Krebs – Page 89 – Computer Security Articles

Credit to Author: BrianKrebs| Date: Mon, 23 Oct 2017 19:42:42 +0000

It’s been just over a year since the world witnessed some of the world’s top online Web sites being taken down for much of the day by “Mirai,” a zombie malware strain that enslaved “Internet of Things” (IoT) devices such as wireless routers, security cameras and digital video recorders for use in large-scale online attacks. Now, experts are sounding the alarm about the emergence of what appears to be a far more powerful strain of IoT attack malware — variously named “Reaper” and “IoTroop” — that spreads via security holes in IoT software and hardware. And there are indications that over a million organizations may be affected already. Reaper isn’t attacking anyone yet. For the moment it is apparently content to gather gloom to itself from the darkest reaches of the Internet. But if history is any teacher, we are likely enjoying a period of false calm before another humbling IoT attack wave breaks.

Independent Krebs

October 16, 2017 admin

What You Should Know About the ‘KRACK’ WiFi Security Weakness

Credit to Author: BrianKrebs| Date: Mon, 16 Oct 2017 20:43:47 +0000

Researchers this week published information about a newfound, serious weakness in WPA2 — the security standard that protects all modern Wi-Fi networks. What follows is a short rundown on what exactly is at stake here, who’s most at-risk from this vulnerability, and what organizations and individuals can do about it.

Independent Krebs

October 16, 2017 admin

Krebs Given ISSA’s ‘President’s Award’

Credit to Author: BrianKrebs| Date: Mon, 16 Oct 2017 12:35:57 +0000

KrebsOnSecurity was honored this month with the 2017 President’s Award for Public Service from the Information Systems Security Association, a nonprofit organization for cybersecurity professionals. The award recognizes an individual’s contribution to the information security profession in the area of public service.

Independent Krebs

October 16, 2017 admin

Equifax Credit Assistance Site Served Spyware

Credit to Author: BrianKrebs| Date: Thu, 12 Oct 2017 21:03:46 +0000

Big-three consumer credit bureau Equifax says it has removed third-party code from its credit report assistance Web site that prompted visitors to download malicious software disguised as an update for Adobe’s Flash Player software.

Independent Krebs

October 16, 2017 admin

Hyatt Hotels Suffers 2nd Card Breach in 2 Years

Credit to Author: BrianKrebs| Date: Thu, 12 Oct 2017 17:44:30 +0000

Hyatt Corp. is alerting customers about another credit card breach at some hotels, the second major incident with the hospitality chain in as many years.

Independent Krebs

October 16, 2017 admin

Microsoft’s October Patch Batch Fixes 62 Flaws

Credit to Author: BrianKrebs| Date: Wed, 11 Oct 2017 14:18:40 +0000

Microsoft on Tuesday released software updates to fix at least 62 security vulnerabilities in Windows, Office and other software. Two of those flaws were detailed publicly before yesterday’s patches were released, and one of them is already being exploited in active attacks, so attackers already have a head start.

Independent Krebs

October 10, 2017 admin

Equifax Hackers Stole Info on 693,665 UK Residents

Credit to Author: BrianKrebs| Date: Tue, 10 Oct 2017 22:00:01 +0000

Equifax Inc. said today an investigation into information stolen in the epic data breach the company disclosed on Sept. 7 revealed that intruders took a file containing 15.2 million UK records. The company says it is now working to inform nearly 700,000 U.K. consumers whose data was stolen in the attack.

Independent Krebs

October 10, 2017 admin

Equifax Breach Fallout: Your Salary History

Credit to Author: BrianKrebs| Date: Sun, 08 Oct 2017 18:56:50 +0000

In May, KrebsOnSecurity broke a story about lax security at a payroll division of big-three credit bureau Equifax that let identity thieves access personal and financial data on an unknown number of Americans. Incredibly, this same division makes it simple to access detailed salary and employment history on a large portion of Americans using little more than someone’s Social Security number and date of birth — both data elements that were stolen in the recent breach at Equifax.