RSS Reader for Computer Security Articles
Credit to Author: Lucas Mearian| Date: Wed, 21 Jun 2017 03:11:00 -0700
Application performance management (APM) software provider AppDynamics knows the value of a good SaaS platform, both in terms of offering workers the tools they need while keeping control over access to corporate apps and data.
To read this article in full or to leave a comment, please click here
(Insider Story)
Read More
Credit to Author: Eric Geier| Date: Fri, 02 Jun 2017 03:00:00 -0700
Whether you’re an IT student or have been in the field for many years, the learning never stops, especially in regards to security. Hackers are discovering vulnerabilities in our software and systems 24/7. They’ll always find new ways to steal data, infect computers and wreak havoc in the digital world.
To read this article in full or to leave a comment, please click here
(Insider Story)
Read More
Credit to Author: JR Raphael| Date: Tue, 20 Jun 2017 09:04:00 -0700
Google’s Chrome OS is far more powerful and versatile than most folks realize — and one of the platform’s greatest strengths over traditional desktop OSes is its deceptively simple approach to security.
Chromebooks, you see, make security almost entirely automatic and thought-free from a user’s perspective. The devices receive regular behind-the-scenes updates with no action required on your behalf; they utilize sandboxing to keep every page and application in its own isolated environment; and their software relies on a special hardware-connected setup that ensures every computer is always running tamper-free and official Google software every time it powers up.
To read this article in full or to leave a comment, please click here
Credit to Author: Preston Gralla| Date: Tue, 20 Jun 2017 08:29:00 -0700
Russian hacking of the 2016 election went deeper than breaking into the Democratic National Committee and the Clinton campaign — the Russians also hacked their way into getting information about election-related hardware and software shortly before voting began.
The Intercept published a top-secret National Security Agency document that shows exactly how the Russians did their dirty work in targeting election hardware and software. At the heart of the hack is a giant Microsoft security hole that has been around since before 2000 and still hasn’t been closed. And likely never will.
To read this article in full or to leave a comment, please click here
Credit to Author: SSD / Maor Schwartz| Date: Mon, 19 Jun 2017 16:17:18 +0000
Vulnerabilities Summary The following advisory describe two (2) vulnerabilities, a Path Traversal and a Missing Function Level Access Control, in Sophos XG Firewall 16.05.4 MR-4. Sophos XG Firewall provides “unprecedented visibility into your network, users, and applications directly from the all-new control center. You also get rich on-box reporting and the option to add Sophos … Continue reading SSD Advisory – Sophos XG Firewall Path Traversal
Read More
Credit to Author: BrianKrebs| Date: Sat, 17 Jun 2017 14:07:08 +0000
The Buckle Inc., a clothier that operates more than 450 stores in 44 U.S. states, disclosed Friday that its retail locations were hit by malicious software designed to steal customer credit card data. The disclosure came hours after KrebsOnSecurity contacted the company regarding reports from sources in the financial sector about a possible breach at the retailer.
Read More
Credit to Author: SSD / Maor Schwartz| Date: Fri, 16 Jun 2017 18:46:58 +0000
Vulnerability Summary The following advisory describes Unrestricted File Upload vulnerability that leads to Code Execution found in ManageEngine Firewall Analyzer and ManageEngine OpManager. ManageEngine Firewall Analyzer is a browser-based firewall/VPN/proxy server reporting solution that uses a built-in syslog server to store, analyze, and report on these logs. Firewall Analyzer provides daily, weekly, monthly, and yearly … Continue reading SSD Advisory – ManageEngine Code Execution
Read MoreCredit to Author: Sharky| Date: Fri, 16 Jun 2017 03:00:00 -0700
This city government is going through an extended validation process with one of its IT security providers, according to a pilot fish in the loop.
“I got an email that said to call them, since they couldn’t reach me at the number they had,” fish says. “That’s no surprise, because the number isn’t mine — it’s our Human Resources main line.
“I’ve told them in the past to call me at my actual number for this, but they always insist that they need a ‘published’ number.”
After yet another round of this for the new security certification, fish calls customer support for the security outfit and suggests they replace the HR number with the number for the city’s IT department. That’s on the city’s official website, so it should qualify as “published.”
To read this article in full or to leave a comment, please click here