Independent – Page 380 – Computer Security Articles

Credit to Author: SSD / Maor Schwartz| Date: Wed, 31 May 2017 07:33:40 +0000

Vulnerability Summary The following advisory describe information disclosure vulnerability in Cisco DPC3928AD DOCSIS wireless router. The Cisco DPC3928AD DOCSIS is a home wireless router that is currently “Out of support” but is provided by ISPs on a large scale in many countries. Credit An independent security researcher has reported this vulnerability to Beyond Security’s SecuriTeam … Continue reading SSD Advisory – Cisco DPC3928AD DOCSIS Wireless Router Information Disclosure

ComputerWorld Independent

May 31, 2017 admin

Dual biometrics may just be the authentication answer we need

Credit to Author: Evan Schuman| Date: Wed, 31 May 2017 12:51:00 -0700

A major problem with biometric authentication is that, when it doesn’t work, there are few good options to proceed with the authentication. When the system says that’s not your eyeball, there’s no fallback akin to “Forgot your password?” You have to revert to some less discerning authentication method, such as a PIN.

Some vendors are trying to deal with this by using a simultaneous, multi-biometric method. “Simultaneous” is important because using two methods consecutively would take more time, resulting in end users’ resistance and lower participation rates.

One vendor, Sensory, is making serious headway in figuring out interesting ways to use dual biometrics.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

May 31, 2017 admin

Chrome bug that lets sites secretly record audio and video is not a flaw Google says

Credit to Author: Darlene Storm| Date: Wed, 31 May 2017 06:31:00 -0700

If your web browser was recording audio and video of you without any indication it was doing so, would you consider that invasion of privacy a security issue? Chrome doesn’t.

After AOL web developer Ran Bar-Zik discovered that a website can record audio and video without the red recording light appearing on the Chrome tab, he reported the bug.

But since users are the crux of problem, Google doesn’t classify it as a security flaw. That’s because before any audio or video recordings, a user has to give a site permission before it can access a user’s webcam or microphone.

To read this article in full or to leave a comment, please click here

Independent Securiteam

May 30, 2017 admin

SSD Advisory – Trend Micro Interscan Web Security Virtual Appliance Multiple Vulnerabilities

Credit to Author: SSD / Maor Schwartz| Date: Thu, 25 May 2017 11:52:44 +0000

Vulnerabilities Summary The following advisory describes three (3) vulnerabilities found in Trend Micro Interscan Web Security Virtual Appliance version 6.5. “The Trend Micro Hybrid Cloud Security solution, powered by XGen security, delivers a blend of cross-generational threat defense techniques that have been optimized to protect physical, virtual, and cloud workloads.” The vulnerabilities found in Trend Micro … Continue reading SSD Advisory – Trend Micro Interscan Web Security Virtual Appliance Multiple Vulnerabilities

ComputerWorld Independent

May 30, 2017 admin

Answering the WannaCry wake-up call

Credit to Author: Selena J. Linde, T. Markus Funk, Todd M. Hinnen and Jonathan G. Hardin| Date: Tue, 30 May 2017 04:35:00 -0700

The widespread WannaCry attack demonstrated the acute vulnerability of computer systems to ransomware attacks. There is no reason to think that larger, more sophisticated attacks aren’t already being planned — the perpetrators of WannaCry reportedly profited handsomely — and companies that have not assessed and addressed the risk posed to their systems by such attacks may remain vulnerable.

Companies can take prophylactic steps to protect their systems against ransomware, focusing on improving data security hygiene, establishing effective governance and raising employees’ awareness of the threat.

To read this article in full or to leave a comment, please click here

Independent Securiteam

May 29, 2017 admin

SSD Advisory – Trend Micro Deep Security Multiple Vulnerabilities

Credit to Author: SSD / Maor Schwartz| Date: Thu, 25 May 2017 11:52:44 +0000

Vulnerabilities Summary The following advisory describes three (3) vulnerabilities found in Trend Micro Deep Security version 6.5. “The Trend Micro Hybrid Cloud Security solution, powered by XGen security, delivers a blend of cross-generational threat defense techniques that have been optimized to protect physical, virtual, and cloud workloads. It features Trend Micro Deep Security, the market … Continue reading SSD Advisory – Trend Micro Deep Security Multiple Vulnerabilities

ComputerWorld Independent

May 29, 2017 admin

US 'might' ban laptops on all international flights & TSA may make you unpack carry-ons

Credit to Author: Darlene Storm| Date: Mon, 29 May 2017 06:54:00 -0700

The US “might” ban laptops from the cabin of all international flights into and out of the US and “likely will” require air travelers to unpack carry-on bags for TSA inspections.

Homeland Security Secretary John Kelly told Fox News Sunday anchor Chris Wallace that the US “might” ban laptops from the cabin of all international flights into and out of the US.

Pressed to reveal more, Kelly added, “There’s a real threat. Numerous threats against aviation, that’s really the thing that they are obsessed with, the terrorists, the idea of knocking down an airplane in flight, particularly if it’s a U.S. carrier, particularly if it’s full of mostly U.S. folks, people. It’s real.”

To read this article in full or to leave a comment, please click here

Independent Krebs

May 25, 2017 admin

Trump’s Dumps: ‘Making Dumps Great Again’

Credit to Author: BrianKrebs| Date: Fri, 26 May 2017 04:45:24 +0000

It’s not uncommon for crooks who peddle stolen credit cards to seize on iconic American figures of wealth and power in the digital advertisements for these shops that run continuously on various cybercrime forums. Exhibit A: McDumpals, a hugely popular carding site that borrows the Ronald McDonald character from McDonald’s and caters to bulk buyers. Exhibit B: Uncle Sam’s dumps shop, which wants YOU! to buy American. Today, we’ll look at an up and coming credit card shop called Trump’s-Dumps, which invokes 45’s likeness and promises to “make credit card fraud great again.”