for middle and low-skilled workers.
The professional network that was acquired by Microsoft in December has been generally associated with educated urban professionals, but the company is now planning to extend its reach to semi-skilled people in India.
Having connected white-collared professionals around the world with the right job opportunities and training through LinkedIn Learning, the platform is now developing a new set of products that extends this service to low- and semi-skilled workers, said Microsoft CEO Satya Nadella at an event on digital transformation in Mumbai on Wednesday.
To read this article in full or to leave a comment, please click here
Credit to Author: Eric Geier| Date: Wed, 22 Feb 2017 03:00:00 -0800
To keep private Wi-Fi networks secure, encryption is a must-have — and using strong passwords or passphrases is necessary to prevent the encryption from being cracked. But don’t stop there! Many other settings, features and situations can make your Wi-Fi network as much or even more insecure as when you use a weak password. Make sure you’re not leaving your network vulnerable by doing any of the following.
To read this article in full or to leave a comment, please click here
(Insider Story)
Read More
Credit to Author: Mary Branscombe| Date: Tue, 21 Feb 2017 12:50:00 -0800
Every business needs to have a process in place for handling security vulnerability reports, but some organizations take a much more proactive approach to dealing with security researchers.
To read this article in full or to leave a comment, please click here
Read MoreCredit to Author: Maor Schwartz| Date: Tue, 21 Feb 2017 13:51:34 +0000
Vulnerability Summary The following advisory describes a FTP protocol stream injection vulnerability found in Oracle Java. Java is a general-purpose computer programming language that is concurrent, class-based, object-oriented, and specifically designed to have as few implementation dependencies as possible. It is intended to let application developers “write once, run anywhere” (WORA). Credit An independent security … Continue reading SSD Advisory – Oracle Java FTP Stream Injection
Read MoreCredit to Author: Maor Schwartz| Date: Tue, 21 Feb 2017 07:44:16 +0000
Vulnerabilities Summary The following advisory describes 2 vulnerabilities found in HiSilicon application-specific integrated circuit (ASIC) chip set firmware. HiSilicon provides ASICs and solutions for communication network and digital media. These ASICs are widely used in over 100 countries and regions around the world. In the digital media field, HiSilicon has already released the SoC and … Continue reading SSD Advisory – HiSilicon multiple vulnerabilities
Read More
Credit to Author: Lucian Constantin| Date: Tue, 21 Feb 2017 10:11:00 -0800
The Java and Python runtimes fail to properly validate FTP URLs, which can potentially allow attackers to punch holes through firewalls to access local networks.
On Saturday, security researcher Alexander Klink disclosed an interesting attack where exploiting an XXE (XML External Entity) vulnerability in a Java application can be used to send emails.
XXE vulnerabilities can be exploited by tricking applications to parse specially crafted XML files that would force the XML parser to disclose sensitive information such as files, directory listings, or even information about processes running on the server.
Klink showed that the same type of vulnerabilities can be used to trick the Java runtime to initiate FTP connections to remote servers by feeding it FTP URLs in the form of ftp://user:password@host:port/file.ext.
To read this article in full or to leave a comment, please click here