Independent – Page 384 – Computer Security Articles

Credit to Author: SSD / Maor Schwartz| Date: Thu, 18 May 2017 05:34:17 +0000

Vulnerability Summary The following advisory describes a Buffer Overflow vulnerability found in Bitdefender Engine PE. Bitdefender provides the Bitdefender “antimalware” engine for integration with other security vendors products. The engine is used in Bitdefender’s own products, for example in Bitdefender Internet Security 2017 and below. The antimalware engine is the core of the product, among … Continue reading SSD Advisory – Bitdefender Code Signing organizationName Buffer Overflow

Independent Krebs

May 18, 2017 admin

Fraudsters Exploited Lax Security at Equifax’s TALX Payroll Division

Credit to Author: BrianKrebs| Date: Thu, 18 May 2017 20:23:13 +0000

Identity thieves who specialize in tax refund fraud had big help this past tax year from Equifax, one of the nation’s largest consumer data brokers and credit bureaus. The trouble stems from TALX, an Equifax subsidiary that provides online payroll, HR and tax services. Equifax says crooks were able to reset the 4-digit PIN given to customer employees as a password and then steal W-2 tax data after successfully answering personal questions about those employees. In a boilerplate text sent to several affected customers, Equifax said the unauthorized access to customers’ employee tax records happened between April 17, 2016 and March 29, 2017. Beyond that, the extent of the fraud perpetrated with the help of hacked TALX accounts is unclear, and Equifax refused requests to say how many consumers or payroll service customers may have been impacted by the authentication weaknesses.

ComputerWorld Independent

May 18, 2017 admin

55% off Panda Security Ransomware and Virus Protection Products for Home Users – Deal Alert

Credit to Author: DealPost Team| Date: Thu, 18 May 2017 06:49:00 -0700

Panda security solutions will fully protect you against the newly released malware and ransomware attacks, and Panda is offering 55% off all security products for home users using the coupon code ANTIRANSOMWARE at checkout. See Panda’s Internet Security product here, or their Antivirus Pro product here, and enter the code at checkout to activate the 55% savings. This code will work for all Panda Security products for home users.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

May 17, 2017 admin

IDG Contributor Network: FTC to crack down on bogus ‘tech support’ lines

Credit to Author: Andy Patrizio| Date: Wed, 17 May 2017 11:30:00 -0700

In an extremely fortunate bit of timing, I visited my parents just as my father nearly fell for one of the worst scams floating around on the Internet. He had inadvertently clicked on a bogus link that popped up an equally bogus blue screen claiming his computer had been compromised and he needed to call a toll free “Microsoft” support line to get help.

Of course it wasn’t Microsoft and the pop up was fraudulent, but he didn’t know that. I practically screamed “hang up!” at him and explained why after he did.

These tech support scams have always been growing in frequency and severity, and the fact that they have an 800 number (or some derivative) not only gives them validity and makes people more willing to call, but also shows they are flying under the radar and using legitimate means against their victims.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

May 17, 2017 admin

Hackers reportedly hold Disney's newest Pirates of the Caribbean film for ransom

Credit to Author: Darlene Storm| Date: Wed, 17 May 2017 07:57:00 -0700

While some people are still fretting about WannaCry ransomware and possible variants of it, hackers are reportedly threatening to release Disney’s upcoming Johnny Depp film if Disney doesn’t pay a ransom.

Although Disney would not confirm that the stolen film is the fifth in the Pirates franchise, it doesn’t intend to bow to extortion. The ransomed movie is Pirates of the Caribbean: Dead Men Tell No Tales, according to Deadline; it is scheduled to hit theaters on May 26.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

May 16, 2017 admin

Shadow Brokers boasts of more Windows exploits and cyberespionage data

Credit to Author: Lucian Constantin| Date: Tue, 16 May 2017 08:13:00 -0700

A group of hackers that previously leaked alleged U.S. National Security Agency exploits claims to have even more attack tools in its possession and plans to release them in a new subscription-based service.

The group also has intelligence gathered by the NSA on foreign banks and ballistic missile programs, it said.

The Shadow Brokers was responsible for leaking EternalBlue, the Windows SMB exploit that was used by attackers in recent days to infect hundreds of thousands of computers around the world with the WannaCry ransomware program.

To read this article in full or to leave a comment, please click here

Independent Securiteam

May 16, 2017 admin

Know your community – Simone Margaritelli (@evilsocket)

Credit to Author: SSD / Maor Schwartz| Date: Tue, 16 May 2017 11:57:33 +0000

The guy that published a first hand account of how an allegedly government-sponsored firm, Dark Matter, tried to hire him to help them spy on civilian in the UAE. A former BlackHat that switch sides Bug Bounty hunter The author of the most known offensive open source software – BetterCAP, dSploit, AndroSwat and more! Please … Continue reading Know your community – Simone Margaritelli (@evilsocket)

Independent Securiteam

May 16, 2017 admin

SSD Advisory – AContent Multiple Vulnerabilities

Credit to Author: SSD / Maor Schwartz| Date: Tue, 16 May 2017 05:32:18 +0000

Vulnerabilities Summary The following advisory describes two (2) vulnerabilities types found in AContent version 1.3. AContent is an open source learning content management system (LCMS) used to create interoperable, accessible, adaptive Web-based learning content. It can be used along with learning management systems to develop, share, and archive learning materials. For those familiar with ATutor, … Continue reading SSD Advisory – AContent Multiple Vulnerabilities