Independent – Page 436 – Computer Security Articles

Credit to Author: Michael Kan| Date: Wed, 15 Feb 2017 08:13:00 -0800

Businesses targeted in email scams don’t always have to play the victim. They can actually fight back.

Researchers at Dell SecureWorks have documented how they identified a suspected email scammer from Nigeria by essentially playing along with the scheme to fool the attacker into revealing his true whereabouts.

Anyone can use these tips, said Joe Stewart, director of malware research at SecureWorks. “We’re letting [the scammers] give us all the information about themselves,” he said.

The email scheme involved a fraudster impersonating a CEO in what’s called a business email spoofing attack. The goal is often to trick a victim into wiring funds to the scammer’s bank account.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

February 15, 2017 admin

Doubts abound over U.S. action on cybersecurity

Credit to Author: Michael Kan| Date: Wed, 15 Feb 2017 04:02:00 -0800

How should the U.S. respond to cyberattacks? That’s been a major question at this year’s RSA security conference, following Russia’s suspected attempt to influence last year’s election.

Clearly, the government should be doing more on cybersecurity, said U.S. lawmakers and officials at the show in San Francisco, but they admit that politics and policy conflicts have hampered the government’s approach.

“I wish the federal government could do this, but it’s very hard, unfortunately, due to partisan politics,” said Virginia Gov. Terry McAuliffe, during a speech at the show. “They haven’t been able to take the lead on this issue as they should have.”

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

February 14, 2017 admin

Microsoft shelves all February security updates

Credit to Author: Gregg Keizer| Date: Tue, 14 Feb 2017 10:35:00 -0800

Microsoft today took the unprecedented step of postponing an entire month’s slate of security updates for Windows and its other products just hours before the patches were to begin rolling out to customers.

“We discovered a last-minute issue that could impact some customers and was not resolved in time for our planned updates today,” Microsoft said in a post to the MSRC (Microsoft Security Research Center) blog. “After considering all options, we made the decision to delay this month’s updates.”

Today was set as Patch Tuesday, the monthly release of security fixes from Microsoft. Normally, Microsoft issues the updates around 10 a.m. PT (1 p.m. ET). Although Microsoft did not time stamp its blog post, the SAN Institute’s Internet Storm Center (ISC) pointed out the delay at 8:22 a.m. PT (11:22 ET).

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

February 14, 2017 admin

Russian cyberspies blamed for U.S. election hacks are now targeting Macs

Credit to Author: Lucian Constantin| Date: Tue, 14 Feb 2017 10:28:00 -0800

Security researchers have discovered a macOS malware program that’s likely part of the arsenal used by the Russian cyberespionage group blamed for hacking into the U.S. Democratic National Committee last year.

The group — known in the security industry under different names including Fancy Bear, Pawn Storm, and APT28 — has been operating for almost a decade. It is believed to be the sole user and likely developer of a Trojan program called Sofacy or X-Agent.

X-Agent variants for Windows, Linux, Android, and iOS have been found in the wild in the past, but researchers from Bitdefender have now come across what appears to be the first macOS version of the Trojan.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

February 14, 2017 admin

Microsoft's president wants a Geneva Convention for cyberwar

Credit to Author: Blair Hanley Frank| Date: Tue, 14 Feb 2017 08:52:00 -0800

Microsoft is calling for a Digital Geneva Convention, as global tensions over digital attacks continue to rise. The tech giant wants to see civilian use of the internet protected as part of an international set of accords, Brad Smith, the company’s president and chief legal officer, said in a blog post.

The manifesto, published alongside his keynote address at the RSA conference in San Francisco on Tuesday, argued for codifying recent international norms around cyberwarfare and for establishing an independent agency to respond to and analyze cyberattacks.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

February 14, 2017 admin

The Cybersecurity Canon

Palo Alto Networks' CSO Rick Howard sits down at RSA 2017 with Infoworld's Fahmida Rashid to talk about what the Cybersecurity Canon is, and his top picks for inclusion this year.

ComputerWorld Independent

February 14, 2017 admin

Cybersecurity and the Cloud in 2017

Infoworld Senior Writer Fahmida Rashid chats with Palo Alto Networks' CSO Rick Howard about the biggest cybersecurity challenges facing businesses working in the cloud in 2017.

ComputerWorld Independent

February 14, 2017 admin

Forget the network perimeter, say security vendors

Credit to Author: Lucian Constantin| Date: Tue, 14 Feb 2017 08:13:00 -0800

What if all your company’s computers and applications were connected directly to the Internet? That was the assumption behind BeyondCorp, a new model for network security that Google proposed back in 2014, and it’s one that’s starting to get some attention from networking and security vendors.

Enterprises have moved beyond the traditional workspace in recent years, allowing employees to work remotely by using their personal devices and accessing apps in private or public clouds. To bring roaming workers back into the fold, under the security blanket of their local networks, companies rely on VPNs and endpoint software to enforce network access controls.

To read this article in full or to leave a comment, please click here