Independent – Page 137 – Computer Security Articles

Credit to Author: BrianKrebs| Date: Tue, 04 Jun 2019 21:45:59 +0000

Medical testing giant LabCorp. said today personal and financial data on some 7.7 million consumers were exposed by a breach at a third-party billing collections firm. That third party — the American Medical Collection Agency (AMCA) — also recently notified competing firm Quest Diagnostics that an intrusion in its payments Web site exposed personal, financial and medical data on nearly 12 million Quest patients. Just a few days ago, the news was all about how Quest had suffered a major breach. But today’s disclosure by LabCorp. suggests we are nowhere near done hearing about other companies with millions of consumers victimized because of this incident: The AMCA is a New York company with a storied history of aggressively collecting debt for a broad range of businesses, including medical labs and hospitals, direct marketers, telecom companies, and state and local traffic/toll agencies.

ComputerWorld Independent

June 4, 2019 admin

WWDC: What you need to know about Sign In with Apple

Credit to Author: Jonny Evans| Date: Tue, 04 Jun 2019 11:32:00 -0700

There’s lots of interest in Apple’s new Sign In with Apple system, a highly secure, private way to sign in to apps and websites. Here’s what you need to know:

What is Sign In with Apple?

Apple has noticed that sign-in systems for services, apps, and websites rely on services that use your action of signing in to place cookies on your computer and track what you do.

Apple’s focus on privacy means it is attempting to restrict such practices, which is why it has developed the new system as a more private way to sign into these apps and services.

To read this article in full, please click here

ComputerWorld Independent

June 4, 2019 admin

It’s time to install the May Windows and Office patches

Credit to Author: Woody Leonhard| Date: Tue, 04 Jun 2019 05:08:00 -0700

May 2019 will go down in the annals of Patch-dom as the month we all ran for cover to fend off another WannaCry-caliber worm, but a convincing exploit never emerged.

Microsoft officially released Windows 10 version 1903 on May 21, but I haven’t yet heard from anyone who’s been pushed. All of the complaints I hear are from those “seekers” who went to the download site and installed 1903 with malice and forethought. A triumph of hope over experience.

This month, if you let Windows Update have its way on your machine, you may end up with a different build number than the person sitting next to you. Blame the gov.uk debacle for that: Folks with Windows set up for U.K. English get an extra cumulative update pushed onto their machines, whilst those who don’t fly the Union Jack will get the fix in due course next month.

To read this article in full, please click here

Independent Krebs

June 3, 2019 admin

Report: No ‘Eternal Blue’ Exploit Found in Baltimore City Ransomware

Credit to Author: BrianKrebs| Date: Tue, 04 Jun 2019 00:16:11 +0000

For almost the past month, key computer systems serving the government of Baltimore, Md. have been held hostage by a ransomware strain known as “Robbinhood.” Media publications have cited sources saying the Robbinhood version that hit Baltimore city computers was powered by “Eternal Blue,” a hacking tool developed by the U.S. National Security Agency (NSA) and leaked online in 2017. But new analysis suggests that while Eternal Blue could have been used to spread the infection, the Robbinhood malware itself contains no traces of it.

ComputerWorld Independent

May 31, 2019 admin

Who watches the iOS parental control apps?

Credit to Author: Jonny Evans| Date: Fri, 31 May 2019 07:36:00 -0700

Children are emotional. Protecting them matters. When it comes to technology, do you want developers you don’t know over whom you have no control watching what your children do on their devices?

Apple doesn’t

Apple recently cut developers off from using MDM software to drive third-party parental control solutions.

Developers were upset, and seventeen smaller developers you’ve probably never heard of got together just days before Apple’s WWDC 2019 conference with a well-organized PR campaign and a professional website to demand access to new API’s that let them develop parental control software for iOS.

To read this article in full, please click here

Independent Krebs

May 31, 2019 admin

NY Investigates Exposure of 885 Million Mortgage Documents

Credit to Author: BrianKrebs| Date: Fri, 31 May 2019 13:58:59 +0000

New York regulators are investigating a weakness that exposed 885 million mortgage records at First American Financial Corp. [NYSE:FAF] as the first test of the state’s strict new cybersecurity regulation. That measure, which went into effect in March 2019 and is considered among the toughest in the nation, requires financial companies to regularly audit and report on how they protect sensitive data, and provides for fines in cases where violations were reckless or willful.

Independent Krebs

May 30, 2019 admin

Canada Uses Civil Anti-Spam Law in Bid to Fine Malware Purveyors

Credit to Author: BrianKrebs| Date: Thu, 30 May 2019 22:21:47 +0000

Canadian government regulators are using the country’s powerful new anti-spam law to pursue hefty fines of up to a million dollars against Canadian citizens suspected of helping to spread malicious software.