Detecting bot attacks | Salted Hash Ep 44
In this episode, host Steve Ragan talks with Engin Akyol, CTO at Distil Networks at the Black Hat 2018 conference, about bot account takeovers and how they can be detected.
Computer Security Articles
RSS Reader for Computer Security Articles
Independent
Alleged SIM Swapper Arrested in California
Credit to Author: BrianKrebs| Date: Wed, 22 Aug 2018 16:58:17 +0000
Authorities in Santa Clara, Calif. have arrested and charged a 19-year-old area man on suspicion hijacking mobile phone numbers as part of a scheme to steal large sums of bitcoin and other cryptocurrencies. The arrest is the third known law enforcement action this month targeting “SIM swappers,” individuals who specialize in stealing wireless phone numbers and hijacking online financial and social media accounts tied to those numbers.
Read MoreSSD Advisory – VirtualBox VRDP Guest-to-Host Escape
Credit to Author: SSD / Ori Nimron| Date: Mon, 20 Aug 2018 06:00:52 +0000
Vulnerability Summary VirtualBox has a built-in RDP server which provides access to a guest machine. While the RDP client sees the guest OS, the RDP server runs on the host OS. Therefore, to view the guest OS the RDP client will make a connection to the host OS IP address rather than the guest OS … Continue reading SSD Advisory – VirtualBox VRDP Guest-to-Host Escape
Read MoreIndian Bank Hit in $13.5M Cyberheist After FBI ATM Cashout Warning
Credit to Author: BrianKrebs| Date: Fri, 17 Aug 2018 19:27:10 +0000
On Sunday, Aug. 12, KrebsOnSecurity carried an exclusive: The FBI was warning banks about an imminent “ATM cashout” scheme about to unfold across the globe, thanks to a data breach at an unknown financial institution. On Aug. 14, a bank in India disclosed hackers had broken into its servers, stealing nearly $2 million in fraudulent bank transfers and $11.5 million unauthorized ATM withdrawals from more than two dozen cash machines across multiple countries.
Read More2 undocumented patches from Microsoft may solve the 1803 TLS 1.2 blocking problem
Credit to Author: Woody Leonhard| Date: Fri, 17 Aug 2018 09:42:00 -0700
Microsoft’s KB 4458166, released on Tuesday, explains that the push to Win10 version 1803 has been halted for machines running .Net applications that use the TLS 1.2 security protocol. Presumably, effective Tuesday, if you have a Win10 1709 or 1703 machine that’s running one of those programs (including, notably, QuickBooks Desktop), Microsoft won’t try to push 1803 on it.
IBM, Maersk launch blockchain-based shipping platform with 94 early adopters
Credit to Author: Lucas Mearian| Date: Fri, 17 Aug 2018 08:51:00 -0700
After launching a proof of concept earlier this year, IBM and Maersk have unveiled TradeLens, the production version of an electronic ledger for tracking global shipments; the companies say they have 94 participants piloting the system, including more than 20 port and terminal operators.
The jointly developed electronic shipping ledger records details of cargo shipments as they leave their origin, arrive in ports, are shipped overseas and eventually received.
Hanging Up on Mobile in the Name of Security
Credit to Author: BrianKrebs| Date: Thu, 16 Aug 2018 17:01:36 +0000
An entrepreneur and virtual currency investor is suing AT&T for $224 million, claiming the wireless provider was negligent when it failed to prevent thieves from hijacking his mobile account and stealing millions of dollars in cryptocurrencies. Increasingly frequent, high-profile attacks like these are prompting some experts to say the surest way to safeguard one’s online accounts may be to disconnect them from the mobile providers entirely.
Read MoreThrowback Thursday: How did…er, DIDN'T he do that?
Credit to Author: Sharky| Date: Thu, 16 Aug 2018 03:00:00 -0700
It’s 1977, and this network analyst pilot fish is working at a newly constructed data center — one with a big fence.
“The company had just gotten a new sense of needing physical security, so they had included a new, state-of-the-art security system,” says fish.
“It had electronic locks at a handful of doors in the building, a 10-foot-high fence with a motorized gate, and key-card reader stations by each of the locked doors and the gate.”
One day, company needs to bring a new communications line up between the data center and an office 10 miles away. Fish’s team leader decides the best way to do this without disrupting the users is to have fish go to the remote office at 4:30 a.m., while his team leader goes to the data center.